Technology & Protocols

Understand the architectural concepts driving our serverless WebRTC tunnels, NAT-traversal logic, and RBAC security design.

01. Interactive Connectivity Establishment (ICE)

Interactive Connectivity Establishment (ICE) is a protocol utilized in WebRTC to bypass NAT (Network Address Translation) and firewalls. Our client applications leverage ICE to automatically negotiate candidates and find the most efficient direct path between two devices.

1. STUN Query

Query public STUN servers to discover external IP and port mappings.

2. SDP Exchange

Swap Session Description Protocol packets over an out-of-band signaling channel.

3. Encrypted Tunnel

Establish a direct peer-to-peer DTLS/SCTP tunnel with secure payload transit.

02. Local WebDAV Mounting Loopbacks

Instead of building complicated custom file sync extensions for every operating system, we embed a high-performance local WebDAV loopback server in our Rust backend (powered by Actix Web). This server translates WebDAV requests into WebRTC peer data channels, allowing standard operating system file explorers (Explorer, Finder, or Nautilus) to mount remote folders as local system drives.

03. Role-Based Access Control (RBAC) & Features

Securing decentralization endpoints requires tight rules on resource permissions. Our context layer implements strict RBAC constraints:

  • Context Compilation Flags: Minor apps exclude power management or clipboard triggers at compilation using conditional features (e.g. `feature-clipboard`).
  • Resource Masking: During candidate connection, resource queries for disabled features are automatically stripped from node descriptor catalogs.
  • Message Level Dropping: If a node receives updates for unauthorized categories, the core router drops it instantly, preventing event-loop execution.

Direct Peer-to-Peer Connection Topology

Local PeerICE Signal Broker(STUN Candidate)Remote PeerDirect Encrypted P2P Tunnel