Live data from Hacker News

How to build your own VPN, or: the history of WARP

blog.cloudflare.com

21–30 of 32 posts

Re: How to build your own VPN, or: the history of WARP

#21

Earlier quoted context omitted.

Won’t work if behind CGNAT or will be insanely slow. Even ipv6 is not advertised sometimes. I miss the days when I could ssh to my computer with ddns.

Choose an isp which gives you a static ipv4 address then.

Hard to find. I ask for advertising an ipv6 address and they don’t want to do that. Even though they give me an ipv6 prefix.

Re: How to build your own VPN, or: the history of WARP

#22
post #2

at Cloudflare scale, absolutely. But today? Find a friend that lives in a different legal jusrisdiction that you trust. Install Tailscale on a raspberry pi Zero. Configure it all up. Send it to your friend. Get it on their wifi. Set up the corresponding app on your phone. Connect to it and use it as your exit node. Voila, VPN!

Exit node really is a handy solution for build private vpn for sharing.

I have build a vpn called Echo VPN for apple platform which actually use tailscale open source core.

Also I think there is another benefit is that wireguard can be DPIed easily now adays, but DERP leverage HTTPS and upgrade which can do some obfuscation too

Re: How to build your own VPN, or: the history of WARP

#23
post #17
post #15

Earlier quoted context omitted.

My siblings and I live in 3 different continents. We use Tailscale exactly for that. It's also installed on some of the VPS I own, so all-in-all we have around 7 exit nodes in different countries to choose from. It was really a breeze to set up. The best part is that our IPs never seemed to be blocked by any service provider.

Isn't ssh -D + configuring a socks proxy in your browser a lot easier and faster? (using one of the many proxy switcher extensions) It would only work for the browser (although you do have socksify), but much quicker to set up and only ssh needs to work. No software install whatsoever. I mean, at least for VPSes, of course this won't work without an IP to connect to, or an IP behind NAT. But: no software install.

Where do you SSH to? You need to install sshd on that system somewhere, somehow? Your preferred software seems easier to install, and it is, for you. Others don't have the same experience though.

How do you configure apps on your phone to use a socks proxy?

We could rathole on what constitutes "a lot" easier, but that doesn't seem interesting so I'll just point out that there's a Tailscale app for Apple TV.

Re: How to build your own VPN, or: the history of WARP

#24
post #17
post #15

Earlier quoted context omitted.

My siblings and I live in 3 different continents. We use Tailscale exactly for that. It's also installed on some of the VPS I own, so all-in-all we have around 7 exit nodes in different countries to choose from. It was really a breeze to set up. The best part is that our IPs never seemed to be blocked by any service provider.

Isn't ssh -D + configuring a socks proxy in your browser a lot easier and faster? (using one of the many proxy switcher extensions) It would only work for the browser (although you do have socksify), but much quicker to set up and only ssh needs to work. No software install whatsoever. I mean, at least for VPSes, of course this won't work without an IP to connect to, or an IP behind NAT. But: no software install.

Consider the case where a non-technical person wants to watch US streaming services from their smartphone. No software install, but 5% of the features and 1% of the usability.

Re: How to build your own VPN, or: the history of WARP

#25
post #17
post #15

Earlier quoted context omitted.

My siblings and I live in 3 different continents. We use Tailscale exactly for that. It's also installed on some of the VPS I own, so all-in-all we have around 7 exit nodes in different countries to choose from. It was really a breeze to set up. The best part is that our IPs never seemed to be blocked by any service provider.

Isn't ssh -D + configuring a socks proxy in your browser a lot easier and faster? (using one of the many proxy switcher extensions) It would only work for the browser (although you do have socksify), but much quicker to set up and only ssh needs to work. No software install whatsoever. I mean, at least for VPSes, of course this won't work without an IP to connect to, or an IP behind NAT. But: no software install.

With Tailscale, my clients and my exit nodes can easily include Windows machines, Apple laptops, Android phones etc. And I can explain to my siblings how to set it up in 5 minutes, without them ever needing to hear about a terminal.

Re: How to build your own VPN, or: the history of WARP

#26
post #5
post #2

at Cloudflare scale, absolutely. But today? Find a friend that lives in a different legal jusrisdiction that you trust. Install Tailscale on a raspberry pi Zero. Configure it all up. Send it to your friend. Get it on their wifi. Set up the corresponding app on your phone. Connect to it and use it as your exit node. Voila, VPN!

There's zero chance I'd put some random device from anyone, even a friend, on my network - especially if I knew that was its purpose. Sounds like a huge liability. Do people really do this?

> Sounds like a huge liability.

This 100%.

I don't think this is being discussed enough but I frequently see a lot of landlords trying to make their contract more attractive by including an internet offer with the rent (this is especially useful for people that look for 6-months contracts when internet providers usually give you a minimum contract length of a year).

Tenants could technically do any kind of illegal activities by using that network. I've always wondered how and who would be liable in case someone uncovers something big enough to get the attention of law enforcement.

I guess this differs by country but it seems highly plausible that a legal loophole could exist, leaving the landlord unexpectedly responsible for the tenant's actions.

Re: How to build your own VPN, or: the history of WARP

#27
post #5
post #2

at Cloudflare scale, absolutely. But today? Find a friend that lives in a different legal jusrisdiction that you trust. Install Tailscale on a raspberry pi Zero. Configure it all up. Send it to your friend. Get it on their wifi. Set up the corresponding app on your phone. Connect to it and use it as your exit node. Voila, VPN!

There's zero chance I'd put some random device from anyone, even a friend, on my network - especially if I knew that was its purpose. Sounds like a huge liability. Do people really do this?

> Sounds like a huge liability

Not really, you aren’t responsible for what other people do without your knowledge and you’d have solid evidence that someone else was able to use your network.

Sure, if your friend was committing some horrible crimes it might end up being slightly inconvenient for you.

Re: How to build your own VPN, or: the history of WARP

#28
post #5

Earlier quoted context omitted.

There's zero chance I'd put some random device from anyone, even a friend, on my network - especially if I knew that was its purpose. Sounds like a huge liability. Do people really do this?

> Sounds like a huge liability. This 100%. I don't think this is being discussed enough but I frequently see a lot of landlords trying to make their contract more attractive by including an internet offer with the rent (this is especially useful for people that look for 6-months contracts when internet providers usually give you a minimum contract length of a year). Tenants could technically do any kind of illegal ac…

> I guess this differs by country but it seems highly plausible that a legal loophole could exist, leaving the landlord unexpectedly responsible for the tenant's actions.

Not in any normal country.

> who would be liable in case someone uncovers something big enough to get the attention of law enforcement

The person doing the crimes, obviously. The cops would most likely never even contact the landlord, as they’d just show up at the address where the line is connected.

Re: How to build your own VPN, or: the history of WARP

#29
post #2

at Cloudflare scale, absolutely. But today? Find a friend that lives in a different legal jusrisdiction that you trust. Install Tailscale on a raspberry pi Zero. Configure it all up. Send it to your friend. Get it on their wifi. Set up the corresponding app on your phone. Connect to it and use it as your exit node. Voila, VPN!

[deleted]

Re: How to build your own VPN, or: the history of WARP

#30
post #5

Earlier quoted context omitted.

There's zero chance I'd put some random device from anyone, even a friend, on my network - especially if I knew that was its purpose. Sounds like a huge liability. Do people really do this?

Most people have no sense of security. They say yes to strangers if asked to plug in a USB device on their laptop. When I said no in the train to someone asking to plug their device "for charging", I was definitely the bad guy. Just find anything plausible, for backup storage, or say, to share family photos with grand parents but it does not work on my home wifi because my ISP is blocking ports, whatever.

Ah man, this must be rethorics and you wouldn't lie to a friend close enough to do such a favour, would you? WHo the h is after you guys anyway, to want such level of degraded-internet-speed?

And about 'Warp', is it or is it not a VPN after-all? They mentionned they aren't a VPN, but that they build on wireguard ??

Post reply on HN