In the context of ssh an outgoing connection that allows multiple incoming connections is called a reverse tunnel. The moral is that IP Masquerade on a consumer router is not a firewall.pretty much what i expectedSo the answer seems to be easy how connection to Pi5 is done from browser in internet:
The Pi5 opens session to connect server and that is kept open every 15 seconds from connect server.
When internet browser seeks access to Pi5 from connect server ...
... the connect server seems to make my Pi5 open ssh connection with the browser.
when the pi boots or signs in, it opens an OUTGOING connection, and nearly all routers allow that
and while the connection is "outgoing", data can flow in both directions, and that lets you back in
its the same way any vpn would work
Does rpi-connect use STUN (Session Traversal Utilities for NAT) or something else?
Statistics: Posted by ejolson — Mon Jul 01, 2024 3:25 am