←back to thread

A New Future for Icanhazip

(major.io)
980 points nkcmr | 1 comments | 06 Jun 21 19:21 UTC | HN request time: 0.205s | source
Show context
mjsir911 ◴[06 Jun 21 20:31 UTC] No.27416049[source]▶
This kind of service is exactly what STUN servers are made for. Designed to be used with webrtc, but it works perfectly alright by itself.

There are a plethora of unauthenticated STUN servers around, and while there's still room for abuse, the protocol is a bit more lightweight than full-blown http requests, and faster, too!

I've dabbled with doing this on my own, but I've found `myip` to do the job nicely and without hassle:

https://github.com/Snawoot/myip

replies(1): >>27416400 #
politelemon ◴[06 Jun 21 21:15 UTC] No.27416400[source]▶
Can this be done using the stun command directly?

http://manpages.ubuntu.com/manpages/bionic/man1/stun.1.html

replies(1): >>27416743 #
1. Snawoot ◴[06 Jun 21 21:59 UTC] No.27416743[source]▶
It is, but utility above queries multiple public STUN servers concurrently. As soon as quorum of servers replied with matching addresses, result is returned. This way it's more reliable and offers decent latency guarantees.