Live data from Hacker News

Build your own private WireGuard VPN with PiVPN

jeffgeerling.com

31–40 of 235 posts

Re: Build your own private WireGuard VPN with PiVPN

#31
post #9
post #6

Or just use a Mikrotik router which has Wireguard support built-in.

This is only for Mikrotiks that uses ARM processor. Some older that runs on MIPS doesn't get this update.

Wireguard is available on all architectures, since RouterOS 7.0.

Zerotier is the arm/arm64-only package that you probably had on your mind.

Re: Build your own private WireGuard VPN with PiVPN

#32
post #3

I moved to Tailscale, until I find something simpler, I'm not moving back.

Have you tried Nebula ( https://nebula.defined.net )? I set up a personal Nebula network a few months ago and have been very happy with it thus far. It has the ability to do mesh-style direct routing so you don't necessarily have to pay the out-and-back latency cost if you're connecting to a location that is closer.

Tailscale peers will directly connect.

Re: Build your own private WireGuard VPN with PiVPN

#33
post #30

Earlier quoted context omitted.

Can’t access homedepot from Germany either. I guess it’s HD blocking pesky foreigners

If you don't do business in the EU why accept traffic from there and possibly have to deal with GDPR issues.

That's not how GDPR works but it is a common misconception and I can't really blame non-EU businesses for not taking the time to understand a foreign law when blocking is so easy.

Re: Build your own private WireGuard VPN with PiVPN

#34
post #4

Before going to a long 3 month trip to Asia last year, I installed WireGuard on my Raspberry Pi 1 (original model B from 2012) which was running at home in US. I found PiVPN to be the easiest way to install Wireguard. I didn't know if I even needed a VPN but I was glad, and I was able to use internet as if I were at home. It was weird, but a lot of sites are blocked oversea, even though it shouldn't. For example, I c…

I have a US-and-Canada based business and I ban customers from elsewhere in my T’s and C’s. Simply because I don’t know their laws.

I don’t outright block them because I myself travel, and some foreign laws apply to their citizens wherever they are.

I can completely see why you might want to ban overseas IP connections though, and I’ll probably do it soon.

Re: Build your own private WireGuard VPN with PiVPN

#35
post #30

Earlier quoted context omitted.

Can’t access homedepot from Germany either. I guess it’s HD blocking pesky foreigners

If you don't do business in the EU why accept traffic from there and possibly have to deal with GDPR issues.

Or they've just forgotten that the world outside ol' Merica exists, could be either one.

Re: Build your own private WireGuard VPN with PiVPN

#36
post #21

Anyone know if these kinds of setups get your around the Chinese firewall? Or is this kind of traffic pretty fingerprintable?

Many VPNs get around it just fine, according to the random experiences I saw online. The issue is not technical, but legal: the traffic is fingerprintable, and that the parties involved (user, ISP) are legally required to store some of the traffic, and to make that available for authorities to check later [0]. I imagine that they handle this like how they handle other law enforcement - by applying it when they feel like. So at the end of the day, don't get caught.

[0] https://en.wikipedia.org/wiki/Cybersecurity_Law_of_the_Peopl...

Re: Build your own private WireGuard VPN with PiVPN

#37

Earlier quoted context omitted.

I don't know first hand, nor am I speaking for my employer (who happens to be one of the two companies you mentioned), but if it was me, I would assume that if my company doesn't do business outside of the United States, then may as well deny traffic for services that wouldn't be available outside of the United States, since it is more often than not problematic traffic. This means sometimes legit traffic would be in…

My Canadian stepfather died. Family is not close and I’m in the US. The Canadian newspaper where his obit would be doesn’t allow connections from the US. More than a “small amount of legit pain” was the result.

I am sorry for your loss, and I'm not trying to minimize your pain. This is the problem with data, it's unfeeling and cold. You and I are two customers of something companies with lots more than us, and a spreadsheet doesn't capture our pains when we feel them.

Re: Build your own private WireGuard VPN with PiVPN

#38
post #24

Base wireguard is pretty easy to setup, especially with wg-quick, so idk why anything would be required to make it easier. Also, Rosenpass is quite great and easy to use, which really improves the security further. Hopefully Rosenpass will become part of the base implementation at some point.

People keep saying this, but it hasn't been true for me. I've had to reinstall PiVPN a few times, I assume because automatic updates may have broken it somehow. I tried manually configuring wireguard every time but just could not get it to work after hours of trying. PiVPN has always been extremely easy to install and configure.

Re: Build your own private WireGuard VPN with PiVPN

#39
post #30

Earlier quoted context omitted.

If you don't do business in the EU why accept traffic from there and possibly have to deal with GDPR issues.

Or they've just forgotten that the world outside ol' Merica exists, could be either one.

They are an American business that does not deal with other countries outside North America. Why would they care about the world outside of "ol' Merica?"

Re: Build your own private WireGuard VPN with PiVPN

#40
post #4

Before going to a long 3 month trip to Asia last year, I installed WireGuard on my Raspberry Pi 1 (original model B from 2012) which was running at home in US. I found PiVPN to be the easiest way to install Wireguard. I didn't know if I even needed a VPN but I was glad, and I was able to use internet as if I were at home. It was weird, but a lot of sites are blocked oversea, even though it shouldn't. For example, I c…

Did you do anything to handle the event where, say, you lose connectivity and the system needs a reboot? Just curious about what would be the best way to handle that scenario.
Post reply on HN