How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

spaceboy wrote: post #3

Perceptes wrote: post #2

A good alternative is Algo: https://github.com/trailofbits/algo

Here's a few more: https://github.com/sovereign/sovereign https://github.com/Nyr/openvpn-install https://github.com/ttlequals0/autovpn https://github.com/robbintt/popup-openvpn https://github.com/jlund/streisand

I usually use Angristan's (improves on Nyr's):

https://github.com/Angristan/OpenVPN-install

Re: How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

#5

Post by akoster » Sat, Feb 11, 2017, 4:29 PM UTC

Another alternative (specific to the pi): http://www.pivpn.io

Re: How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

#6

Post by fauigerzigerk » Sat, Feb 11, 2017, 5:09 PM UTC

Using a socks 5 tunnel over ssh seems like an interesting ad hoc alternative for web browsing only: https://www.digitalocean.com/community/tutorials/how-to-rout...

But crucially you'd want to make your browser use the tunnel for DNS as well: http://superuser.com/questions/103593/how-to-do-dns-through-...

Careful if you're using this for something dangerous. I'm not a computer security expert by any stretch and I don't know whether the people who have written these articles are. Chances are that this is completely broken and will reveal your IP address and identity.

Re: How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

#7

Post by noarchy » Sat, Feb 11, 2017, 5:20 PM UTC

Regarding DigitalOcean VPNs, I think enough people have been doing this that it is starting to show in unpleasant ways. While using my DO VPN I've encountered captchas while using YouTube, of all sites, likely because of abuse they've seen at the hands of DO VPN users. I've also seen my DO IP range outright banned by other sites.

Re: How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

#8

Post by hedora » Sat, Feb 11, 2017, 5:24 PM UTC

Is there an easy way to enable DNS over OpenVPN? That appears to be the biggest hole in this tutorial. Untrusted networks get to observe/spoof DNS, and the clients can't use the LAN DNS server to find stuff behind the firewall. (Or am I missing something?)

Re: How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

#9

Post by tyingq » Sat, Feb 11, 2017, 5:24 PM UTC

noarchy wrote: post #7

Regarding DigitalOcean VPNs, I think enough people have been doing this that it is starting to show in unpleasant ways. While using my DO VPN I've encountered captchas while using YouTube, of all sites, likely because of abuse they've seen at the hands of DO VPN users. I've also seen my DO IP range outright banned by other sites.

Probably similar for any other popular VM provider. Many webmasters, for example, block AWS IP ranges because there tends to be a lot of abusive traffic, crawlers, etc, from there.

Going with a smaller company for a VPS intended for use as a VPN is a good idea.

Re: How to Setup a Secure VPN Server on Raspberry Pi or DigitalOcean

#10

Post by pimeys » Sat, Feb 11, 2017, 5:26 PM UTC

noarchy wrote: post #7

Regarding DigitalOcean VPNs, I think enough people have been doing this that it is starting to show in unpleasant ways. While using my DO VPN I've encountered captchas while using YouTube, of all sites, likely because of abuse they've seen at the hands of DO VPN users. I've also seen my DO IP range outright banned by other sites.

This. I tried a DO OpenVPN in my daily mobile usage and got captchas everywhere. Also the throughput was not that great. Happily paying for F-Secure now.