{"id":32659,"date":"2019-10-31T21:48:15","date_gmt":"2019-10-31T18:48:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/hozhdenie-po-mukam-ili-shifrovanie-trafika-v-direct-connect-ch-3\/"},"modified":"2019-10-31T21:48:15","modified_gmt":"2019-10-31T18:48:15","slug":"hozhdenie-po-mukam-ili-shifrovanie-trafika-v-direct-connect-ch-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/hozhdenie-po-mukam-ili-shifrovanie-trafika-v-direct-connect-ch-3","title":{"rendered":"Struggles or Traffic Encryption in Direct Connect, Part 3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

And no one pours young wine into old skins; otherwise, the young wine will burst the skins, and the wine will be spilled, and the skins will be destroyed; but new wine must be poured into new skins; then both are preserved.<\/i> Luke 5:37,38<\/p>\n

In April of this year, the administration of the largest DC hub in the world announced the start of support for secure connections. Let's see what came of it.<\/a><\/noindex><\/p>\n

Translate to English<\/a><\/noindex><\/p>\n

Freedom of conscience<\/b><\/p>\n

Since everything I thought about this has already been said earlier<\/a><\/noindex>, this part of the article shouldn't even exist.<\/p>\n

If you need security, choose a modern client and ADCs hub<\/a><\/noindex>. Point.<\/p><\/blockquote>\n

But what if we use an NMDC hub, that is, a regular<\/i>? \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u0434\u0451\u0442\u0441\u044f \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u0441 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0430\u0440\u044b\u0445, \u043e\u0447\u0435\u043d\u044c \u0441\u0442\u0430\u0440\u044b\u0445, \u043d\u043e\u0432\u044b\u0445 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 DC \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041d\u043e \u2013 \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0441\u0434\u0435\u043b\u0430\u043d\u043e, \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0441\u0435\u0431\u044f \u0436\u0434\u0430\u0442\u044c.<\/p>\n

Mafia<\/b><\/p>\n

First, secure 'client-client' connections are established regardless of the presence of 'client-hub' encryption.<\/p>\n

Second, it is impossible to visually determine a hub that does or does not relay requests for secure connections.<\/p>\n

Third, to date, nearly all DC clients have connection encryption enabled by default.<\/p>\n

Remember? Now let's check<\/a><\/noindex> the TLS settings on the user side, connect to the hub, and carefully try to connect clients to each other.<\/p>\n

NMDCs hub<\/b><\/p>\n

\"Struggles
\n
\nDC++ categorically rejects secure connections on NMDC hubs, but fully approves of regular ones. The reason has been stated by the developers multiple times \u2013 there\u2019s no need to keep walking on old rakes!<\/p>\n

StrongDC++ only supports TLS v.1.0, and modern clients do not connect to it at all. GreylinkDC++ is even worse.<\/p>\n

FlylinkDC++ willingly falls into compatibility mode with older clients. But for how long and is it even necessary?..<\/p>\n

EiskaltDC++ does the same, but less willingly, only for its own needs.<\/p>\n

ADC hub(s)<\/b><\/p>\n

\"Struggles
\n
\nIt's exactly the same, but DC++ is actively getting involved.<\/p>\n

EiskaltDC++ seems to make no distinction between NMDC and ADC hubs, strict with both.<\/p>\n

And what if we filter out outdated clients by requiring TLS v.1.2 support at the entrance?..<\/p>\n

ADC hub(s)<\/b><\/p>\n

\"Struggles
\n
\nMagnificent, isn\u2019t it?<\/p>\n

Conclusions<\/b><\/p>\n

The reader may think that it\u2019s best to use FlylinkDC++ and have no problems, but what you forget is that this client is problematic<\/a><\/noindex> in itself. One of the latest incidents I'm aware of \u2013 the inability to set the checkbox for supporting secure connections for many users via remote config, and the actual absence of it in all earlier versions.<\/p>\n

Therefore, due to numerous historical and political reasons, using NMDC hubs as a basis for secure interclient connections is complicated or even impossible. By using an NMDC hub, you are guaranteed to lose the ability to connect with a portion of users, while gaining security \u2013 but without guarantees.<\/p>\n

Recommendations<\/b><\/p>\n

Start using ADC hubs, even if only as a trial. Discard outdated clients, and if you are an admin of a DC hub, ban Strong and Gray on your server. For behold,<\/p>\n

Every kingdom divided against itself will be brought to desolation, and every city or house divided against itself will not stand.<\/i> Matt. 12:25
\n
Source: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u043e\u043b\u043e\u0434\u043e\u0433\u043e \u0432\u0438\u043d\u0430 \u0432 \u043c\u0435\u0445\u0438 \u0432\u0435\u0442\u0445\u0438\u0435; \u0430 \u0438\u043d\u0430\u0447\u0435 \u043c\u043e\u043b\u043e\u0434\u043e\u0435 \u0432\u0438\u043d\u043e \u043f\u0440\u043e\u0440\u0432\u0435\u0442 \u043c\u0435\u0445\u0438, \u0438 \u0441\u0430\u043c\u043e \u0432\u044b\u0442\u0435\u0447\u0435\u0442, \u0438 \u043c\u0435\u0445\u0438 \u043f\u0440\u043e\u043f\u0430\u0434\u0443\u0442; \u043d\u043e \u043c\u043e\u043b\u043e\u0434\u043e\u0435 \u0432\u0438\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432 \u043c\u0435\u0445\u0438 \u043d\u043e\u0432\u044b\u0435; \u0442\u043e\u0433\u0434\u0430 \u0441\u0431\u0435\u0440\u0435\u0436\u0435\u0442\u0441\u044f \u0438 \u0442\u043e \u0438 \u0434\u0440\u0443\u0433\u043e\u0435. \u041b\u043a. 5:37,38 \u0412 \u0430\u043f\u0440\u0435\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0432 \u043c\u0438\u0440\u0435 DC \u0445\u0430\u0431\u0430 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u0414\u0430\u0432\u0430\u0439\u0442\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24449,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32659","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Walking Through Torments or Encrypting Traffic in Direct Connect, Part 3 | ProHoster","description":"And no one puts new wine into old wineskins; otherwise, the new wine will burst the skins, and it will be spilled, and the skins will be ruined; but new wine must be put into new wineskins; and both are preserved. Luke.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/hozhdenie-po-mukam-ili-shifrovanie-trafika-v-direct-connect-ch-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e \u043c\u0443\u043a\u0430\u043c \u0438\u043b\u0438 \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 Direct Connect, \u0447.3 | ProHoster","og:description":"\u0418 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u043e\u043b\u043e\u0434\u043e\u0433\u043e \u0432\u0438\u043d\u0430 \u0432 \u043c\u0435\u0445\u0438 \u0432\u0435\u0442\u0445\u0438\u0435; \u0430 \u0438\u043d\u0430\u0447\u0435 \u043c\u043e\u043b\u043e\u0434\u043e\u0435 \u0432\u0438\u043d\u043e \u043f\u0440\u043e\u0440\u0432\u0435\u0442 \u043c\u0435\u0445\u0438, \u0438 \u0441\u0430\u043c\u043e \u0432\u044b\u0442\u0435\u0447\u0435\u0442, \u0438 \u043c\u0435\u0445\u0438 \u043f\u0440\u043e\u043f\u0430\u0434\u0443\u0442; \u043d\u043e \u043c\u043e\u043b\u043e\u0434\u043e\u0435 \u0432\u0438\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432 \u043c\u0435\u0445\u0438 \u043d\u043e\u0432\u044b\u0435; \u0442\u043e\u0433\u0434\u0430 \u0441\u0431\u0435\u0440\u0435\u0436\u0435\u0442\u0441\u044f \u0438 \u0442\u043e \u0438 \u0434\u0440\u0443\u0433\u043e\u0435. \u041b\u043a.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/hozhdenie-po-mukam-ili-shifrovanie-trafika-v-direct-connect-ch-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:15+00:00","article:modified_time":"2019-10-31T18:48:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32659","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:58:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:54:27","updated":"2026-01-21 11:58:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/32659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=32659"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/32659\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/24449"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=32659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=32659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=32659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}