I run my own WireGuard VPN for my home devices, and I have had a hell of a time getting MDNS to work over it. I tried various reflectors and couldn't get them to work, has anyone made this simple?
Build your own private WireGuard VPN with PiVPN
181–190 of 235 posts
Re: Build your own private WireGuard VPN with PiVPN
#182Earlier quoted context omitted.
After skimming both the GitHub and the protocol specification for rosenpass, I still have no idea what benefit it provides on top of wireguard and therefore why I should use it.
It's below the fold on rosenpass.eu but: > Rosenpass is a key-exchange protocol using techniques that are secure against attacks from quantum computers. It achieves the same security guarantees as WireGuard, using two strong post-quantum key exchange methods – Classic McEliece and Kyber. > To use Rosenpass, you don't have to get rid of WireGuard; Rosenpass handles post-quantum security, WireGuard handles pre-quantum…
I saw some references to post-quantum security, but I also saw references to something called "Post-Quantum Wireguard" so it seemed like that was handled by some other project, or at best some sub-component of Rosenpass.
Re: Build your own private WireGuard VPN with PiVPN
#183Earlier quoted context omitted.
Well if they don't want the rest of the world's money, that's alright. Someone else will get it instead.
Do you know what home depot is? They're a store, that you have to like, go to.
Ah my bad. I thought it was like a depot, that you had at home. /s
If McDonalds and Aldi can work on multiple continents I'm sure it's not logistically impossible.
Re: Build your own private WireGuard VPN with PiVPN
#184For me HPE ProLiant MicroServer G10+ is better solution but I couldn't find wireless pcie card that reliable could be used as AP.
I have QNAP QWA-AC2600 bought in Europe but Linux driver is crippled and sets regulatory region to US because ROM doesn't have it set properly. And there is no way to change it. Driver developers think it's a feature and won't revert it. I really appreciate that driver developers know better than me where I use hardware, but for now I don't want to use US settings in for example Poland. Or all frequencies are tagged as not for AP use. My question is, is there any pcie card that could be used as AP?
Re: Build your own private WireGuard VPN with PiVPN
#185I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…
The Pis shine primarily in terms of power consumption, under load, a mini PC could cosume 50W, where a Pi (and other ARM boards) will do an absolute maximum of 15W. And if you have multiple devices that run 24/7, that could be a significant saving
If you need to pull 50W from a mini PC constantly, you probably can't run that same load (without horrible latency, throughput and stability issues) on a 15W ARM SBC to begin with.
Re: Build your own private WireGuard VPN with PiVPN
#186Earlier quoted context omitted.
The Pis shine primarily in terms of power consumption, under load, a mini PC could cosume 50W, where a Pi (and other ARM boards) will do an absolute maximum of 15W. And if you have multiple devices that run 24/7, that could be a significant saving
Like others have said, the PCs you're looking at might be mini in form factor but specced more traditional desktops. There there are plenty of mini PC options that compete at 15 watts and lower range. One example I use is https://www.amazon.com/Computer-Windows-Dual-Band-Bluetooth-... . This gets you built in 128 GB eMMC, dual display output, more USB 3, about the same overall CPU performance but significantly higher…
Wow thanks for sharing. That’s a pretty amazing box, curious what it’s TDP and noise characteristics are
Re: Build your own private WireGuard VPN with PiVPN
#187I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…
What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people know exactly what hardware to buy.
Even if the hardware is overpriced or underpowered, synergies are created when everyone is using the same hardware. IMHO, one cannot discount the value of that, but these comments downgrading the RPi aways do. Of course there are better choices for hardware than the RPi, and perhaps without the supply issues, but good luck getting everyone to buy the same thing so that projects do not have to account for "hardware compatibilty".
1. Eleven years and counting
Re: Build your own private WireGuard VPN with PiVPN
#188Base wireguard is pretty easy to setup, especially with wg-quick, so idk why anything would be required to make it easier. Also, Rosenpass is quite great and easy to use, which really improves the security further. Hopefully Rosenpass will become part of the base implementation at some point.
for one or two devices, yes. But after that, key and config management becomes a bit more challenging. I have a bout 14 devices on a VPN, so that uses ansible to make sure all the keys are where they should be, and can be rotated if needs be.
I have a WireGuard VPN with about 250 devices, most of them POS machines in the wild. I adopted WireGuard for our first machines about half a year before the 1.0 release, so there weren't much tools yet.
I piggybacked onto the original configuration file format and built myself https://github.com/WolleTD/wg-setup, which helps me validating the correctness and uniqueness of new entries, hacks names into the entries and even updates an internal DNS zone.
I really don't have to care much for key rotation, though. As most of the devices are out of our control anyway, they aren't allowed to connect to anything inside the VPN. It's just for us to connect to them.
Re: Build your own private WireGuard VPN with PiVPN
#189I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…
What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people…
I love these things:
https://www.aliexpress.us/item/3256804116114245.html
There are a few suppliers, but the 4x Intel NICs open up lots of possibilities. They're very lower power, but still fast enough to handle a lot of traffic.
I run VMWare ESXi on mine and use openwrt for my router on two ports and then a general purpose server in another VM.
Re: Build your own private WireGuard VPN with PiVPN
#190Earlier quoted context omitted.
Like others have said, the PCs you're looking at might be mini in form factor but specced more traditional desktops. There there are plenty of mini PC options that compete at 15 watts and lower range. One example I use is https://www.amazon.com/Computer-Windows-Dual-Band-Bluetooth-... . This gets you built in 128 GB eMMC, dual display output, more USB 3, about the same overall CPU performance but significantly higher…
Wow thanks for sharing. That’s a pretty amazing box, curious what it’s TDP and noise characteristics are
Wattage for the whole thing is as mentioned, TDP of just the CPU is 4 to 6 watt (configurable). This particular one has a fan which will kick in if you run it hard for long periods, for truefanless I'd suggest the B1 instead. Or if you go for the splurge you can knock cTDP down and still run circles around the pi in performance.