On occasion I find myself needing to send a file at least a few gigabytes in size to a friend across our slow ISPs but haven’t found a satisfying solution. I usually end up creating a private torrent with the announce address of my own IP. Even though it’s slow - it basically never reaches my max upload speed for some reason, it is at least resilient if there are ever any network glitches.
Does anyone else face this same challenge?
EDIT: Thank you for the awesome suggestions! I have some homework to do on these
My largest file transfer I have done via USB disk. You simply don’t transfer multiple terabytes over the net.
I really like Wormhole for this exact purpose.
I use an ancient HTTP File Server program called HFS from Rejetto. Very light weight. Supports making user accounts and whatnot if you want.
I usually just turn it on for a transfer and don’t leave it up these days, but still comes in handy on occasion.
rsync
Nextcloud is great for this
RFC 2549: https://www.rfc-editor.org/rfc/rfc2549
This problem was solved years ago: https://spectrum.ieee.org/pigeonbased-feathernet-still-wingsdown-fastest-way-of-transferring-lots-of-data
You can OnionShare if you’re worried about privacy.
I use https://www.sendbig.com/ I haven’t read their privacy policy, though.
Before I moved I used to use my web server.
My Domain . Com / files . Zip And I would set a password on the zip. After they download it, they tell me and I remove the file.
Me and my friend used netcat to transfer 30 GB of files put into a zip. Very fun, would not recommend
Syncthing
You can use syncthing to transfer files across the internet? How? I thought it was only for local networks
It just works, there’s no “how”. Take one of the devices outside, connect to the internet, done.
By default out of the box it will transfer over the internet if it needs to.
Er, wait, are you using Syncthing for its intended purpose of syncing files across devices on your local network? And then exposing that infrastructure to the internet? Or are you isolating Syncthing instances?
The user can choose. Please note you first much accept another client by its fingerprint.
You’re probably thinking of PairDrop (which also allows extranet).
Syncthing is not limited to local network. It’s hole punching is one of the major features
Yep, I’ve got a buddy in another country that I needed to share a group of files with, it was several gigs and we were both editing things.
We setup a syncthing connection and once we were synced it just worked. I also use it on my LAN to sync personal files, but to share with him we both just set up a folder and I just shared that one folder with him while the rest of my shares stayed private on the LAN.
Syncthing is amazing.
The fact that Syncthing seems to solve CGNAT on its own has me wondering why there are not more solutions for the server/home side.
Why does Wireguard or any other VPN not work like Tailscale or Zerotier?
Why don’t torrent clients can’t work with IPv6 to seed more?
Why doesn’t Plex adopt a similar mechanic like Syncthing to expose the media over the Internet instead of being a prisoner of CGNAT?
I know I am just throwing different options with my personal frustrations lol, but I hope you get what I am trying to mean, Plex, torrent and home VPN users shouldn’t become masters at networking, especially when the documentation for the tools IS NOT ENOUGH.
Why does Wireguard or any other VPN not work like Tailscale or Zerotier?
tailscale and zerotier are wireguard, but with a public server that helps with NAT. Syncthing uses a public server for that too.
wireguard was specifically made to be as simple and minimalistic as possible.
Why don’t torrent clients can’t work with IPv6 to seed more?
is there such a problem? honest question. But I think that might be a different issue
Why doesn’t Plex adopt a similar mechanic like Syncthing to expose the media over the Internet instead of being a prisoner of CGNAT?
maybe they just don’t see working on it profitable enough
tailscale and zerotier are wireguard, but with a public server that helps with NAT. Syncthing uses a public server for that too.
wireguard was specifically made to be as simple and minimalistic as possible.
Zerotier wasn’t always Tailscale was it?
is there such a problem? honest question. But I think that might be a different issue
You need to be connectable to download from all the peers, likewise non connectable users can’t download from you, and how do you become connectable? By opening your ports, something that might seem archaic from somebody who has totally embraced IPv6.
maybe they just don’t see working on it profitable enough
Yeah maybe.
Just to clarify, I have several workarounds for the 3 issues that have involved spending more money or not to get rid of CGNAT.
-
For the 1st one… Well I already mentioned it, I am a ZT and Tailscale user, I did try Wireguard from a VPS once though, but I didn’t like that I was entirely dependant of my upload speed, maybe I had my Iptables wrongly configured but I usually got faster speeds just using ZT or Tailscale (I didn’t need to relay in the US VPS server).
-
For Torrenting… I actually haven’t found a solution to use IPv6… I did use a container client to use my VPS at that time though, it being Digital Ocean and thus getting a DMCA letter for downloading TWD me being a LATAM user was… A kinda funny experience, with that said I stopped that project immediately, it was fun to give back to the community with my 24/7 NAS always seeding though.
-
For the last point… Well, I do use ZT and Tailscale to access the server myself, but when I want to expose it, I usually do it with a reverse proxy pointing out to my IPv6 address, and more recently using a Tailscale funnel, I haven’t tried it thoroughly, but at least it seems to connect without using Plex’s relays.
As you can see, one needs to be well prepared with workarounds to deal with CGNAT.
Zerotier wasn’t always Tailscale was it?
it is not tailscale. but also it seems I was wrong and its not wireguard either
You need to be connectable to download from all the peers, likewise non connectable users can’t download from you, and how do you become connectable? By opening your ports, something that might seem archaic from somebody who has totally embraced IPv6.
I know what opening ports is, I only have v4. But I thought you have difficulties with bittorrent over v6. or is it that you still need to open ports for v6, in the firewall or something?
it is not tailscale. but also it seems I was wrong and its not wireguard either
Yeah, I totally meant Wireguard there, my bad.
I know what opening ports is, I only have v4. But I thought you have difficulties with bittorrent over v6. or is it that you still need to open ports for v6, in the firewall or something?
I don’t have difficulties to download, I have difficulties to seed because I am CGNATED and it seems Qbittorrent or any Torrent client really can’t use IPv6 to be more connectable thus seed more.
I want to seed more without having to pay for it or do convoluted workarounds.
-
> is there such a problem? honest question. But I think that might be a different issue
Yes, that is a problem. We’re still in a world where you need to manually enable port forwarding in order to get better seeding for bittorrent clients, and if you have CGNAT you’re SOL (short of using a VPN or something to bounce through an external host).
It’s likely because torrent software is older (& in crappier languages), and came about before CGNAT was a thing.
> is there such a problem? honest question. But I think that might be a different issue
Yes, that is a problem. We’re still in a world where you need to manually enable port forwarding in order to get better seeding for bittorrent clients, and if you have CGNAT you’re SOL (short of using a VPN or something to bounce through an external host).
I don’t understand, sorry. they were saying that something doesn’t work as expected IPv6. but CGNAT is not used for IPv6, is it? and you don’t really forward ports either, maybe you allow them through in the routercs firewall but notnsure because I don’t have v6
We’re still in a world where you need to manually enable port forwarding
well, you don’t need to, often you can also enable the upnp function in the router so that any software can open all the ports it wants, which is a terrible idea security-wise
It’s very much a WAN solution too. I use it to push my files to a Pi Zero W that’s 200 miles from my house. I use it as an off site store of my files. The Pi is connected as an untrusted device in Syncthing so that all files sit encrypted at rest.
Syncthing has public releays enabling it to work (dunno if one or none need to be public) without both parties being exposed.
Syncthing is not just for LAN use. Even their homepage mentions transmitting data over the internet
I’ve been using it to sync devices over the internet for years. It’s also how people use it to sync from say their desktop to their phones, remote server, etc.
If you watch your network firewall Syncthing does reach out to servers on the internet to help it find other devices so e.g. if you enter the other device’s ID (example ABCDEFG-ABCDEFG-ABCDEFG-ABCDEFG-ABCDEFG-ABCDEFG-ABCDEFG-ABCDEFG) it can reach out over the internet to find that specific ID to pair with. I think Syncthing uses a sort of DHT resolver to find other devices, I know on my firewall I had to whitelist Syncthing’s servers to make it work.
I was going to try to link you some references but their forums seem to have connection issues at the moment, you may want to search around later if you’re interested how Syncthing works over the internet.
Syncthing is designed to be used over the internet, it’s why it supports NAT hole punching, relay servers, and discovery servers.
wormholeis good; also its CLI.Wormhole or croc
I’d have to have friends across the internet that wanted files first…
Super easy. Spin up an OpenVPN server, forwarding the right ports to your server. Now spin up an Apache server with the folder your file’s in as server root. Send the client config for your VPN to your friend, along with the local address of your HTTP server. Now they can install the OpenVPN client on their PC and download the file from your HTTP server. Once you’re done, tear down all your servers, and don’t forget to unforward the ports. Couldn’t be easier.
/s
I have non-ironically gotten responses like this
Okay can you explain why thats a sarcastic answer? Is one of those first three steps way harder than I think it is?
Cause that’s not simple or easy at all. It takes a fair bit of knowledge to set up all of these things.
openvpn and apache can be very time consuming to set up if you do it for the first time
