There are solutions like Algo and ZudVPN to deploy a private VPN without a hassle. The blog is too technical and has less value for straitforward use.
Algo: https://github.com/trailofbits/algo ZudVPN: https://zudvpn.com
WireGuard as VPN Server on Kubernetes with AdBlocking
31–39 of 39 posts
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#32This writeup uses AdGuard for ad blocking, specifically "AdGuard Home". The "How to setup?" link from their homepage pointing to their github repo says that you accept a EULA[0] on clicking the link. The EULA seems to directly contradict their repo GPLv3 license. [1] [0] https://adguard.com/en/eula.html [1] https://github.com/AdguardTeam/AdGuardHome/blob/master/LICEN...
For people using network level ad blocking, do you ever run into annoyances where there's a site you want to access and just can't? Mostly links that route through an analytics network. First time you click on a twitter link for example, or some referrer store links. And once you're stuck, there's normally nothing you can do. At least on the browser I can temporary turn off an extension, but I've found that network l…
There's an android app I use, called FlutterHole that gives you a one click way to temporarily disable the PiHole block. Under the covers it's using an API call.
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#33I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.
How do you run the server? Create a packer image? Init scripts (or something similar)? Keep track of whether it’s up or not?
For developers who have grown up with containers, kubernetes offers the simplest, most familiar way to deploy a service.
I recently had to setup a factorio server. The official guide mentions downloading the binary and using init scripts to get it running. I tried to debug obscure issues with the binary for a few hours before getting fed up and looking for a containerized image; once I found that, it was super easy to start one locally. GCP offers a “container on VM” feature which I then used to deploy the thing in minutes. The experience felt so easy.
Notice that I did not use kubernetes, just something that can run containers. But if I had more apps to run, most likely I would set up one.
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#34I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.
A wise soul once wrote: "You have a problem. You use Kubernetes to solve your problem. Now you have 8 problems."
Kubernetes is a godsend and it solves way more problems than it creates. But I just believe that this simple use case is an overkill. OP just wanted a remote DNS server that is addressable within the VPN. You don't really need Kubernetes or Kilo for that.
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#35Earlier quoted context omitted.
This is why I don't run pihole or NextDNS at the network level anymore, my wife had too many annoyances with slick deals and other things. Whitelists covered most but not everything.
pihole has an API to disable adblocking, which is just an HTTP request so it's pretty easy to trigger. For example, on iOS, write a shortcut so that you can "Hey Siri, disable pihole".
I gave her a shortcut that disabled Pihole via ssh but it was still annoying for her. I don't mind just running it on my devices. I pay for YouTube premium and other things already anyway.
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#36Earlier quoted context omitted.
But then it wouldn't have made the first page
I did not downvote you but, serious question: is there a need for this kind of snark? I understand the point that running a kubernetes cluster just for this would probably be hard to justify. But, if you deploy your services to kubernetes already, then this is a nice guide to do so, isn't it? I find it hard to understand this attitude, especially in a forum dedicated to talk about technology.
It's also a example of a project where you can learn more about a platform. Yes, it could be run outside of k8s, but perhaps the author wanted to add the extra layer of "difficulty".
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#37I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.
It's not artificially injected into my setup. I already host my blog, and a couple other services on my k3s setup, and I didn't want to bootup another server just to sever as a VPN and DNS
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#38Earlier quoted context omitted.
But then it wouldn't have made the first page
I did not downvote you but, serious question: is there a need for this kind of snark? I understand the point that running a kubernetes cluster just for this would probably be hard to justify. But, if you deploy your services to kubernetes already, then this is a nice guide to do so, isn't it? I find it hard to understand this attitude, especially in a forum dedicated to talk about technology.
Well, making things intentionally difficult sounds really stupid, but you learn a whole lot in the process, and for a side project geared towards gaining knowledge, this seemed perfect :) And in the process of setting this up I figured a new way to debug my deployments for remote k8s clusters, using kilo. Also sidenote, yes I actually do host a couple other things on my cluster including my blog, so I didn't really want to spin up a new instance just for DNS and VPN
Re: WireGuard as VPN Server on Kubernetes with AdBlocking
#39Earlier quoted context omitted.
For people using network level ad blocking, do you ever run into annoyances where there's a site you want to access and just can't? Mostly links that route through an analytics network. First time you click on a twitter link for example, or some referrer store links. And once you're stuck, there's normally nothing you can do. At least on the browser I can temporary turn off an extension, but I've found that network l…
This is why I don't run pihole or NextDNS at the network level anymore, my wife had too many annoyances with slick deals and other things. Whitelists covered most but not everything.
NextDNS will soon have a solution to auto-follow tracking links and allow some blocked domains temporarily from the blockpage. Just make sure you install the root CA on all devices.