Appendix 2 - How to improve performance by using direct connections
In order to establish direct connections between clients (highly recommended), system administrators have to open certain ports on both client computers and NAT/Firewall (if applicable).
Ports need to connect to servers:
- TCP 443 connect to Unite server/web server
- UDP 8000 for p2p mediator server
- UDP 12000 -13000 – to build direct, peer-to-peer, connection between clients
Background
All connection requests to other machines in your network are initially brokered by the Comodo Unite server. Upon receipt of the connection request, the server will first attempt to set up a direct, peer-to-peer connection between the computers. If it cannot establish a direct connection, then it executes the next best option of establishing a relayed connection.
- A direct connection is, as the name suggests, a straight connection between computers in a Unite network (peer to peer connection).
- In contradistinction, a relay connection means the Unite server acts as 'middle man' between the two computers in the network. Computer A connects to the Unite server and the Unite server connects to Computer B. All information sent from Computer A will pass through a secure, encrypted tunnel through the server to Computer B.
- Speed - With direct connections, data is passed directly back and forth rather than being redirected through the extra hop of the Unite server. Relayed connections are always going to suffer from a certain lag due to this simple fact.
- Reliability- A direct connection will decrease or eliminate the effect of any server issues on your network (for example, server downtime, slow response times during times of high traffic).