Live data from Hacker News

Warp – Mobile VPN

blog.cloudflare.com

491–500 of 500 posts

Re: Warp – Mobile VPN

#491
post #483

@eastdakota, I have 1.1.1.1 at router level but when I installed the app it told me I wasn't using 1.1.1.1. Is this by design or there is possibly something wrong with my router's DNS setup?

It's a whole different thing. If you install the 1.1.1.1 app, it's sending all your DNS lookups from your phone directly to 1.1.1.1. It doesn't care what's happening at the router level - which is kind of the point, I think.

Even moreso once this Warp VPN functionality is live.

Re: Warp – Mobile VPN

#492
post #484

Earlier quoted context omitted.

Damn. Cloudflare's super nice customer-centric stance on this product is killing me. I quit my FAANG job just this past month to build something similar.

OT: What's going on in your profile? is this some sorta custom way to follow other user's posts?

Just a reminder to self that I should periodically check comments from those accounts. Pretty much stole it from tptacek's profile.

Re: Warp – Mobile VPN

#493
post #286

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

My biggest concern with any VPN is: do I trust you? I’ve been reluctant to sign up with any of these VPN services that seem to be advertising everywhere nowadays because I don’t know what they’ll do with my internet traffic. The CloudFlare VPN is interesting to me because they’re a large, established company with a good reputation, so I trust them more than TunnelBear or ExpressVPN or PIA or whoever’s sponsoring YouT…

> established company with a good reputation

are you insane?

CF's reputation is terrible[1]. They are trying to MiTM the entire internet, and frustrate attempts to access some of the most important information online( including but ont limited to evidence of the holocaust, sexual health information and climate change ). They are practically a threat to humanity itself at this point - you shouldn't trust them worth anything.

[1] https://notabug.org/themusicgod1/cloudflare-tor/

Re: Warp – Mobile VPN

#494
post #286

Earlier quoted context omitted.

My biggest concern with any VPN is: do I trust you? I’ve been reluctant to sign up with any of these VPN services that seem to be advertising everywhere nowadays because I don’t know what they’ll do with my internet traffic. The CloudFlare VPN is interesting to me because they’re a large, established company with a good reputation, so I trust them more than TunnelBear or ExpressVPN or PIA or whoever’s sponsoring YouT…

> established company with a good reputation are you insane? CF's reputation is terrible[1]. They are trying to MiTM the entire internet, and frustrate attempts to access some of the most important information online( including but ont limited to evidence of the holocaust, sexual health information and climate change ). They are practically a threat to humanity itself at this point - you shouldn't trust them worth an…

The cynicism is fair and I can see where it comes from, but cloudflare CTO, jgrahamc, has replied elsewhere in this thread [0] why tor is a difficult scenario for cloudflare to handle. They did promise to make life easier for tor users but the abuse over tor is apparently relentless, according to them.

[0] https://news.ycombinator.com/item?id=19543188

Re: Warp – Mobile VPN

#495
post #2

It would be really interesting to learn more about the technical details of the "UDP-based protocol" Warp uses

It seems to me like cloudflare might be doing some, none, or all of these:

1. VPN from mobile device to the nearest Cloudflare PoP.

2. Use Cloudflare backbone to connect to the nearest exit PoP to destination.

3. Between entry and exit PoPs, do all sorts of optimisations that are possible, like:

3a. Jumbo frames, custom/advanced form of TCP congestion control, multipath, fast-open.

3b. Custom transport protocol (quic, sctp, etc).

3c. Custom compression and error correction schemes.

4. Reverse CDN: Proxy HTTP/S requests and serve content from cache.

5. Peer CDN: serve content from nearby devices?

Something like AWS Silk [0] or Google Chrome FlyWheel [1] but on steroids.

Easier said than done, I guess.

[0] https://news.ycombinator.com/item?id=3215778

[1] https://news.ycombinator.com/item?id=9441372

Re: Warp – Mobile VPN

#496
post #484

Earlier quoted context omitted.

OT: What's going on in your profile? is this some sorta custom way to follow other user's posts?

Just a reminder to self that I should periodically check comments from those accounts. Pretty much stole it from tptacek's profile.

Cool thanks! I'm gonna do it too :)

Re: Warp – Mobile VPN

#497
post #286

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

My biggest concern with any VPN is: do I trust you? I’ve been reluctant to sign up with any of these VPN services that seem to be advertising everywhere nowadays because I don’t know what they’ll do with my internet traffic. The CloudFlare VPN is interesting to me because they’re a large, established company with a good reputation, so I trust them more than TunnelBear or ExpressVPN or PIA or whoever’s sponsoring YouT…

The IPv6,IPSec and PKI together may be interesting to authenticate and encrypt traffic without any entity managing the traffic.

It could eliminate the client/server by activating the authentication and encryption with exchange of certificates by using a PKI.

It may provides a full p2p encryption in the network layer without logging your traffic somewhere or third parties. open-sourced would be awesome.

Re: Warp – Mobile VPN

#499

> We built Warp around WireGuard So basically Cloudflare created an app with Cloudflare branding and set up a Wireguard server for everyone. No bad, but just check out the original: https://www.wireguard.com While I am not a big fan of VPNs in general, I have to admit, that Wireguard performs exceptionally well. I tested it a week ago and the added latency is pretty much just the network latency and the bandwidth los…

> So basically Cloudflare created an app with Cloudflare branding and set up a Wireguard server for everyone. Not just one -- servers in 175 (and growing) locations spread around the world, and the app will always use the closest one to you. That's arguably a lot more important that what protocol it uses, and is not something you could easily DIY.

> That's arguably a lot more important that what protocol it uses

I'd disagree. Many VPN protocols suck even if the gateway is in-house. I guess there's a reason they introduced that with Wireguard specifically.

Post reply on HN