Live data from Hacker News

Warp – Mobile VPN

blog.cloudflare.com

341–350 of 500 posts

Re: Warp – Mobile VPN

#341

Earlier quoted context omitted.

CF-Connecting-IP is what we recommend using. See https://support.cloudflare.com/hc/en-us/articles/200170986-H... for details.

Which presumably only works if your site is using Cloudflare? Since you wouldn't be MITMing SSL in order to inject this header?

This is correct. It's significantly harder to inject the origin IP into a TCP stream. We have ways [1] of doing it, but it requires some coordination on both sides.

1- https://blog.cloudflare.com/mmproxy-creative-way-of-preservi...

Re: Warp – Mobile VPN

#342
post #329

VPNs are "trust me" security, and Cloudflare certainly has a better reputation than many VPN services, so, in that regard, Cloudflare's entry is welcome, but... I've been using Tor as a privacy-friendly VPN, so Cloudflare getting into this business will make it feel a bit different, every time I see an error Web page that says Cloudflare is blocking a Tor exit node from viewing a page that Cloudflare hosts. Perhaps C…

> Perhaps Cloudflare could figure out how to block competitor Tor less (even if there's abuse coming in through Tor)? That might be difficult, but an excellent show of good faith.

they are: https://blog.cloudflare.com/cloudflare-onion-service/

Re: Warp – Mobile VPN

#343

Earlier quoted context omitted.

I mean, for DIY you only need one because you're only one user . Pick a VPS host with a data center near you... done.

It's only near you when you're at home though. This works around the world.

maybe works better. But I used mine hosted in the US while I was traveling abroad in the UAE. Worked fine. I often saw better service with it turned on.

Re: Warp – Mobile VPN

#344

Just as an aside, I thought that was an exceptionally well-written product announcement, or press release, or whatever you'd call it. It was long, but I didn't mind reading the whole thing. It answered all the basic questions about why I should use it, how they plan to make money, and with enough technical detail that I understood essentially how it works. It was very much the opposite of the marketing material you g…

Overall I'd agree, though they nearly lost me at the start: > on “April Fools” a handful of elite tech companies decide to waste the time of literally billions of people with juvenile jokes that only they find funny. Bah Humbug much?

I think a lot of the backlash the tech industry is facing is due to its unwillingness to grow up. So, yes, perhaps I'm a humbug in tech circles, but it's only because I've been outside of the Silicon Valley bubble and listened to how the tech industry is perceived. It's not good. And the April Fools foolishness is a very stark illustration of that.

Re: Warp – Mobile VPN

#345
post #246

Honestly, Jason is hopefully going to be thrilled Wireguard is going to be deployed to an absolutely massive scale, not even OpenVPN has been offered as a 'free VPN' like this. I'm really hoping it works out, and Cloudflare can continue to contribute their expertise working with WG. At the end of the day, this benefits everyone since OpenVPN whilst it's reliable in my experience, is just too burdensome. I also am int…

We'll keep our open source Rust WireGuard code up to date with our internal version. We hope to work with the WireGuard project later once the dust has settled. Warp+ will use Argo (our "Waze" of the Internet) to improve routing. It significantly improves reliability and performance. Pricing for Warp+ will vary by region/country to ensure it's appropriately affordable everywhere.

Can you talk about the details of Argo, in a blogpost or elsewhere?

I'm referring to the routing logic and optimisation algos.

Asked already several times in the past. I'm very curious as I've worked a lot on those specific issues. Thanks.

Re: Warp – Mobile VPN

#346

Just as an aside, I thought that was an exceptionally well-written product announcement, or press release, or whatever you'd call it. It was long, but I didn't mind reading the whole thing. It answered all the basic questions about why I should use it, how they plan to make money, and with enough technical detail that I understood essentially how it works. It was very much the opposite of the marketing material you g…

> exceptionally well-written product announcement Yup... a rare beast these days. My niece is a gifted writer - one of less than a half dozen that I personally know. She graduated recently and had her pick of several positions due to her portfolio of work.

I've been fortunate enough to earn degrees in English (BA), Computer Science (minor), Law (JD), and Business (MBA). The one that serves me the most regularly in my role as CEO of Cloudflare is my English degree. Learning to communicate is so critical to success in your field, regardless of the field.

Re: Warp – Mobile VPN

#347
post #242

Earlier quoted context omitted.

It's been pretty common and a big part of why Netflix created the service iirc. ISPs have been throttling netflix as a negotiating tactic when creating peering agreements for upstream traffic or deploying more content servers. The whole process has been really horrible imho. Some mobile providers do it to force lower quality streams, that in fairness are probably more appropriate for small/mobile devices. 1080p-4K ar…

Flagships from Apple, Samsung and Google are 1080p resolution or better. 4k is overkill but 1080p absolutely is not.

The question is, on a 5" screen will you really notice the difference between a 1080p stream and a 720p stream for video? Especially considering the 720p may be higher bits per pixel than the 1080p stream. I'd rather have a 720p stream at 3/4 the bitrate of a 1080p stream, which is often the case as there are multiple levels for a given resolution.

Then again, I don't always notice even on a larger screen from a better 720p stream and a poorer (relatively) 1080p stream. I often notice the difference from 1080p to 4K though, which is a slightly bigger bump on a much larger screen.

Re: Warp – Mobile VPN

#348

Earlier quoted context omitted.

It's been pretty common and a big part of why Netflix created the service iirc. ISPs have been throttling netflix as a negotiating tactic when creating peering agreements for upstream traffic or deploying more content servers. The whole process has been really horrible imho. Some mobile providers do it to force lower quality streams, that in fairness are probably more appropriate for small/mobile devices. 1080p-4K ar…

Netflix will never even try to show you 4K on a mobile device. The ISPs know this. They just want to throttle Netflix so that you'll prefer the ISPs streaming service to Netflix.

I think it's more about double dipping and getting extra money for network agreements and near-side content servers from Netflix.

Re: Warp – Mobile VPN

#349

They've glossed over a few details that I'm curious about: 1. What will the exit IPs be? Will I get to stay with-in my region and access region specific content, or can I bypass censors, both government (porn, "glory of Islam", etc), and private (Netflix region-specific content, GDPR non-compliant websites that accidentally block my region). 2. Can I select my own exit region? 3. How do they handle abuse? Can I spam…

1. It will exit close to you, unless you have Warp+ in which case we might route it to a different PoP closer to your destination if that makes it faster. It is not designed to bypass censors.

2. No

3. Exactly what an actually nefarious person WOULD say!

Re: Warp – Mobile VPN

#350
post #329

VPNs are "trust me" security, and Cloudflare certainly has a better reputation than many VPN services, so, in that regard, Cloudflare's entry is welcome, but... I've been using Tor as a privacy-friendly VPN, so Cloudflare getting into this business will make it feel a bit different, every time I see an error Web page that says Cloudflare is blocking a Tor exit node from viewing a page that Cloudflare hosts. Perhaps C…

An interesting trick - if Cloudflare allows it - would be Device -> Tor -> This -> Internet. Tor provides anonymity, this provides protection against exit nodes maliciously modifying traffic (you can find a number of examples of this just by searching).
Post reply on HN