Holesail is secure and no third party is involved, if the state allows it you are good to go.
It will work for your use case. Give it a shot
I am releasing holesail-manager today It will solve the problem of running holesail commands again and again but what do you mean by:
> Which means the HTTP proxy can intercept their requests and bind the ports automatically then forward the traffic through hyperdht to the correct node
I think I am not able to understand this properly, I appreciate you explaining it, please š.
I think you are a little confused here, apps do not need to integrate holesail to use it.
Holesail in itself is a proxy, it kind of binds two ports between different devices, so apps just need to use localhost:port as the url.
When I say "integrating holesail", I mean including holesail in the app itself so that users don't have to do the installation and running.
For example, for an apache server running on port 80, I can wrap holesail around it with holesail --live 80 --host localhost
Then on another device: holesail
There is no need for manual integration, but for the sake of simplicity and accessibility, it is better to do so.
The above is a manual approach, now if I bundled holesail with apache2 and made it print out a connection key for ever vHOST by default, that would be holesail integration.
Here is a terrible drawing explaining how Holesail proxy works around Hyperdht

I think you are a little confused here, apps do not need to integrate holesail to use it.
Holesail in itself is a proxy, it kind of binds two ports between different devices, so apps just need to use localhost:port as the url.
When I say "integrating holesail", I mean including holesail in the app itself so that users don't have to do the installation and running.
For example, for an apache server running on port 80, I can wrap holesail around it with holesail --live 80 --host localhost
Then on another device: holesail
There is no need for manual integration, but for the sake of simplicity and accessibility, it is better to do so.
The above is a manual approach, now if I bundled holesail with apache2 and made it print out a connection key for ever vHOST by default, that would be holesail integration.
Holesail integration basically means packing the binary or source and executing it from the app so that your users don't have to.
Any app can use data coming from holesail because it's on your localhost:port .
nostr:npub1h5t3asu90f2x48rxtcqkjvwhza7m6kngs7vjyanx8xqyswc6es2s4645z5 nostr:npub1h8nk2346qezka5cpm8jjh3yl5j88pf4ly2ptu7s6uu55wcfqy0wq36rpev Id like to get your thoughts on this.
I haven't been keeping up at all on whats being worked on with #pear or #holesail so maybe this is already solved. but I think something like this is a necessary next step to allow apps and users to start using hypercore
nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr Holesail solves this as holesail is a reverse proxy around hyperdht.
You can check holesail source for how it's Implemented
You would need to be a profound monk to achieve that in my opinion .
Bare (By Holepunch) is a lightweight runtime, Keet gives pretty good performance and stays up to date with latest content even when it is all P2P.
Similarly Holesail runs on pretty much everything even though it is Nodejs based.
I don't think we need to worry so much about "Low end devices" here.
You need to implement holesail-client / holesail-server in Zeus wallet using Bare-kit.
I have a working example of it here https://github.com/supersuryaansh/hyperclip-android/
Bare is a runtime of its own and is not sandboxed like a normal JavaScript environment.
It can access TCP and setup sockets/connections and do all kinds of stuff.
Holesail Go was built way before bare-kit and uses custom stuff to set itself up and work.
But if you are taking Guy's bounty, Bare-kit is the way to go.
Holesail android code is not open, but here is how you can get holesail working on Android:
https://github.com/supersuryaansh/hyperclip-android
After that just do npm i holesail-client and you can use the node package in app.js file
Yes, along the line we intend to make money.
Soon when I post about the basic security issues and carelessness I discovered with the current port forwarding / static IP model, it will makes things clear why I am so admadent on the security part.
The problem is and always has been, āwhat do we have the resources to implement and who is going to implement it?ā Maybe there are easier solutions and stuff already built, but I donāt know them, and Iām going to be putting a lot of my personal resources to solving this problem and nostr:npub1h5t3asu90f2x48rxtcqkjvwhza7m6kngs7vjyanx8xqyswc6es2s4645z5 has been doing the same to build Holesail on top of the same protocol stack that Iāve been working with. And despite years of claims of a problem being āsolvedā by tons of other software supposedly, I still have these problems, in a big way actually.
So itās not really about whatās best, itās about what gets done first. Maybe someone else is doing the same thing and they will finish first, but we are very, very close to this just being extremely easy and fast to both implement & connect to. With no setup, networking issues, and with reliable security from the start. I would be happy to hear that someone else has solved these better, but for now we are just pushing ahead to what we want to build for ourselves.
⦠and if nobody takes the bounty Iāll just redirect my devs on it, but for anyone capable, you are passing up a good amount of sats.
Take up the bounty guys š , we gotta solve real world problems.
I will provide support to anyone working on this bounty.
nostr:note1awd7xdaxcq7ql8k4ew5r5nkvc00sgtsq03wsz63u2zt6rkpts2hsxangjd
Makes sense. Also, goal of holesail is to be easy to connect and to be secure by design with no extra configs, so that even the simplest user can use it without fearing that someone might "hack" them, or someone is watching the camera.
I see zero buzz around #holepunch /#pear - despite big Nostr users like nostr:npub1a2cww4kn9wqte4ry70vyfwqyqvpswksna27rtxd8vty6c74era8sdcw83a often name dropping it.
They released keat.io years ago and to this day have nothing else in their showcase.
What's going on? Was it vapourware after all? Are there nasty constraints with the "Pear stack" that make developers shy away from it?
Is keet, a remote control app and Holesail exhausting all usecases for this framework?
Are there hidden cost?
Why isn't there an explosion of Pear apps yet?
Would be curious to hear from people who have dabbled with it. On paper, the whole thing sounds too good to be true, so I can't help but wonder why there are no apps...
Busy building in silence š
Even then that will posses similar issues to static IPv4 addresses we have at the moment.
People irresponsibly using it to expose private and important stuff online without knowledge that malicious third parties can see it.
P.s: I did some good research on this a while ago and have not posted about that yet, I will cover this ISSUE in depth in a separate post.