21–30 of 47 posts
https://blog.elasticbyte.net/setting-up-a-native-cisco-ipsec...
Earlier quoted context omitted.
Probably similar for any other popular VM provider. Many webmasters, for example, block AWS IP ranges because there tends to be a lot of abusive traffic, crawlers, etc, from there. Going with a smaller company for a VPS intended for use as a VPN is a good idea.
Any suggestions on smaller companies that are flying under the radar so far?
Cloud Hosting Offers | Web Hosting Talk http://www.webhostingtalk.com/forumdisplay.php?f=159
VPS Hosting Offers | Web Hosting Talk http://www.webhostingtalk.com/forumdisplay.php?f=104
http://www.selectedintelligence.com/post/128701492804/softet...
Earlier quoted context omitted.
Probably similar for any other popular VM provider. Many webmasters, for example, block AWS IP ranges because there tends to be a lot of abusive traffic, crawlers, etc, from there. Going with a smaller company for a VPS intended for use as a VPN is a good idea.
Any suggestions on smaller companies that are flying under the radar so far?
https://www.ssdnodes.com/startup-specials/
/utterly shameless plug
The performance argument is only relevant for the establishment of the VPN connection and any periodic rekeying — it shouldn't have any impact on the tunnel's perf.
It's a shame openvpn's easy-rsa doesn't provide a straightforward mechanism to generate ECDSA certificates, which would've removed any performance concerns.
--
edit: easy-rsa does support ECDSA[1]:
Support for generating an ECDSA certificate chain is available in EasyRSA (in spite of it's name) since EasyRSA 3.0. The parameters you're looking for are '--use-algo=ec' and '--curve='. See the EasyRSA documentation for more details on generating ECDSA certificates.
If your aim is to hide your traffic from third-party networks you might be on (free wifi, school, hotels, etc) then a yearly VPN subscription is almost certainly cheaper than the cheapest DigitalOcean droplet. If you get a good provider (I use PIA but am not affiliated with them) then you get unlimited traffic, multiple clients, endpoints all over the world, tech support, all without having to setup and administer the server yourself.
If your aim is to disassociate traffic with yourself, your DigitalOcean IP will be tied back to you anyway.
If your aim is to stop government snooping, DigitalOcean is hosted in the USA so you may as well just send the NSA your browsing history.
Surely for it to be a 'secure VPN server' there has got to be some stuff set up first, like setting up key only login, disabling root ssh login, disabling everything ssh, setting up firewall, disabling ipv6 entirely in the case of openvpn?
I run a vpn on digital ocean and its amazing looking at the logs and seeing how quickly, and how many attempts there are to break into the server straight after setting it up. As a person who isnt completely sure of what i am doing when it comes to firewalls and setting up 'jails' or whatever, this kinda makes me uneasy. I wouldnt even be sure how to tell if anyone had broken in to my server...
https://www.linode.com/docs/networking/vpn/set-up-a-hardened...
This has been the most useful guide that I have found on setting up an openvpn server. It has a bunch of steps to go through before you get to actually installing openvpn. But as I said, I am not that knowledgeable myself when it comes to running a server, so this may all just be unnecessary.
I use https://www.softether.org/ . Setup of a VPN server never was easier.
This seems a bit pointless to me. If your aim is to hide your traffic from third-party networks you might be on (free wifi, school, hotels, etc) then a yearly VPN subscription is almost certainly cheaper than the cheapest DigitalOcean droplet. If you get a good provider (I use PIA but am not affiliated with them) then you get unlimited traffic, multiple clients, endpoints all over the world, tech support, all without…
Also shoutout to Dr Duh who gave a nice run down of setting up vpn on a VPS
https://github.com/drduh/Debian-Privacy-Server-Guide/blob/ma...
Edit: Just realized that others have already noted and commented about SoftEther. Sorry guys!