Live data from Hacker News

VPN service for hosting public-facing services on non-hosting ISP circuits

holepunch.io

21–30 of 48 posts

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#21
post #16

The website looks good. Obviously early days since pricing is missing. Probably sorting out value proposition, how much they can get away with charging, etc. A comparative point is using Cloudflare and Argo tunnel which I'm currently using.

If you are technically capable to set it up by yourself using OpenVPN, you can get a dirt cheap VPS with one IPv4 address for less than $1/month ($12/year). lowendtalk.com is a community that discusses these deals.

My experiences have been that these businesses generally disappear after a few months and leave you holding the bag, with a service disruption and data loss.

Recommendations for any “low end box” that’s about $12 a year and not a fly by night scam would be appreciated.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#22
post #21
post #16

Earlier quoted context omitted.

If you are technically capable to set it up by yourself using OpenVPN, you can get a dirt cheap VPS with one IPv4 address for less than $1/month ($12/year). lowendtalk.com is a community that discusses these deals.

My experiences have been that these businesses generally disappear after a few months and leave you holding the bag, with a service disruption and data loss. Recommendations for any “low end box” that’s about $12 a year and not a fly by night scam would be appreciated.

I've used hostus and alpharacks for multiple years at that price range.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#23
post #6

I'll try to use this for SSH. What's the best way to embed an SSH session inside of HTTP requests?

It seems to be using ssh to tunnel your http connection in the first place. So, if ssh is blocked in your network, this won't work.

That's not how networking works. Incoming connections are usually blocked which is what this is for. It punches a hole through your firewall by using an established ssh tunnel to forward traffic over. You don't need to allow incoming anything to use this service

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#25
post #22
post #21

Earlier quoted context omitted.

My experiences have been that these businesses generally disappear after a few months and leave you holding the bag, with a service disruption and data loss. Recommendations for any “low end box” that’s about $12 a year and not a fly by night scam would be appreciated.

I've used hostus and alpharacks for multiple years at that price range.

Alpharacks is super spammy and IMO a bit shady. Do not give them an email address that isn't specific to them.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#26
post #7

This might actually be the future of running net-accessible stuff on your own devices, if the NAT-imposed unreachability continues to cement itself as the default expectation for people. Great that they have a free tier. Though I think you can do this same thing with many existing tunnel providers too, no?

> This might actually be the future of running net-accessible stuff on your own devices I sure hope not, demand ipv6.

Yes, this kind of proxying is the plan D.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#27
post #7

This might actually be the future of running net-accessible stuff on your own devices, if the NAT-imposed unreachability continues to cement itself as the default expectation for people. Great that they have a free tier. Though I think you can do this same thing with many existing tunnel providers too, no?

> This might actually be the future of running net-accessible stuff on your own devices I sure hope not, demand ipv6.

Possession of an IPv6 address does not automatically imply that your ISP allows incoming connection to your ports.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#28
post #24

Another option is algo using wireguard with port forwarding. https://github.com/trailofbits/algo

I'm really confused why this creates an IPsec server AND an wireguard server, or do I read that wrong? Managing two server which basically do the same thing seems to double the attack surface without any gains. One selling point of wireguard is to be an easier but still as least as secure alternative to IPsec.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#29
post #24

Another option is algo using wireguard with port forwarding. https://github.com/trailofbits/algo

I'm really confused why this creates an IPsec server AND an wireguard server, or do I read that wrong? Managing two server which basically do the same thing seems to double the attack surface without any gains. One selling point of wireguard is to be an easier but still as least as secure alternative to IPsec.

I've only used it once. As I recall, you can install IKEv2 or WireGuard. Or both.

Re: VPN service for hosting public-facing services on non-hosting ISP circuits

#30
post #24

Another option is algo using wireguard with port forwarding. https://github.com/trailofbits/algo

I'm really confused why this creates an IPsec server AND an wireguard server, or do I read that wrong? Managing two server which basically do the same thing seems to double the attack surface without any gains. One selling point of wireguard is to be an easier but still as least as secure alternative to IPsec.

It is so that you can use the same VPN server with devices which support wireguard and which only support IPsec.
Post reply on HN