|
Hamachi is a centrally-managed zero-configuration virtual private network (VPN) freeware application capable of establishing direct links between computers that are behind NAT firewalls without requiring reconfiguration (in most cases); in other words, it establishes a connection over the Internet, to create conditions very similar to that as if the computers were physically connected. Currently available as a production version for Microsoft Windows, and as beta - for Mac OS X and Linux. On August 8, 2006, it was announced that Hamachi was being purchased by LogMeIn.[1] This article or section is in need of attention from an expert on the subject. ...
Computer software (or simply software) refers to one or more computer programs and data held in the storage of a computer for some purpose. ...
This article is about Japanese cuisine. ...
Binomial name Seriola quinqueradiata Temminck & Schlegel, 1845 The Japanese amberjack or yellowtail, Seriola quinqueradiata, is a fish in the family Carangidae. ...
Image File history File links No higher resolution available. ...
Software development is the translation of a user need or marketing goal into a software product. ...
A software release is the distribution, whether public or private, of an initial or new and upgraded version of a computer software product. ...
is the 143rd day of the year (144th in leap years) in the Gregorian calendar. ...
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era. ...
// An operating system (OS) is the software that manages the sharing of the resources of a computer. ...
Windows redirects here. ...
This article is about operating systems that use the Linux kernel. ...
Mac OS X (IPA: ) is a line of graphical operating systems developed, marketed, and sold by Apple Inc. ...
Computer software can be organized into categories based on common function, type, or field of use. ...
A peer-to-peer (or P2P) computer network is a network that relies on the computing power and bandwidth of the participants in the network rather than concentrating it in a relatively few servers. ...
A Virtual Private Network, or VPN, is a private communications network usually used within a company, or by several different companies or organizations, communicating over a public network. ...
A software license is a legal agreement which may take the form of a proprietary or gratuitous license as well as a memorandum of contract between a producer and a user of computer software. ...
The term Freeware refers to gratis proprietary software with closed source. ...
A website (alternatively, Web site or web site) is a collection of Web pages, images, videos and other digital assets that is hosted on one or several Web server(s), usually accessible via the Internet, cell phone or a LAN. A Web page is a document, typically written in HTML...
Zeroconf or Zero Configuration Networking is a planned IETF protocol for dynamic configuration of network nodes in an IP network. ...
“VPN†redirects here. ...
The term Freeware refers to gratis proprietary software with closed source. ...
In Computer Networking, the process of Network Address Translation (NAT, also known as Network Masquerading, Native Address Translation or IP Masquerading) involves re-writing the source and/or destination addresses of IP packets as they pass through a Router or firewall. ...
Windows redirects here. ...
Mac OS X (IPA: ) is a line of graphical operating systems developed, marketed, and sold by Apple Inc. ...
This article is about operating systems that use the Linux kernel. ...
is the 220th day of the year (221st in leap years) in the Gregorian calendar. ...
Year 2006 (MMVI) was a common year starting on Sunday of the Gregorian calendar. ...
How it works
Hamachi is a centrally-managed VPN system, consisting of the server cluster managed by the vendor of the system and the client software, which is installed on end-user computers. A Virtual Private Network, or VPN, is a private communications network usually used within a company, or by several different companies or organizations, communicating over a public network. ...
Client software adds a virtual network interface to a computer, and it is used for intercepting outbound as well as injecting inbound VPN traffic. Outbound traffic sent by the operating system to this interface is delivered to the client software, which encrypts and authenticates it and then sends it to the destination VPN peer over a specially initiated UDP connection. Hamachi currently handles tunneling of IP traffic including broadcasts and multicast. The Windows version also recognizes and tunnels IPX traffic. A Virtual Private Network, or VPN, is a private communications network usually used within a company, or by several different companies or organizations, communicating over a public network. ...
// An operating system (OS) is the software that manages the sharing of the resources of a computer. ...
User Datagram Protocol (UDP) is one of the core protocols of the Internet protocol suite. ...
A tunneling protocol is a network protocol which encapsulates one protocol or session inside another. ...
The Internet Protocol (IP) is a data-oriented protocol used for communicating data across a packet-switched internetwork. ...
Routing Schemes anycast broadcast multicast unicast In computer networking, broadcasting refers to transmitting a packet that will be received (conceptually) by every device on the network. ...
Routing Schemes anycast broadcast multicast unicast Multicast is sometimes also used to refer to a multiplexed broadcast, although that is a very different thing and should not be confused. ...
See also Ericsson IPX Internetwork Packet Exchange (IPX) is the OSI-model Network layer protocol in the IPX/SPX protocol stack. ...
Each client establishes and maintains a control connection to the server cluster. When the connection is established, the client goes through a login sequence, followed by the discovery process and state synchronization. The login step authenticates the client to the server and vice versa. The discovery is used to determine the topology of client's Internet connection, specifically to detect the presence of NAT and firewall devices on its route to the Internet. The synchronization step brings a client's view of its private networks in sync with other members of these networks. Image File history File links This is a screenshot of a copyrighted website, video game graphic, computer program graphic, television broadcast, or film. ...
Image File history File links This is a screenshot of a copyrighted website, video game graphic, computer program graphic, television broadcast, or film. ...
When a member of a network goes online or offline, the server instructs other network peers to either establish or tear down tunnels to the former. When establishing tunnels between the peers, Hamachi uses a server-assisted NAT-traversal technique, similar to UDP hole punching. Detailed information on how it works has not been made public. The vendor claims "...to successfully mediate P2P connections in roughly 95% of all cases ..." This process does not work on certain combinations of NAT devices, requiring the user to explicitly set up a port forward. Additionally 1.0 series of client software are capable of relaying traffic through vendor-maintained 'relay servers'. A tunneling protocol is a network protocol which encapsulates one protocol or session inside another. ...
In Computing UDP Hole Punching refers to a commonly used NAT Traversal Technique. ...
A peer-to-peer (or P2P) computer network is a network that relies on the computing power and bandwidth of the participants in the network rather than concentrating it in a relatively few servers. ...
It has been suggested that this article or section be merged with Port address translation. ...
In the event of unexpectedly losing a connection to the server, the client retains all its tunnels and starts actively checking their status. When the server unexpectedly loses client's connection, it informs client's peers about the fact and expects them to also start liveliness checks. This enables Hamachi tunnels to withstand transient network problems on the route between the client and the server as well as short periods of complete server unavailability.
Each Hamachi client is assigned an IP address from the 5.0.0.0/8 network. This address is assigned when the client logs into the system for the first time, and is henceforth associated with the client's public crypto key. As long as the client retains its key, it can log into the system and use this 5.0.0.0 IP address. PKC, see PKC (disambiguation) Public-key cryptography is a form of modern cryptography which allows users to communicate securely without previously agreeing on a shared secret key. ...
This article or section does not cite any references or sources. ...
The 5.0.0.0/8 network is used to avoid collisions with private IP networks that might already be in use on the client side. Specifically - 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16. The 5.0.0.0/8 network has been reserved by the IANA for the past ten years and is not used in the Internet routing domain. The IANA free pool is expected to be exhausted by April 2010.[2] If this range is allocated, Hamachi users will not be able to connect to any Internet IP addresses within the range as long as the Hamachi client is running. The Internet Assigned Numbers Authority (IANA) is the entity that oversees global IP address allocation, DNS root zone management, and other Internet protocol assignments. ...
Using a /8 network prefix has the additional benefit of creating a single broadcast domain between all clients. This makes it possible to use LAN protocols that rely on IP broadcasts for discovery and announcement services over Hamachi networks. “LAN†redirects here. ...
Hamachi is frequently used for gaming and remote administration. The vendor provides free basic service and extra features for a fee.
In February 2007, an IP-level block has been imposed by Hamachi servers on parts of Vietnamese Internet space due to "the scale of the system abuse originating from blocked addresses".[3] The company is working on a less intrusive solution to the problem.[4]
Security As with all closed-source or non-thoroughly reviewed applications, several security considerations apply: - the absence of source code for review
- its beta status (if any) and possible impact of remaining bugs on security
Additionally due to Hamachi's use as a VPN application the following considerations apply: A software bug is an error, flaw, mistake, failure, or fault in a computer program that prevents it from behaving as intended (e. ...
- additional risk of disclosure of sensitive data which is stored or may be logged by the mediation server- minimal where data is not forwarded
- the security risks due to vulnerable services on remote machines otherwise not accessible behind a NAT, common to all VPNs
Hamachi uses strong, industry-standard algorithms to secure and authenticate the data and its security architecture is open [1]. The Hamachi implementation however is closed source and as such it is not available for the review to the general public. “VPN†redirects here. ...
The text below is generated by a template, which has been proposed for deletion. ...
For the product to work, a "mediation server", operated by the vendor, is required. This server stores the nickname, maintenance password, statically allocated 5.0.0.0/8 IP address and the associated authentication token of the user. For every established tunnel, it could log the real IP address of the user, time of establishment and duration as well as the other interconnected users.
As all peers sharing a tunnel have full "LAN-like" access to each others computers, security problems may arise if firewalls are not used, as with any insecure situation. The security features of the NAT router/firewall are bypassed. This is not specific to Hamachi and needs to be addressed with other VPNs as well.
In the Security Now! podcast Steve Gibson described Hamachi as a "...brand new, ready to emerge from its long development beta phase, ultra-secure, lightweight, high-performance, highly polished, multi-platform, peer-to-peer and FREE! personal virtual private networking system ..." and that he had "... fully vetted the system's security architecture ...".[5] Security Now! is a weekly podcast (Internet radio show) hosted by Leo Laporte of this WEEK in TECH and Steve Gibson of Gibson Research Corporation (GRC). ...
Steve Gibson (born March 1955) is a computer enthusiast, software engineer and self-proclaimed security expert based in Laguna Hills, California. ...
In the following episode, to a question raised by Randal Schwartz: "Hamachi's not open source. How can we trust it?", Gibson replied, "... it's one of the things that made me anxious and continues to make me anxious. I'm going to end up probably over on OpenVPN ...". Later he continued, "But Hamachi is - I'm convinced that Alex has really designed this system exactly as he's told me he has. He's got years of experience with security, implementing IPSec tunnels, you know, classic VPN solutions. I couldn't feel any better about this than I do, short of doing a complete source audit ... which is just not practical. So it's certainly the case though that, well, I mean, you know, we're trusting Bill when we use Windows.", and, "... I'm sure Alex has told me the truth, but I have no proof of it."[6] Randal L. Schwartz is an American system administrator and programming consultant. ...
OpenVPN is a virtual private network (VPN) package for creating point-to-point encrypted tunnels between host computers. ...
Compatibility The current builds of Hamachi are available for the following operating systems: - Microsoft Windows
- Linux 2.4 or newer (console-only) (x86 and nokia770/arm binary only)
- Mac OS X (console-only) (ppc binary - runs on Intel Macs via Rosetta)
Prior to versions 1.0.2.0 and 1.0.2.1 for the Windows release [2], many Windows Vista users had experienced compatibility and connection issues while using Hamachi. As of March 30, 2007, the software now includes Vista tweaks, which answer these OS-related problems, among other specific solutions. [3] Windows redirects here. ...
This article is about operating systems that use the Linux kernel. ...
Mac OS X (IPA: ) is a line of graphical operating systems developed, marketed, and sold by Apple Inc. ...
Windows Vista is a line of graphical operating systems used on personal computers, including home and business desktops, notebook computers, Tablet PCs, and media centers. ...
// An operating system (OS) is the software that manages the sharing of the resources of a computer. ...
References - ^ Press Release: LogMeIn Acquires Instant VPN Creator. LogMeIn.com (2006-08-08). Retrieved on 2006-08-08.
- ^ Geoff Huston's analysis Retrieved 2007-06-28.
- ^ IP-level block Hamachi.cc. Hamachi Team. February 14, 2007. Retrieved 2007-04-24.
- ^ Re: Can i connect... Hamachi.cc. Hamachi Team. Mar 11, 2007. Retrieved 2007-04-24.
- ^ "Hamachi" Rocks! transcript. GRC.com, "Security Now!" ep. #18. Gibson and Laporte, December 15, 2005. Retrieved 2007-04-24.
- ^ VPNs Three..., transcript GRC.com, "Security Now!" ep. #19. Gibson and Laporte, December 22, 2005. Retrieved 2007-04-24.
Year 2006 (MMVI) was a common year starting on Sunday of the Gregorian calendar. ...
is the 220th day of the year (221st in leap years) in the Gregorian calendar. ...
Year 2006 (MMVI) was a common year starting on Sunday of the Gregorian calendar. ...
is the 220th day of the year (221st in leap years) in the Gregorian calendar. ...
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era. ...
is the 179th day of the year (180th in leap years) in the Gregorian calendar. ...
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era. ...
is the 114th day of the year (115th in leap years) in the Gregorian calendar. ...
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era. ...
is the 114th day of the year (115th in leap years) in the Gregorian calendar. ...
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era. ...
is the 114th day of the year (115th in leap years) in the Gregorian calendar. ...
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era. ...
is the 114th day of the year (115th in leap years) in the Gregorian calendar. ...
See also Virtual Private Networks Network address translation “VPN†redirects here. ...
In Computer Networking, the process of Network Address Translation (NAT, also known as Network Masquerading, Native Address Translation or IP Masquerading) involves re-writing the source and/or destination addresses of IP packets as they pass through a Router or firewall. ...
This article is about the Internet protocol. ...
In Computing UDP Hole Punching refers to a commonly used NAT Traversal Technique. ...
Traversal Using Relay NAT (TURN) is a protocol that allows for an element behind a NAT or firewall to receive incoming data over TCP or UDP connections. ...
External links - LogMeIn/Hamachi Main Website
- LogMeIn/Hamachi Customer Website
- Official Hamachi User Forum
- Hamachi Wiki
|
Feeds |
Contact