I've been using NordVPN mostly because I know the few guys who work on it (some of the best engineers in Lithuania IMHO), but even more so because they have some great arch community packages etc. I've been mostly using this easy cli: https://github.com/nstinus/nordvpn Managing openvpn can get really awkward especially if you're not keen on learning everything about it. Though my input might not be very valuable beca…
> I only care about geoblocked content and torrents. I thought Nord blocked (at least some) P2P? I always hear great things about Nord, but their P2P support always gets some bad reviews when I go looking on sites like Reddit, Ars, LTT, and TorrentFreak (at least in the comments).
Ask HN: What VPN service are you currently using?
261–270 of 344 posts
Re: Ask HN: What VPN service are you currently using?
#262Re: Ask HN: What VPN service are you currently using?
#263Earlier quoted context omitted.
Read this on Wireguard: https://restoreprivacy.com/wireguard/ Be aware.
The claim that Wireguard has not had a security audit is false[1][2]. It's based on the extremely robust Noise protocol framework, it has a formally verified Tamarin security model and two of the most well-known cryptographers in the world have personally reviewed it with no significant findings. Wireguard also does not do any of the logging claimed by that article by default. I know this because I maintain Wireguard…
It might not do the logging, but it still maintains state about which IP has connected using which key, and when the client last sent a handshake.
I have no idea how persistent this information is, but i can see from my Ubnt router, running WireGuard, that clients that haven't connected in weeks are still present in the Wg command status.
It's not an issue for me, but if you were trying to hide information, that information is a pretty bit smoking gun. It directly ties your IP to the VPN IP.
Assuming the rest of the VPN network is using shared IP addresses, and still maintains no logging, it might not be enough to prove that you're the one behind whatever they are searching for.
Then again, not all countries care that much about the "innocent until proven guilty" principle.
Re: Ask HN: What VPN service are you currently using?
#264Earlier quoted context omitted.
You could start here: https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_... >It is easily possible to saturate a 100 Mbps network using an OpenVPN tunnel. The throughput of the tunnel will be very close to the throughput of regular network interface. On gigabit networks and faster this is not so easy to achieve. This page explains how to increase the throughput of a VPN tunnel to near-linespeed for a 1 Gbps…
Have you read the code? It's woefully unparallelisable and is written to support more platforms rather than work better on any single one of them.
It certainly doesn't use multiple cores for a single connection, though I've never tested (or reviewed the code) to see if it does manage to spread the computational load of multiple connections over more CPU resource.
I've not read the above linked article in detail (no time ATM) but there seems to be mention of offloading AES calculations to compatible hardware, so the bottleneck would appear to be CPU use.
Re: Ask HN: What VPN service are you currently using?
#265Earlier quoted context omitted.
I have lived in the UK and NZ.
LMAO - Probably the worst two countries to trust your ISP. Both are five eyes countries: https://en.wikipedia.org/wiki/Five_Eyes#Domestic_espionage_s...
You're ignoring continents worth of countries and billions of people to get there though.
Re: Ask HN: What VPN service are you currently using?
#266No .. just kidding :)
Re: Ask HN: What VPN service are you currently using?
#267Unlimited and Free.
They've a bug in their Mac app which let you use for Unlimited time. ;)
Re: Ask HN: What VPN service are you currently using?
#268Re: Ask HN: What VPN service are you currently using?
#269Have used many, the one that stuck is AirVPN. Best capabilities and Linux support.
I agree. I've been using airvpn with pfsense for a while now. The connection is reliable, I can have multiple connections to multiple regions, and it's simple to route an entire vlan out of a particular VPN.