Live data from Hacker News

Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

github.com

11–20 of 88 posts

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#12

Serious question, do people consider a cloud provider to be more trustworthy than a professional VPN company?

Serious question, are there any professional VPN companies? Dont most VPN companies depend on cloud providers for many locations too. Most VPN companies have had serious screw ups in the past. PureVPN - disable all encryption by default for performance on their Windows client - for example. StrongVPN I recall logging. Other popular ones recur billing at top whack after a year and refusing refund. Overloaded servers, port blocking and so on.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#13

Serious question, do people consider a cloud provider to be more trustworthy than a professional VPN company?

Trustworthy? I could go either way, depending on particular scenario.

Usable? Infinitely. I've noticed quite a few web sites and services putting obnoxious blocks or filters or other impediments against users coming from "widely-known" VPN and VPS provider IP addresses. But few seem to bother with Microsoft or Amazon IPs.

So for something that has the purpose of either getting me out from behind a restrictive network or wrapping my traffic on an insecure network, a VPN to an Azure- or EC2-provisioned virtual machine works just fine.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#14
post #4

> Does not install Tor, OpenVPN, or other risky servers Although I recognize IPsec is a widely supported protocol and suitable for this use case, did the readme intend to imply OpenVPN is risky?

https://github.com/trailofbits/algo/issues/36 I guess they consider TLS to be a considerable risk. Theoretical I guess.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#15
What is the best way to have a VPN in each continent (apart from the obvious option to have an instance in each region)? I used to pay for a commercial service, but I lost this functionality when I switched to a self-hosted solution.

I prefer this feature since I travel a lot and would like to have lower latency wherever I am.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#16

Serious question, do people consider a cloud provider to be more trustworthy than a professional VPN company?

It depends what you want. If you're trying to obtain some degree of anonymity, then a personal VPN server is obviously much worse, since you'll be a using a dedicated IP address just for you, instead of sharing a public one.

But if you just want to secure your data from an untrustworthy local network, it's a reasonable choice. You're less likely to be flagged as connecting from a "bad" IP.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#17

Serious question, do people consider a cloud provider to be more trustworthy than a professional VPN company?

Trustworthy? I could go either way, depending on particular scenario. Usable? Infinitely. I've noticed quite a few web sites and services putting obnoxious blocks or filters or other impediments against users coming from "widely-known" VPN and VPS provider IP addresses. But few seem to bother with Microsoft or Amazon IPs. So for something that has the purpose of either getting me out from behind a restrictive network…

I have a Streisand [1] server on a Digital Ocean droplet, and I do run into the occasional Cloudflare: blocked or extra-aggressive captcha when I am routed through it.

1: https://github.com/StreisandEffect/streisand

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#18
I actually tried running Algo through Azure and Microsoft terminated my Azure account citing I was breaking Terms of Service. I had hosted Algo for all of two and a half days before the takedown.

Not sure if anyone else has had luck - that was all I was using Azure for was to test Algo out so had nothing else running on Azure at the time. I also ran into a few snags trying to deplay Algo onto Azure so haven't bothered trying to set it up elsewhere. My goal of the VPN was to get a JP address as a few sites I browse are easier to browse with a JP address (eg: I don't get forced bad English translations with no way to toggle to the JP version of the site because I'm coming from an American IP...)

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#19
post #15

What is the best way to have a VPN in each continent (apart from the obvious option to have an instance in each region)? I used to pay for a commercial service, but I lost this functionality when I switched to a self-hosted solution. I prefer this feature since I travel a lot and would like to have lower latency wherever I am.

I swap with friends: they host an endpoint someplace they control and I host one in my colo in California.

They are friends of mine whom I know well so don't worry about one of my IP addresses being used to download child porn.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#20

I prefer https://github.com/hwdsl2/setup-ipsec-vpn . Shamless blog post on setting it up on a Raspberry Pi 3 - https://blog.elasticbyte.net/setting-up-a-native-cisco-ipsec...

Thank you for posting this! I'll be checking this out. I like how the scope of this project is only about setting up an IPsec server automatically on a Linux box.

Algo and Streisand have too much features, making them unwieldy.

Post reply on HN