Live data from Hacker News

Poor man's VPN (pay for only what you need)

github.com

31–40 of 106 posts

Re: Poor man's VPN (pay for only what you need)

#31

My cyberghost vpn is under 3$/mo and has unlimited usage. It's hard to imagine any pay-as-you-go scheme coming even close from a cost perspective.

Indeed. From the title I imagined a setup that launched an EC2 machine and then shut it down after disconnection. That’s the only way to pay cents per month assuming you’re not connected to a VPN 24/7

Managing your own server at 5$/month does not make sense from any perspective other than “privacy” if you believe that.

Re: Poor man's VPN (pay for only what you need)

#32
post #29

Earlier quoted context omitted.

The use case I'm thinking of is when buying random sundries at the store, not ordering sensitive items.

Ah makes sense then! And would be pretty fun.

I've just compulsively been doing it any time I get anything from a store with a loyalty card, which is all of them now, and not once out of a dozen different local stores did I need to create the account--someone always already had :). This I think is a great way to protest against retail surveillance.

Re: Poor man's VPN (pay for only what you need)

#33
post #18

Since basically always, I'm still using PiVPN https://www.pivpn.io/ Is that out of favor nowadays, given new technologies like Wireguard have become mainstream? Would I be better off using this, or the Algo scripts that another commenter mentioned? ( https://github.com/trailofbits/algo )

pivpn now supports both wireguard and openvpn, with wireguard as the default.

Re: Poor man's VPN (pay for only what you need)

#35

> Motivation: Lately due to GDPR many websites are blocking access in the EU. For me, I cannot order medicines back home via netmeds.com Blaming GDPR for this is a bit like blaming a lead mine for getting shot. Yes, it's involved but it's not the reason. It only seems to be certain large US websites that carte-blanch refuse to serve EU visitors over GDPR, mostly those with large, tendril-filled advertising networks t…

To be fair, both of the sites he mentioned are Indian (netmeds.com and makemytrip.com)

I’m sure there are sites in the US, however, that block access from GDPR countries.

Re: Poor man's VPN (pay for only what you need)

#36
I followed a guide and made my own using OpenVPN on AWS Lightsail not (Digital Ocean). But once my AWS Lightsail trial was over the cost crept up and was quickly getting out of hand. I had to stop it and even delete everything since I was still being charged for a powered off VM!

It is an interesting project and it looks good on your resume if you're just starting out in IT.

Re: Poor man's VPN (pay for only what you need)

#38
post #22

> Motivation: Lately due to GDPR many websites are blocking access in the EU. For me, I cannot order medicines back home via netmeds.com Blaming GDPR for this is a bit like blaming a lead mine for getting shot. Yes, it's involved but it's not the reason. It only seems to be certain large US websites that carte-blanch refuse to serve EU visitors over GDPR, mostly those with large, tendril-filled advertising networks t…

If a non-EU site finds itself subject to GDPR because of Article 3(2), they need to then worry about whether or not Article 27(2) applies to excuse them from Article 27(1). If not then they have to deal with the hassle and expense of hiring a representative in the Union. If they are indifferent to EU visitors but happen to get enough of them that 27(2) won't excuse them from 27(1), then it may be worth blocking EU vi…

Just reading this comment makes me inclined to block visitors from the EU from my hobby sites. (Work is compliant; hobby/personal stuff isn’t worth the bother of even reading what Article 3(2) is.)

Re: Poor man's VPN (pay for only what you need)

#39
post #6

Earlier quoted context omitted.

Agreed. You're already setting up SSH and deleting it soon so why bother setting up the IPs, adding your public key, getting the server's public key, configuring iptables, and configuring wireguard locally when you could just SSH? Only benefit I'd see is wireguard would be easier to use on a mobile device, but the setup requires the ability to run ansible and do ssh already so... that's not really practical.

> why bother Last I checked, wireguard had much better performance than sshuttle. May or may not matter for your use case, but it's a reason.

Yes! Last time I used sshuttle (bypassing content blocks in India by tunneling to a server in the US), my bandwidth dropped from 10mbps to 1mbps. Back then wireguard didn’t exist, but IPSEC could easily saturate the 10mbps link. I suspect it’s a combination of TCP-over-TCP and a horrible default buffer size that makes sshuttle unusably slow.

Re: Poor man's VPN (pay for only what you need)

#40
I've generally considered an SSH tunnel as a poor man's VPN. If you're going to the effort to spinup a machine, and use SSH anyway, i find it much easier to use `ssh user@server.com -D 4444` then I can set my browser's proxy settings to use localhost:4444 as a SOCKS5 proxy. For those apps that don't have native proxy support, I use proxychains to force them over a proxy connection.

Ofcourse this is only useful for a single user, and for devices that can use ssh and proxies.

Post reply on HN