Syncthing connection types

Privacy Questions
1

As I already told in this forum (thread name: “Sync strategy”), I went for a node network type synchronization system, instead of a real self hosting client-server system, using Syncthing as my daily driver between the nodes: 3 Android mobile devices and 4 Linux/Win machines.

All of them are not using any Syncthing external services, such as NAT traversal, Global/Local Discovery and Relays, because having a NordVPN account, I can use their service of Overlay VPN called Meshnet.

I would like to kindly ask, if this is too much paranoia, or the Syncthing NAT traversal system, could still be a valid solution, in terms of privacy. I’m asking this because in future I’m thinking to leave Nord, for other services, such Mullvad, that are not able to offer an integrated overlay vpn.

p.s.: I already tried zerotier, the problem is in the Android devices: they cant run two VPN contemporarily and this is a no go for me, because I connect with the mobile devices, to a differentes unsercure networks, during the day, so I want to be protected for the browsing/background traffic and synced at same time (such as Nord can do).

Thank-you.

2

In Android you can run more than one VPN at the same time using RethinkDNS

3

I didn’t know about it, I’ll looking for the docs.
Thank you for the advice, I will provide my considerations after testing it.

1 Like
4

Syncthing won’t work over WireGuard with Rethink though. We’re working on a few complicated changes[1] that we’ll gradually roll out in the coming weeks/months that might just make it work, but no guarantees.

Also note: Today, to make Syncthing work over the local network, you’d either “Exclude” Syncthing from Configure → Apps or turn ON “Do not route Private IPs” from Configure → Network.

  1. (feature request: implement Endpoint-Independent Mapping for UDP · Issue #77 · celzero/firestack · GitHub) ↩︎

1 Like
5

thank you! I’ll look for the updates

Do you think is security and privacy OK to use Syncthing via Internet, relaying only on it transfer protocol encryption?