EasyTier – P2P mesh VPN written in Rust using Tokio

158 pointsposted 8 months ago
by wucke13

33 Comments

esafak

8 months ago

What are some notable uses of P2P these days? You don't hear about it much any more.

I believe P2P rose to prominence two decades ago as a response to the cost of bandwidth. I wonder if similar methods could effectively overcome the cost of compute for LLMs. Here are two projects I found from a quick search:

Serving: https://petals.dev/

Training: https://github.com/learning-at-home/hivemind

klabb3

8 months ago

> What are some notable uses of P2P these days?

Im using it for Payload[1] in for LAN and WAN transfers (if possible). Reduce operational costs (especially if you run on public clouds and have to pay extortion rates for egress) and also you must use it to capitalize on latency/throughput in LAN. Moving data from A->server->B means your need multiple servers on the edge, which means you kinda need to depend on mega-corps. If your destination is closer it’s easier for your application infra. I’d like to reverse the question, why send all data through another machine in the cloud if you don’t need to?

That said, p2p being flaky and bad is real. It’s a self-fulfilling prophecy, because middlebox engineers say ”let’s add these layers of garbage and nobody will notice unless they use p2p but its so bad who uses it anyway”. Well, yeah. It’s worse because of you! Philosophically, I also think p2p is a necessary precondition to a decentralized internet without tiers (ie client and server separation).

Anyway, rant aside, you have to currently have a relay backup if you need availability. P2P will fail often even with the smartest hole punching algorithms. This makes things more complicated, because you need a hybrid solution. However, it’s not as complicated as WebRTC, that thing is an overengineered mess. It works, but I don’t like the complexity it brings.

[1]: https://payload.app/

jrm4

8 months ago

Personally (as I mentioned elsewhere) I still use Tinc for my devices because I prefer "set the thing up once and never much think about it again;"

The loss of a "central server" or whatever never matters.

api

8 months ago

Cloud bandwidth is still crazy expensive if you use big cloud, and a lot of people think that’s all there is.

There are a lot of things that do P2P under the hood, usually with cloud relay fallback so it always works. You just don’t hear much about it because it’s not a selling point, just an under the hood detail.

nonethewiser

8 months ago

Nintendo Switch multiplayer

*shudders*

jrm4

8 months ago

Anyone know how this compares to Tinc? I don't much know what development on it is like these days, but it for me is one of the best "set it and forget it" things I regularly use to keep my devices talking to each other.

I'm aware that with things like this you're supposed to use the latest and greatest like Wireguard or whatever, but nothing really does the p2p thing as easy as Tinc, and given secondary encryption measures (e.g. I'm sshing and httpsing to those machines) I'm just not worrying much about it right now.

jxjnskkzxxhx

8 months ago

Firs time I'm hearing about tinc, looks great. How does it compare to wireguard? Pros and cons?

wucke13

8 months ago

This seems to go into a similar direction like ZeroTier, but actually open source. There is almost no discussion of this in the western hemisphere, but I'd be interested what people think about it.

jen20

8 months ago

Can you elaborate on what you mean by "no discussion in the western hemisphere"? Zerotier is fairly well known in the US.

csomar

8 months ago

Anyone familiar with the Chinese tech scene can explain what this is at the bottom?

# Zhejiang ICP No. 2024137671-1

It takes you to some government website but it is not clear whether this is a business registration or something else.

detaro

8 months ago

You need a government license to operate a website in China, and that's their license number.

akie

8 months ago

Aren't you making yourself vulnerable to unknowingly sending (potentially loads of) illicit traffic from your ip address into the world?

I'm not sure if I'd be up for that, to be honest...

smilliken

8 months ago

Like other products in this category, this is for private networks, internal to your company or self. I don't think it's an intended use case to connect to computers not in your control.

It's useful when you have computers that talk to each other over the internet, likely without public interfaces, and using protocols that may or may not be secure.

ray023

8 months ago

This is exactly that by thought was. This solves nothing what the traditional VPN or TOR is used for. It's like running an exit node from your hope IP address. You do not want to do that.

zanfr

8 months ago

can't quite figure out exactly the ins and outs but it seems to masquerade as wireguard. which would make VPNs redundant as it would itself be a VPN.

this would mean, for instance, torrents that are wireguarded between peers by default. sure you will see tons of IPs connected via wireguard but who is going to bother intercepting them?

throawayonthe

8 months ago

this is more like zerotier/tailscale - sorta a virtual LAN

thunder-blue-3

8 months ago

it’s like someone saw Tor and said "but what if we removed all the safeguards?"

volemo

8 months ago

> A simple, decentralized mesh VPN with WireGuard support.

How does it square up against DPI censorship techniques that successfully block WireGuard?

asno3030

8 months ago

From personal experience, the great firewall picks up on wireguard usage when tunneling to my home computer (not in China) and throttles the connection. I am guessing that this would have similar limitations when using wireguard.

MallocVoidstar

8 months ago

This is a Chinese project (hosted inside China), so probably not very well.

dpc_01234

8 months ago

The primary use case here seems to be connecting bunch of your own devices so they have direct connectivity over a VPN, just like Tailscale and Zerotier, etc.

I don't know why people focus on Tor and censorship associations. The meaning of a VPN is just a virtual network between devices, not anonymization.

ThinkBeat

8 months ago

This looks cool.

If every node is both a server and a client then will a lot of traffic use my node/server as an exit node?

I see there is a separate list of public servers. Presumably, these are people running EasyTier nodes/servers who are willing to allow strangers in?

If I start my own node and I wish to connect to the mesh is that part of the reason for pubic nodes?

BobbyTables2

8 months ago

Not trying to be xenophobic here, but “peer to peer VPN” and a domain ending in “.cn” seems a bit odd, no?

Loranubi

8 months ago

Can this be a replacement for Hamachi?

hofrogs

8 months ago

Yes. There is also ZeroTier, but it is proprietary (as is Hamachi)

unquietwiki

8 months ago

Given its integration of WireGuard, this might be an open-source competitor more to Netmaker than ZeroTier. Not sure how scalable EasyTier is for a business use-case...