“Create P2P tunnels instantly that bypass any network, firewall, NAT restrictions and expose your local network to the internet securely, no Dynamic DNS required.”

  • Static IP address and Dynamic DNS can expose your network to attackers on the internet. With Holesail, you expose only the port you choose.

    Er, wut? If you’re exposing a port, then your public IP is being used, as a port is a subset of an IP interface. So even Holesail uses the public IP in some way…thats how the internet works. Unless they’re only making outbound connections, which isn’t a new idea at all - Hamachi was doing it 20 years ago.

    This sounds like FUD to me - of course your public IP is used, whether static or dynamic. How do they supposedly mitigate this risk?

    There’s nothing on the home page saying how it works, or how it’s different than current solutions.

    I’m intrigued to see a new tool in this space, but this one is starting off leaving a bad taste. Even Tailscale admits they use Wireguard, and even have a comparison between Wireguard and Tailscale that’s pretty honest (though they focus on what Tailscale adds).

    Being open and transparent is a minimum today - anything less and it’s not worth the time for a second look.

    •  makeasnek   ( @makeasnek@lemmy.ml ) OP
      link
      fedilink
      English
      6
      edit-2
      3 months ago

      My guess is that this works similar to a Tor hidden service, where you can’t even access the open port without a key of some kind and then you can only access that specific port. It’s not the same as having a port open on your IPv4 address since from the router’s perspective it’s only an outgoing connection. Somebody portscanning you wouldn’t find that port open. Though I could be wrong.

    • I know ngrok is something different, but do you know if it uses a technology similar to Hamachi too? I’m asking because I discovered that ngrok works even without a public IP (when you use a mobile connection for example).

    • Because you’re only ‘exposing’ the port on the peer to peer network.

      You “publish” a port to holesail, then clients have to create a local proxy via holesail before they can access it.

      I agree, It’s a dumb pointless claim. But I don’t think it’s misleading.

      It looks like holesail is just tailscale, but on a much smaller scale. It’s not networks, it’s just ports.