Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Warp – Mobile VPN

blog.cloudflare.com

Post reply on HN
Print view View original

431–440 of 500 posts

Re: Warp – Mobile VPN

#431

Post by chrisbroadfoot »

mr_toad wrote: post #424
broknbottle wrote: post #309

Earlier quoted context omitted.

wouldn't be that difficult to write a script that checks geoip and launches a VPS in the region closest to your current devices public address. You could even create an iOS shortcut to allow you to do it from your iPhone

Not sure how hard it would be to install WireGuard fully unattended, I tried it with OpenVPN months ago and still haven’t completed it. Once you get your script to work, you’d have to wait minutes for the VPN to spin up in a new region.

WireGuard is much easier to get configured than OpenVPN.

Check out algo: https://github.com/trailofbits/algo

I think you could bake your configuration into a custom image, so it would be fast to get a VM started (about 30 secs on GCE, not sure about EC2).

If you use stopped instances, it's even faster.

(I work at GCP so know more about GCE than EC2)

Re: Warp – Mobile VPN

#432

Post by tptacek »

jgrahamc wrote: post #143
mwcampbell wrote: post #116

Earlier quoted context omitted.

Fair point. I especially appreciate that even Workers is based on a W3C standard, when it could have been a proprietary API. However, Cloudflare has also adopted and promoted at least one standard that adds complexity for dubious benefit, specifically DNSSEC, which tptacek has repeatedly criticized (e.g. [1]). Moreover, Cloudflare is encouraging both providers and consumers to bypass the public Internet as much as po…

DNSSEC is a standard. We literally adopted and promoted a standard. That is not about your original comment about us trying to take over the Internet or something. And we work hard on the standards-based Internet pushing HTTP/2, IPv6, QUIC, TLS 1.3, ...

Exactly what is this supposed to mean? It's a "standard"? So what? Lots of bad things have been standardized. You have to justify the work on the merits; you can't simply appeal to IETF standardization as intrinsically good. TLS Heartbeat was a standard, and it was not intrinsically good.

Re: Warp – Mobile VPN

#433

Post by mkbkn »

eastdakota wrote: post #346
canada_dry wrote: post #225

Earlier quoted context omitted.

> exceptionally well-written product announcement Yup... a rare beast these days. My niece is a gifted writer - one of less than a half dozen that I personally know. She graduated recently and had her pick of several positions due to her portfolio of work.

I've been fortunate enough to earn degrees in English (BA), Computer Science (minor), Law (JD), and Business (MBA). The one that serves me the most regularly in my role as CEO of Cloudflare is my English degree. Learning to communicate is so critical to success in your field, regardless of the field.

"Every business is a writing business." - Ray Edwards

Just curious, do you hire copywriters?

Re: Warp – Mobile VPN

#434

Post by mzatlyn »

mkbkn wrote: post #433
eastdakota wrote: post #346

Earlier quoted context omitted.

I've been fortunate enough to earn degrees in English (BA), Computer Science (minor), Law (JD), and Business (MBA). The one that serves me the most regularly in my role as CEO of Cloudflare is my English degree. Learning to communicate is so critical to success in your field, regardless of the field.

"Every business is a writing business." - Ray Edwards Just curious, do you hire copywriters?

Yes, we do. We have roles open in Austin and SF right now: https://www.cloudflare.com/careers/departments/marketing/

Re: Warp – Mobile VPN

#435

Post by wrs »

maltalex wrote: post #138
wrs wrote: post #136

Congrats! Just a few days ago you said BoringTun is “not ready to be used in mission critical tasks” [1] — has this changed? [1] https://blog.cloudflare.com/boringtun-userspace-wireguard-ru...

1. This isn't mission critical. It's a free product that comes with no guarantees. 2. They're onboarding people slowly. You can't use it yet without an invitation.

Wow, so encouraging thousands of people to run all their mobile traffic through something doesn’t make it mission critical? How do you know what their missions are? (I don’t imagine CloudFlare would feel that way...at least I hope not.)

Re: Warp – Mobile VPN

#436

Post by slim »

kohtatsu wrote: post #195
stavros wrote: post #184

Earlier quoted context omitted.

I was in the same boat, hopefully this will help: https://www.stavros.io/posts/how-to-configure-wireguard/ It's actually very easy to set up, I don't know why the official docs make it seem super hard.

What's the reasoning behind embedding the private keys directly in the config?

you have to store them somewhere with appropriate access rights anyway. Since the config is mainly a private key and an ip address it makes sense to not complicate the setup with another file to manage

Re: Warp – Mobile VPN

#438

Post by x00x »

Can't wait to see Desktop version that works on Linux and maybe as extension on Firefox/Chrome - for those who just want to use this for browser and not other software. I've used 1.1.1.1 since day one and love it. Much faster then Google/OpenDNS for me. I actually use it on router.

Maybe next you can do a better security for our WiFi? But this might require releasing a better hardware not just software.

Re: Warp – Mobile VPN

#439

Post by ignoramous »

willstrafach wrote: post #415
ignoramous wrote: post #252

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

Have you already started on this concept? Myself and our team are working on some of the ideas you listed for an upcoming app ( https://itunes.apple.com/us/app/guardian-firewall/id13637963... ). It would be great to chat further, if you have interest in working on this concept (e-mail is will.strafach@guardianapp.com). Designing a reasonably secure and reliable mobile VPN has been a very difficult challenge to get ri…

Nice. GuardianApp is very close to what I had in mind. Great landing page, btw!

> Have you already started on this concept?

Initial stages where we have looked at OSS projects to fork for a quick prototype, with our focus being exclusively on Android, and not just limited to VPN.

> Designing a reasonably secure and reliable mobile VPN has been a very difficult challenge to get right.

Thanks for the heads-up. From usability point-of-view, I've seen my share of VPNs mess up and sink hole all traffic. On one ocassion, an app simply refused to get past its loading-screen unless I turned off VPN.

> It would be great to chat further, if you have interest in working on this concept.

Sure, thanks. I'd be sure to email you, Will.

Re: Warp – Mobile VPN

#440

Post by auslander »

mwcampbell wrote: post #137
maltalex wrote: post #121

I'd wager that the Super Secret Plan is geared towards further centralizing the Internet. Preferably on Cloud Flare's infrastructure. This is one part of a tug-of-war that's going on in recent years between Internet network operators and cloud providers, with the cloud providers slowly but surely winning. For better or worse, we are moving away from a distributed Internet composed of many autonomous networks into a f…

Contemplating this makes me happy that HN (among other sites I frequent) doesn't use one of these big providers (though it used to use Cloudflare). May it always stay that way.

I might have triggered the divorce :) https://news.ycombinator.com/item?id=17399783
Post reply on HN