Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Build your own private WireGuard VPN with PiVPN

jeffgeerling.com

Post reply on HN
Print view View original

41–50 of 235 posts

Re: Build your own private WireGuard VPN with PiVPN

#41

Post by 7839284023 »

briancmoses wrote: post #23

At the price Raspberry Pis are being sold (scalped) for it's discouraging and disappointing to see content creators continually going to that well. You can buy a travel router like the GL.iNet GL-SFT1200 (Opal) for $39.99. All of Gl.iNet's devices run OpenWRT already. Setting up Wireguard on OpenWRT is easy, and using Tailscale is even easier! Edit: Jeff's been creating awesome Raspberry Pi content for a long time an…

> GL.iNet GL-SFT1200 (Opal)

According to https://docs.gl-inet.com/en/4/tutorials/tailscale/ the GL-SFT1200 (Opal) does not support Tailscale but different models from GL.iNet do.

Re: Build your own private WireGuard VPN with PiVPN

#42

Post by doix »

oh_sigh wrote: post #33
tssva wrote: post #30

Earlier quoted context omitted.

If you don't do business in the EU why accept traffic from there and possibly have to deal with GDPR issues.

That's not how GDPR works but it is a common misconception and I can't really blame non-EU businesses for not taking the time to understand a foreign law when blocking is so easy.

What do you mean? That's pretty much how it works. You load up Homedepot website and they along with a bunch of 3rd parties that they partner with will start collecting data about you and storing it. You can't do that to someone from the EU without getting permission along with other restrictions.

For Homedepot to comply with GPDR, they would have to treat EU and non-EU users differently, or they could just block EU. Since you're not trying to sell anything to EU users, blocking them makes things easier.

Re: Build your own private WireGuard VPN with PiVPN

#43

Post by shocks »

briancmoses wrote: post #23

At the price Raspberry Pis are being sold (scalped) for it's discouraging and disappointing to see content creators continually going to that well. You can buy a travel router like the GL.iNet GL-SFT1200 (Opal) for $39.99. All of Gl.iNet's devices run OpenWRT already. Setting up Wireguard on OpenWRT is easy, and using Tailscale is even easier! Edit: Jeff's been creating awesome Raspberry Pi content for a long time an…

Did you read the article?

> PiVPN, luckily, runs on any other Pi-like device, though, as long as it's running a Debian or Pi-OS-like distro.

Re: Build your own private WireGuard VPN with PiVPN

#44

Post by unethical_ban »

cyberpunk wrote: post #27
Severian wrote: post #10

The one problem I encounter with Wireguard is the use of UDP. Some publicly accessible Wifi nets at shops don't allow UDP at all, and this effectively breaks use of the VPN. Yeah, there are utilities like setting up udptunnel or udp2raw and similar, but what a headache. I really don't agree with Wireguard's developers justification that it makes speeds terrible. Who cares? It'll be terrible using those utilities anyw…

A little trick for this is to listen on udp/53 which is almost always unblocked, even before captive portals

Actually, I found ATT blocking inbound port 53 to my home. Maybe udp 443 could work?

Re: Build your own private WireGuard VPN with PiVPN

#45

Post by indeyets »

doix wrote: post #42
oh_sigh wrote: post #33

Earlier quoted context omitted.

That's not how GDPR works but it is a common misconception and I can't really blame non-EU businesses for not taking the time to understand a foreign law when blocking is so easy.

What do you mean? That's pretty much how it works. You load up Homedepot website and they along with a bunch of 3rd parties that they partner with will start collecting data about you and storing it. You can't do that to someone from the EU without getting permission along with other restrictions. For Homedepot to comply with GPDR, they would have to treat EU and non-EU users differently, or they could just block EU.…

GDPR doesn't care about where people are located right now. From the GDPR point of view you still have to treat EU-residents in a special way, even if they're located in US right now.

But EU has less of the leverage if company refuses to do business in EU — that's true.

on the other hand, CCPA is still a thing

Re: Build your own private WireGuard VPN with PiVPN

#46

Post by [deleted] »

briancmoses wrote: post #23

At the price Raspberry Pis are being sold (scalped) for it's discouraging and disappointing to see content creators continually going to that well. You can buy a travel router like the GL.iNet GL-SFT1200 (Opal) for $39.99. All of Gl.iNet's devices run OpenWRT already. Setting up Wireguard on OpenWRT is easy, and using Tailscale is even easier! Edit: Jeff's been creating awesome Raspberry Pi content for a long time an…

[deleted]

Re: Build your own private WireGuard VPN with PiVPN

#47

Post by fest »

Snawoot wrote: post #29
geokon wrote: post #21

Anyone know if these kinds of setups get your around the Chinese firewall? Or is this kind of traffic pretty fingerprintable?

Wireguard is known to be fingerprintable[1]. But at this moment it is unlikely UDP traffic will be filtered by Chinese GFW[2]. But this may change any moment. [1]: https://lists.zx2c4.com/pipermail/wireguard/2018-September/0... [2]: https://gfw.report/publications/usenixsecurity23/en/#sec:res...

I don't think it's true that UDP is completely unfiltered.

I tried setting up a Wireguard site-to-site tunnel for $WORKs Chinese office to access EU office- it stopped working within a day.

Re: Build your own private WireGuard VPN with PiVPN

#48

Post by OJFord »

doix wrote: post #42
oh_sigh wrote: post #33

Earlier quoted context omitted.

That's not how GDPR works but it is a common misconception and I can't really blame non-EU businesses for not taking the time to understand a foreign law when blocking is so easy.

What do you mean? That's pretty much how it works. You load up Homedepot website and they along with a bunch of 3rd parties that they partner with will start collecting data about you and storing it. You can't do that to someone from the EU without getting permission along with other restrictions. For Homedepot to comply with GPDR, they would have to treat EU and non-EU users differently, or they could just block EU.…

> For Homedepot to comply with GPDR, they would have to treat EU and non-EU users differently, or they could just block EU.

Err, or treat everyone in a compliant way?

It's not like you don't already see this within the US anyway - particularly California.

Re: Build your own private WireGuard VPN with PiVPN

#49

Post by distantsounds »

And then you hit CPU bottlenecks whenever you do literally anything bandwidth intensive. The limits of using hobbyist hardware, you get hobbyist level performance. A Raspberry Pi is a horrible solution for running Wireguard. You can get a tiny 1L PC running on an actual Intel or AMD processor with far more perf/$.

Re: Build your own private WireGuard VPN with PiVPN

#50

Post by alpenbazi »

blutack wrote: post #2

If your router supports OpenWRT that's a good alternative that doesn't require any additional boxes/boards and is simpler to set up networking-wise. There's a nice UI that generates the QR codes or config files ready for import into client devices. 1: https://openwrt.org/docs/guide-user/services/vpn/wireguard/b...

OpenWRT on a BananaPI R2 with WG wirks like a charm for ~ 2 years now
Post reply on HN