Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

How I built a hybrid LAN/WAN file sync engine without VPN (and why on-demand sync still matters)

🎥 Video demo: Introduction A few years ago, I was working on a system that required synchronizing very large datasets — sometimes close to 1 TB — across several servers belonging to different companies. Some servers w…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

🎥 Video demo:














Introduction



A few years ago, I was working on a system that required synchronizing very large datasets — sometimes close to 1 TB — across several servers belonging to different companies.



Some servers were in the same building, others were remote, some were behind locked-down firewalls, and in many cases I had:





  • no VPN,


  • no direct link,


  • no control over the remote infra,

  • and machines that didn’t even know each other existed.



To move initial datasets, I relied on traditional transfer tools.


But the real problem appeared after that first copy:




How do you verify that datasets across multiple locations are fully identical, and resynchronize only the missing deltas — especially after an interrupted or incomplete transfer?




Double-checking terabytes manually wasn’t an option.


Running massive checksums remotely was slow and error-prone.


And multi-endpoint scenarios (A ↔ B ↔ C) made it exponentially worse.



This pain eventually led me to prototype a custom sync engine…


and that prototype turned into ByteSync, an open-source, on-demand file synchronization tool.



This article is the story of that journey — the architecture, the challenges, the strange bugs, and the “aha” moments.









Why on-demand sync still matters



Continuous sync tools are amazing — Syncthing is a work of art.



But continuous sync wasn’t compatible with the environments I worked in.



When you synchronize across companies or infrastructures you don't manage, you often have:





  • strict maintenance windows

  • servers that are offline most of the time

  • compliance rules against background daemons

  • sensitive data that must move only at specific times

  • endpoints that can’t stay permanently connected



So syncing needed to happen only when everyone explicitly agreed on the time slot.




On-demand sync wasn’t a preference — it was a requirement.




It let me run comparisons, verify integrity, and apply deltas exactly when it was permitted.



This shaped almost every architectural decision that came later.









Challenge #1 — Picking a delta algorithm that works everywhere



I wanted block-level deltas.


Full file transfers would kill the purpose of multi-site sync.



Naturally, rsync came to mind.



Then I discovered FastRSyncNet — a .NET port inspired by rsync’s signature and delta algorithm.


It gave me:




  • rolling checksums

  • block signatures

  • efficient delta construction

  • rsync-like behaviour, but portable inside a modern .NET app



ByteSync became technically very close to rsync’s internal diffing engine, with higher-level orchestration on top.











Challenge #2 — Merging LAN and WAN connections into a single model



This was the hardest architectural problem.



I had prior experience with SignalR, so I used it for the realtime communication layer.


On top of that:




  • Azure Functions

  • Azure Redis

  • Azure Blob Storage



…initially formed the relay for remote sync operations.



But ByteSync originally had two separate modes:




  • Local mode (LAN only)

  • Cloud mode (WAN only)



I couldn’t find a clean way to bridge them.


Users had to pick a mode upfront, which didn’t match real-world workflows.



The breakthrough came with the concept of DataNodes.



A DataNode abstracts a sync participant — local or remote — so the orchestration doesn’t care about the distance between nodes.



This allowed:



✔ direct LAN connections when devices can see each other


✔ encrypted relayed connections when they can’t


✔ both in the same sync session



Suddenly, we had hybrid sessions.



And it changed everything.











Challenge #3 — Azure Blob Storage and the “egress bill from hell”



Originally, remote exchanges used Azure Blob Storage.



It worked.


But then I ran the cost estimate.



And… no.




Azure egress fees were far too high for multi-site sync.




Not just high — non-viable.



That pushed me to migrate the relay layer to Cloudflare R2:




  • no egress fees

  • great performance

  • straightforward API

  • predictable costs

  • perfect for temporary encrypted blobs



Switching to R2 turned out to be one of the best decisions of the project.









Challenge #4 — The first fully working remote sync (the “aha” moment)



I remember the first time a full remote sync completed successfully.


It wasn’t just correct — it was fast, considering the conditions.



Encrypted cloud relay.


Rolling checksums.


Delta blocks.


Multi-endpoint convergence.



Everything clicked that day.



That was my “OK yes — this is worth continuing” moment.











Challenge #5 — The strangest bug I’ve ever hit



This one cost me three days of my life.



Every time I added a file or folder on my machine…


the connection dropped.



Every.


Single.


Time.



I debugged:




  • SignalR

  • Azure Functions

  • caching

  • threading

  • reconnection logic

  • manifests

  • cancellation tokens

  • TCP vs WebSockets



Nothing made sense.



The culprit?




Opening Windows Explorer caused a 20–30 second network hang… but only on my machine.




Not on the servers.


Not in production.


Just… my Windows environment being haunted.



Once I understood it, everything made sense — and nothing made sense at the same time.









Challenge #6 — Validating real-world use cases



The architecture later proved itself in scenarios like:





  • multi-site synchronization across organizations


  • multi-folder split comparisons


  • integrity verification after partial transfers


  • deduplication across several endpoints

  • syncing nodes that were sometimes LAN, sometimes WAN, sometimes both

  • combining several independent datasets into a unified comparison



The more complex the scenario, the more the architecture made sense.











Conclusion



I didn’t initially plan to build a synchronization tool.


I just needed a way to reliably synchronize large datasets across machines that couldn’t talk to each other.



But challenge after challenge, the project grew into something more robust and more general than I expected.



This article isn’t meant as a product pitch — just an honest breakdown of the problems I faced and how I solved them.



If you're curious about the tool behind these experiments, ByteSync is open-source:





Feedback is always welcome.



Thanks for reading.

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - How I built a hybrid LAN/WAN file sync engine without VPN (and why on-demand sync still matters)
id: 22490e89-765a-4bfb-97e2-f8145b93af1c
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "How I built a hybrid LAN/WAN f" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich How I built a hybrid LAN/WAN file sync e.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten How I built a hybrid LAN/WAN file sync engine without VPN (and why on-demand sync still matters)

Thematisch verwandte Begriffe: built, hybrid, LANWAN, file · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick