Live data from Hacker News

Poor man's VPN (pay for only what you need)

github.com

101–106 of 106 posts

Re: Poor man's VPN (pay for only what you need)

#101
post #39

Earlier quoted context omitted.

> why bother Last I checked, wireguard had much better performance than sshuttle. May or may not matter for your use case, but it's a reason.

Yes! Last time I used sshuttle (bypassing content blocks in India by tunneling to a server in the US), my bandwidth dropped from 10mbps to 1mbps. Back then wireguard didn’t exist, but IPSEC could easily saturate the 10mbps link. I suspect it’s a combination of TCP-over-TCP and a horrible default buffer size that makes sshuttle unusably slow.

Pretty sure sshuttle doesn't suffer from TCP over TCP, similar to how normal SSH tunnels don't because they operate at layer 4 and copy the bytes manually onto the multiplexed connection. Layer 2-3 tunnels is typically where you run into issues.

Re: Poor man's VPN (pay for only what you need)

#102

Nothing will ever beat Tailscale (it is by far my favorite piece of software in this space)

tailscale is closed source and paid for deployments with more than one user.

Good point. The software in this space should be open source. This is the only way you can trust it.

Re: Poor man's VPN (pay for only what you need)

#103

Earlier quoted context omitted.

My VPS costs 2$/month.

How much traffic do you get? What software? OpenVPN is a resource hog. I'm on a $10/year VPS with 100 Gb/month traffic. Not great, but not terrible.

> OpenVPN is a resource hog.

Not in my experience. Using it now on a super budget VPS ($4/year), very little CPU/memory usage even when streaming video.

Re: Poor man's VPN (pay for only what you need)

#105
post #39

Earlier quoted context omitted.

Yes! Last time I used sshuttle (bypassing content blocks in India by tunneling to a server in the US), my bandwidth dropped from 10mbps to 1mbps. Back then wireguard didn’t exist, but IPSEC could easily saturate the 10mbps link. I suspect it’s a combination of TCP-over-TCP and a horrible default buffer size that makes sshuttle unusably slow.

Pretty sure sshuttle doesn't suffer from TCP over TCP, similar to how normal SSH tunnels don't because they operate at layer 4 and copy the bytes manually onto the multiplexed connection. Layer 2-3 tunnels is typically where you run into issues.

Ah you’re completely right.

Re: Poor man's VPN (pay for only what you need)

#106
post #87

Earlier quoted context omitted.

It's getting to the point where anything other than a censored, throttled, traffic shaped, surveilled, overpriced, residential ISP IP is a second class citizen. It's a real bummer. I use a router behind my router at home that runs 100% of my traffic over a VPN before it leaves the building. Any services that don't work, I simply don't use them. Someone else will take my money.

The only option I found to work was to have friends with a spare /24 willing to peer with your BGP router, unfortunately

I wish I had friends like that.
Post reply on HN