6/7/2026 at 5:06:19 AM
I think what we’re seeing here isnt Valve messing up but rather the middle east conflict expanded to cyberspace and spilling over to impact civilians. Look at the timing and affected countries. China isnt also exactly known for free internet.WebRTC works as fallback. WebRTC is encrypted and cant be used for much else.
STUN in the otherhand is unencrypted and the protocol itself can be used for DDoS reflection/amplification. I would not be surprised if this is somehow weaponized and/or blocked/analyzed in real time that then breaks the connectivity.
by duckduckman
6/7/2026 at 7:30:23 AM
STUN/TURN is basically icanhazip for WebRTC. STUN gives you your public IP:port. TURN is the same, but the returned IP:port is the one that had been dynamically allocated to you at time of querying, rather than the actual ones.WebRTC clients take that STUN/TURN response and send to peers through out-of-band, through e.g. a lobby server chat mechanism, to set up the connection. This allows NAT table entries to be created as if they are outbound connection at both ends.
You can't make P2P connection with STUN/TURN alone. STUN/TURN is just a tool required for WebRTC.
by numpad0
6/7/2026 at 9:26:43 AM
TURN is the last resort and isn't just signaling. It carries the traffic as well.If you can make all the STUN servers fail from the perspective of the clients, you could hypothetically force them to use TURN servers that are more centralized and easier to spy on. STUN negotiates pipes n:n. TURN is closer to n:1.
by bob1029
6/7/2026 at 10:27:32 AM
> force them to use TURN servers that are more centralized and easier to spy onWebrtc traffic is encrypted as it travels through the TURN servers, isn't it? Sure, you get some which-ip-contacted-which-using-what-service metadata, but any active middleman able to mess with STUN traffic already has that.
It could just be that someone's fucked up a setting somewhere. I mean, the reason WebRTC has loads of options for 'interactive connectivity establishment' is because it's common to see users behind NAT, users whose NAT cant be traversed with STUN, IPv6 being broken, UDP getting blocked, TCP ports other than port 443 getting blocked, etc etc.
If a country's ISPs use CGNAT to avoid giving users precious IPv4 addresses, and world events made the ISPs turn the security settings up to 11, STUN just stops working.
by michaelt
6/7/2026 at 10:34:18 AM
The traffic is encrypted, but this makes it a lot easier to acquire if you have some way to break it.by bob1029
6/7/2026 at 1:40:37 PM
And metadata plus encrypted traffic fingerprinting is enough to provide huge signal to an intelligence agency.by awakeasleep
6/7/2026 at 5:40:15 PM
> TURN is the same, but the returned IP:port is the one that had been dynamically allocated to you at time of querying, rather than the actual ones.I don't know you mean by this, but I think you're confused. I have implemented STUN, so I know how it works. AFAIK, TURN doesn't reveal an address/port any different from that revealed by STUN, and cannot, because its discovery feature is STUN. (Also, a typical home user has only one internet-facing address, not a dynamic one plus another one.)
Rather, TURN provides a STUN address/port discovery service and a data relay service. The relay is for cases where two peers wishing to connect are both behind difficult NAT, meaning there is no quick and reliable way for them to directly connect even when they have their STUN results. So instead of connecting directly, they communicate through the relay.
by foresto
6/8/2026 at 8:09:12 PM
I admit that I only have rudimentary understanding, but: my understanding was that TURN uses a modified STUN format that returns the address/port on the peer facing side of the TURN server, a la address of a hotel room or PO box, of querying user. My point is that STUN/TURN(especially STUN) are not encapsulation protocols for WebRTC, but just means to determine(or get assigned, so TURN sort of is encapsulating, by being a transparent proxy) client's own public IP/port because there is no way to do so than by asking someone with a global IP.by numpad0
6/7/2026 at 5:54:41 AM
I think you have that backwards, WebRTC doesn't work, and STUN does.by ars
6/7/2026 at 7:27:44 AM
I think you have it sideways. STUN [1] is the NAT traversal / "NAT hole punching" process that allows peers to discover their public IP addresses and establish direct P2P bidirectional UDP communication. WebRTC depends on STUN to establish P2P communication. You may be thinking of TURN [2] which amounts to routing traffic through an intermediary node that is visible to the two peers.[1] https://en.wikipedia.org/wiki/STUN
[2] https://en.wikipedia.org/wiki/Traversal_Using_Relays_around_...
by RossBencina
6/7/2026 at 1:24:54 PM
We do P2P in our networking software and this is why we do it all in band instead of using STUN, TURN, or other common methods. Those get blocked and they’re also often insecure.STUN has mitigations now against being weaponized but it’s still a shit protocol. The fact that neither STUN nor TURN contain any way whatsoever to accomplish any kind of rendezvous without yet another signaling path boggles my mind given how easy it would have been.
by api
6/7/2026 at 3:18:11 PM
> The fact that neither STUN nor TURN contain any way whatsoever to accomplish any kind of rendezvous without yet another signaling path boggles my mindInteresting. Can you expound on this a bit? How does ZeroTier do it?
by apitman
6/7/2026 at 4:30:03 PM
ZeroTier has "roots," which are nodes that relay packets and also tell you what your IP info is. Everyone in the world connects to a pool of these.Other than relaying and STUN-like IP info reflection, they're dumb and do very little. They can't see your traffic or other information or even what virtual networks you're on.
Once both sides learn their external info, they communicate via the root to arrange P2P rendezvous. If both have IPv6 they use that, but still do a hole punch due to stateful firewalls. But with V6 it works almost 100% of the time. If one or both have V4, they do more cumbersome V4 hole punch maneuvers.
Our next-gen product, which is still in pre-release and has been shown only to some enterprise customers, is called ZeroTier Quantum. It's called that cause it's built on PQC (pqNoise to be exact) but it's also a full-scale reengineering of the whole system. But it still uses very similar techniques. Everything is in-band. No STUN, TURN, or even DNS dependencies.
by api
6/8/2026 at 6:34:32 AM
I developed WireGuard-like P2P VPN on WebRTC and performance was great 300Mbps+I think we can align on WebRTC for realtime P2P gaming and enterprise networking and more, instead of IPs base solution as end-users will not need to figure out firewall issues and IPv4/IPv6 differents
by xlmnxp
6/7/2026 at 10:45:44 AM
IPv6 and minimal assembly-written network code going without niche and complex features.by sylware
6/7/2026 at 5:10:50 AM
[flagged]by Georgelemental
6/7/2026 at 5:17:26 AM
Regular people here are as opposed to military servicemen. The people who did not sign up for going to war.by nine_k
6/7/2026 at 4:26:03 PM
Civilians have died by the tens of thousands in these wars, starting long before random gamers far from the killing and dying started having connection issuesby Georgelemental
6/7/2026 at 5:19:25 AM
These are dudes, likely some of them teenagers, playing Street Fighter and Tekken.Who signed up for what?
by underdeserver
6/7/2026 at 5:49:49 AM
The network shenanigans that apparently affect the p2p gaming is allegedly by the militaries of many countries, related to the Iran war. Much like GPS disturbancs in Northern and Eastern Europe are due to the war in Ukraine. Dudes delivering pizza have to suffer them, even though they never signed up to take part in the war.by nine_k
6/7/2026 at 5:26:06 AM
> WhoThese dudes and dudettes playing video games
> what?
Military service
by RamRodification
6/7/2026 at 7:54:30 AM
https://en.wikipedia.org/wiki/Conscription_in_IranFWIW I don't agree with the comment chain's source, I read "regular people" as "civilians" and don't think there was any nasty connotation meant.
by orlp
6/7/2026 at 9:25:53 AM
[dead]by sieabahlpark
6/7/2026 at 5:51:28 AM
Fair enough. Edited for clarity.by duckduckman
6/7/2026 at 4:27:16 PM
That's not what I meant. Civilians have died by the tens of thousands in these wars, starting long before random gamers far from the frontlines started having connection issuesby Georgelemental
6/7/2026 at 5:18:22 AM
> impact regular peopleaka civilians
by croes
6/7/2026 at 6:08:31 AM
[flagged]by Drupon
6/7/2026 at 8:40:22 AM
Calm down, he meant civilians. No need to stir up drama.by 7bit
6/7/2026 at 4:25:46 PM
Civilians have died by the tens of thousands in these wars, starting long before random gamers far from the killing and dying started having connection issuesby Georgelemental
6/7/2026 at 4:49:39 PM
That has NOTHING to do what's being discussed here. Stop trying to escalate the topic.by 7bit
6/7/2026 at 10:43:58 AM
[flagged]by RobotToaster
6/7/2026 at 10:57:59 AM
That has NOTHING to do what's being discussed here. Stop trying to escalate the topic.by 7bit
6/7/2026 at 5:12:36 AM
[dead]by decremental
6/7/2026 at 5:19:09 PM
[flagged]by Scroll_Swe