Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WireGuard as VPN Server on Kubernetes with AdBlocking

codingcoffee.dev

Post reply on HN
Print view View original

21–30 of 39 posts

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#21

Post by 0xEFF »

shmoogy wrote: post #19
ehsankia wrote: post #15

Earlier quoted context omitted.

For people using network level ad blocking, do you ever run into annoyances where there's a site you want to access and just can't? Mostly links that route through an analytics network. First time you click on a twitter link for example, or some referrer store links. And once you're stuck, there's normally nothing you can do. At least on the browser I can temporary turn off an extension, but I've found that network l…

This is why I don't run pihole or NextDNS at the network level anymore, my wife had too many annoyances with slick deals and other things. Whitelists covered most but not everything.

When family members complain, I just configure their device to use 1.1.1.1 for DNS with a static DHCP reservation.

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#22

Post by heavyset_go »

ehsankia wrote: post #15
syoc wrote: post #11

This writeup uses AdGuard for ad blocking, specifically "AdGuard Home". The "How to setup?" link from their homepage pointing to their github repo says that you accept a EULA[0] on clicking the link. The EULA seems to directly contradict their repo GPLv3 license. [1] [0] https://adguard.com/en/eula.html [1] https://github.com/AdguardTeam/AdGuardHome/blob/master/LICEN...

For people using network level ad blocking, do you ever run into annoyances where there's a site you want to access and just can't? Mostly links that route through an analytics network. First time you click on a twitter link for example, or some referrer store links. And once you're stuck, there's normally nothing you can do. At least on the browser I can temporary turn off an extension, but I've found that network l…

AdGuard Home allows you to whitelist domains, and provides an interface to unblock blocked DNS queries directly from the logs.

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#23

Post by RobLach »

opqpo wrote: post #5

I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.

While it seems like overkill to set up a kubernetes cluster for this, and honestly, most things...

But if you already have one spooled you this is a valuable guide to throw it onto that infrastructure

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#24

Post by aphroz »

pm90 wrote: post #20
zelly wrote: post #6

Earlier quoted context omitted.

But then it wouldn't have made the first page

I did not downvote you but, serious question: is there a need for this kind of snark? I understand the point that running a kubernetes cluster just for this would probably be hard to justify. But, if you deploy your services to kubernetes already, then this is a nice guide to do so, isn't it? I find it hard to understand this attitude, especially in a forum dedicated to talk about technology.

But maybe, like in any social network, there is a bias on what is put in front page. And if you have an interesting project, you might want to add an extra layer of complexity and use Kubernetes in order to gain more visibility.

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#25

Post by ignoramous »

shmoogy wrote: post #19
ehsankia wrote: post #15

Earlier quoted context omitted.

For people using network level ad blocking, do you ever run into annoyances where there's a site you want to access and just can't? Mostly links that route through an analytics network. First time you click on a twitter link for example, or some referrer store links. And once you're stuck, there's normally nothing you can do. At least on the browser I can temporary turn off an extension, but I've found that network l…

This is why I don't run pihole or NextDNS at the network level anymore, my wife had too many annoyances with slick deals and other things. Whitelists covered most but not everything.

> my wife had too many annoyances with slick deals and other things.

Running the browser remotely is one way. I usually abuse archive.is or brow.sh or startpage's anonymous browsing to that affect. Cloudflare bought a startup in the space...let's see what they come up with for the consumers: https://techstartups.com/2020/01/07/cloudflare-buys-remote-b...

May be, NextDNS and others through their in-browser plugin can optionally follow the redirects (remotely) to find if the eventual destination is not blacklisted (but that's too much of an ask since following HTTP redirects is different from DNS CNAMEs).

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#26

Post by balladeer »

syoc wrote: post #11

This writeup uses AdGuard for ad blocking, specifically "AdGuard Home". The "How to setup?" link from their homepage pointing to their github repo says that you accept a EULA[0] on clicking the link. The EULA seems to directly contradict their repo GPLv3 license. [1] [0] https://adguard.com/en/eula.html [1] https://github.com/AdguardTeam/AdGuardHome/blob/master/LICEN...

EULAs and T&Cs should have a layperson readable maximum characters limit.

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#27

Post by zzyzxd »

shmoogy wrote: post #19
ehsankia wrote: post #15

Earlier quoted context omitted.

For people using network level ad blocking, do you ever run into annoyances where there's a site you want to access and just can't? Mostly links that route through an analytics network. First time you click on a twitter link for example, or some referrer store links. And once you're stuck, there's normally nothing you can do. At least on the browser I can temporary turn off an extension, but I've found that network l…

This is why I don't run pihole or NextDNS at the network level anymore, my wife had too many annoyances with slick deals and other things. Whitelists covered most but not everything.

pihole has an API to disable adblocking, which is just an HTTP request so it's pretty easy to trigger. For example, on iOS, write a shortcut so that you can "Hey Siri, disable pihole".

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#28

Post by zzyzxd »

opqpo wrote: post #5

I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.

Sure you can write a lengthy article to describe how to configure all the apps and servers manually. But with Kubernetes, you only need to throw some YAMLs in there and call it a day.

I don't think "using Kubernetes for running VPN and adblocking servers" is overkill. With k3s, you can deploy a Kubernetes cluster on a raspberry pi in one command. Anything that can run on raspberry pi in one command just can't be overkill in my opinion.

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#29

Post by fluential »

0xEFF wrote: post #21
shmoogy wrote: post #19

Earlier quoted context omitted.

This is why I don't run pihole or NextDNS at the network level anymore, my wife had too many annoyances with slick deals and other things. Whitelists covered most but not everything.

When family members complain, I just configure their device to use 1.1.1.1 for DNS with a static DHCP reservation.

Same here + https://addons.mozilla.org/en-GB/firefox/addon/google-search...

Re: WireGuard as VPN Server on Kubernetes with AdBlocking

#30

Post by panpanna »

opqpo wrote: post #5

I believe that Kubernetes is artificially injected in your setup. You can just run your DNS server on the server and advertise it on the VPN address. You can still address it from anywhere in the VPN.

A wise soul once wrote:

"You have a problem. You use Kubernetes to solve your problem. Now you have 8 problems."

Post reply on HN