Earlier quoted context omitted.
> why bother Last I checked, wireguard had much better performance than sshuttle. May or may not matter for your use case, but it's a reason.
Yes! Last time I used sshuttle (bypassing content blocks in India by tunneling to a server in the US), my bandwidth dropped from 10mbps to 1mbps. Back then wireguard didn’t exist, but IPSEC could easily saturate the 10mbps link. I suspect it’s a combination of TCP-over-TCP and a horrible default buffer size that makes sshuttle unusably slow.
Poor man's VPN (pay for only what you need)
101–106 of 106 posts
Re: Poor man's VPN (pay for only what you need)
#102Re: Poor man's VPN (pay for only what you need)
#103Earlier quoted context omitted.
My VPS costs 2$/month.
How much traffic do you get? What software? OpenVPN is a resource hog. I'm on a $10/year VPS with 100 Gb/month traffic. Not great, but not terrible.
Not in my experience. Using it now on a super budget VPS ($4/year), very little CPU/memory usage even when streaming video.
Re: Poor man's VPN (pay for only what you need)
#104A great experience, and I'd say it just works.
Re: Poor man's VPN (pay for only what you need)
#105Earlier quoted context omitted.
Yes! Last time I used sshuttle (bypassing content blocks in India by tunneling to a server in the US), my bandwidth dropped from 10mbps to 1mbps. Back then wireguard didn’t exist, but IPSEC could easily saturate the 10mbps link. I suspect it’s a combination of TCP-over-TCP and a horrible default buffer size that makes sshuttle unusably slow.
Pretty sure sshuttle doesn't suffer from TCP over TCP, similar to how normal SSH tunnels don't because they operate at layer 4 and copy the bytes manually onto the multiplexed connection. Layer 2-3 tunnels is typically where you run into issues.
Re: Poor man's VPN (pay for only what you need)
#106Earlier quoted context omitted.
It's getting to the point where anything other than a censored, throttled, traffic shaped, surveilled, overpriced, residential ISP IP is a second class citizen. It's a real bummer. I use a router behind my router at home that runs 100% of my traffic over a VPN before it leaves the building. Any services that don't work, I simply don't use them. Someone else will take my money.
The only option I found to work was to have friends with a spare /24 willing to peer with your BGP router, unfortunately