2 points
Interesting. I didn’t know that syncthing does hole punching.
From a defense perspective, how would this work with an enterprise firewall, with UDP/TCP only allowed to specific destinations or specific sources. Example: only the internal DNS relay server can access 53/UDP and only the internal proxy server can access 80/443. What I mean is in a network with a very closed firewall, how would Syncthing be able to connect with peers?
4 points
*
If the firewall was properly locking down servers to functions then it shouldn’t work. But if it has general Web access sync thing is very resilient
This is the reason people use sync thing and recommend it, it’s really hard to kill
3 points
*
