Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Building a Simple VPN with WireGuard with a Raspberry Pi as Server

snikt.net

Post reply on HN
Print view View original

111–120 of 126 posts

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#111

Post by nif2ee »

Naac wrote: post #43
riston wrote: post #42

I have been using ZeroTier( https://www.zerotier.com/ ) much simpler solution to setup.

Doesn't sound like it's Open Source to me. "A commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app." I would stay away from software that wants to restrict how you use it.

> Doesn't sound like it's Open Source to me

Your parent's comment didn't even mention the open source issue here. Stop harassing startups with open source products just because you make 6 figure merely doing nothing all year.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#112

Post by gnomewascool »

Polylactic_acid wrote: post #83
m463 wrote: post #80

Earlier quoted context omitted.

RMS wrote about free software and open source (which is different): https://www.gnu.org/philosophy/open-source-misses-the-point....

RMS has basically single handedly tried to push "Open source can be proprietary, only free software is good" Every other orgs definition has had Open source mean the actual license is open. "Free software" is also an absolutely awful term because for 99.9% of the population "free" means it didn't cost them any money. This will never change no matter how hard RMS tries because its a very common and understood word.

According to RMS, in the link posted above:

> The terms “free software” and “open source” stand for almost the same range of programs.

and he definitely doesn't claim that open source is proprietary.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#114

Post by quaa55 »

msh wrote: post #91
0xEFF wrote: post #57

Earlier quoted context omitted.

I upgraded from an ER-X to an ER-4 because the X can’t do full 1000 Mbit with PPPoE fiber without hardware offload. With hardware offload turned on there’s a bug in the hardware that causes some sites, most notably Netflix, to not route at all. The ER-4 has been great with the Cavium hardware. No hardware offload issues like this. Edit: The ER-X tops out around 500 Mbit with hardware offload turned off.

Huh. I have a er-x with hardware offloading turned on. I have noticed no issues with netflix. I get about 900 megabit on my gigabit fiber.

while i don’t use it it should be possible for ppoe with hw offloading, so i don’t get it either. maybe that’s disabled on the slow one...

https://help.ubnt.com/hc/en-us/articles/115006567467-EdgeRou...

but i’d assume it should handle fast rates like this if hw offloading was on.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#115

Post by simonhenry »

There are numerous VPN's in the market today, however, FastestVPN took the world by storm immediately after it was formed in 2017, with many users even remarking that FastestVPN is by far the best VPN for Kodi. However, still others would agree that FastestVPN is by far the best VPN for Firestick TV users.

https://fastestvpn.com/vpn-for-firestick

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#116

Post by JeremyNT »

doctoboggan wrote: post #50

A question for people with experience in this area: I've been considering setting up WireGuard so I can keep my mobile phone always connected to my home network. Will I experience degraded network performance (either latency or bandwidth) if I have my mobile phone always connected to a VPN 24/7? My phone is an iPhone 11 Pro and I would be running WireGuard on a Pi4

I do this (with OpenVPN / Android, but same idea) and the main factor that limits my own performance is the poor upload speeds of my residential cable subscription. For many residential services, you're looking at asymmetrical up/down speeds, and they usually advertise the higher download number only.

This is normally fine since you most people download way more than they upload and don't run servers in their homes, but when you route everything through your home, you may be limited by upload speeds.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#117

Post by karlshea »

sjy wrote: post #53

For anyone else wanting to set this up at home, I’d recommend installing the vyatta-wireguard module [1] on an EdgeRouter X instead. It costs about the same as a Raspberry Pi, and you get a reliable network appliance with four gigabit ports and PoE, rather than a general purpose Linux box with graphics and USB. I’ve found the WireGuard module to be fast enough to keep up with my 100/40 Mbps internet connection, and n…

Be careful with this module, lots of the `set` and `delete` commands aren't quite working right yet, leading to some commit failed errors for me. I was trying to get something working and ended up with an ERX that couldn't pass traffic last night. Luckily I had a serial-to-USB cable so I could fix it.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#118

Post by 1996 »

willis936 wrote: post #46
fnord77 wrote: post #8

Would a Pi4 be able to handle being both a VPN and a pihole, or should these be two separate boxes?

I set my Pi4 up with wireguard+pihole recently. I think pihole does nothing 99.99% of the time, so I can’t speak to how performance is in worst case scenarios, but wireguard seems fine. I get about 25 Mbps up/down (speedtest.net with a single client, so assume it’s 25 Mbps aggregate. Not a lot for hefty file transfers but comfy enough for VNC to multiple hosts. The big win is in decreased latency. I don’t have good q…

Could you recommend something that would have 2x NVME for the home internet part?

RK3399 based boards are interesting but there is only 1x NVME on the Rockpi4 NVME extender.

The Nvidia Jetson nano extenders use USB3, which is not acceptable for the usecase

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#119

Post by tssva »

karlshea wrote: post #117
sjy wrote: post #53

For anyone else wanting to set this up at home, I’d recommend installing the vyatta-wireguard module [1] on an EdgeRouter X instead. It costs about the same as a Raspberry Pi, and you get a reliable network appliance with four gigabit ports and PoE, rather than a general purpose Linux box with graphics and USB. I’ve found the WireGuard module to be fast enough to keep up with my 100/40 Mbps internet connection, and n…

Be careful with this module, lots of the `set` and `delete` commands aren't quite working right yet, leading to some commit failed errors for me. I was trying to get something working and ended up with an ERX that couldn't pass traffic last night. Luckily I had a serial-to-USB cable so I could fix it.

That's partially my fault. I wrote a lot of the configuration command stuff for that module and there are a couple of bugs when it comes to validation for setting and deleting items so you can get yourself in a bad position. Plus there are some issues with EdgeOS which this seems to trigger.

I migrated from Wireguard to ipsec quite a long time ago because it was less complicated for my particular needs. It has probably been close to 2 years. No one else seems to have taken up resolving the lingering problems with the configuration issues.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#120

Post by dicknuckle »

eatbitseveryday wrote: post #4
probablyexists wrote: post #3

Earlier quoted context omitted.

I was only able to get ~60mbps with OpenVPN through a hard wired Raspberry Pi 3 connected to Google Fiber, due to limitations of its bus. The 4 is supposed to be actual gigabit, but I have not yet tried it out to confirm.

I'm trying to set it up on a RPI4 as an 802.11ac wireless router, to verify this. If it manages 100mbps+ then it'll be a cheap replacement for my current router.

are you using OpenWRT or something else?
Post reply on HN