Quick VPN Setup with AWS Lightsail and WireGuard

#1

Post by mcoliver » Wed, Jun 07, 2023, 8:37 PM UTC

Quick VPN Setup with AWS Lightsail and WireGuard
mcoliver.substack.com

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#2

Post by aborsy » Wed, Jun 07, 2023, 8:47 PM UTC

This VPN setup is great to use in public WiFi.

But be aware that the IP address may not be private in cloud instances.

Is it known to what extent the traffic is logged on AWS EC2 or Lightsail?

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#3

Post by atomicnumber3 » Wed, Jun 07, 2023, 9:37 PM UTC

aborsy wrote: post #2

This VPN setup is great to use in public WiFi. But be aware that the IP address may not be private in cloud instances. Is it known to what extent the traffic is logged on AWS EC2 or Lightsail?

>traffic logging

None! that's an enterprise feature, you'll have to contact sales for pricing

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#4

Post by [deleted] » Wed, Jun 07, 2023, 9:46 PM UTC

aborsy wrote: post #2

This VPN setup is great to use in public WiFi. But be aware that the IP address may not be private in cloud instances. Is it known to what extent the traffic is logged on AWS EC2 or Lightsail?

[deleted]

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#5

Post by jesuspiece » Wed, Jun 07, 2023, 9:54 PM UTC

atomicnumber3 wrote: post #3

aborsy wrote: post #2

This VPN setup is great to use in public WiFi. But be aware that the IP address may not be private in cloud instances. Is it known to what extent the traffic is logged on AWS EC2 or Lightsail?

>traffic logging None! that's an enterprise feature, you'll have to contact sales for pricing

? VPC FLow logs exist, as well as load balancer logs

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#6

Post by lormayna » Wed, Jun 07, 2023, 10:02 PM UTC

Why not using an Ansible playbook? You can deploy it on any VPS without vendor lock in.

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#7

Post by aborsy » Wed, Jun 07, 2023, 10:13 PM UTC

atomicnumber3 wrote: post #3

aborsy wrote: post #2

This VPN setup is great to use in public WiFi. But be aware that the IP address may not be private in cloud instances. Is it known to what extent the traffic is logged on AWS EC2 or Lightsail?

>traffic logging None! that's an enterprise feature, you'll have to contact sales for pricing

I guess your response indicates that the DNS records are not logged.

I thought some metadata is logged, at least for security or to fight abuse, but probably for more reasons. But I’m not sure.

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#8

Post by MallocVoidstar » Wed, Jun 07, 2023, 10:14 PM UTC

Easier to use https://github.com/trailofbits/algo

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#9

Post by slt2021 » Wed, Jun 07, 2023, 10:17 PM UTC

jesuspiece wrote: post #5

atomicnumber3 wrote: post #3

Earlier quoted context omitted.

>traffic logging None! that's an enterprise feature, you'll have to contact sales for pricing

? VPC FLow logs exist, as well as load balancer logs

if you enable these features and pay for them? so just by not paying for these features will you get privacy naturally?

Re: Quick VPN Setup with AWS Lightsail and WireGuard

#10

Post by brazzledazzle » Wed, Jun 07, 2023, 10:18 PM UTC

lormayna wrote: post #6

Why not using an Ansible playbook? You can deploy it on any VPS without vendor lock in.

Might be the only tooling they have experience using. “When the only thing you have is a hammer everything is a nail” sort of thing.