Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Build your own private WireGuard VPN with PiVPN

jeffgeerling.com

Post reply on HN
Print view View original

211–220 of 235 posts

Re: Build your own private WireGuard VPN with PiVPN

#211

Post by MallocVoidstar »

ye-olde-sysrq wrote: post #89

I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…

I bought a used Lenovo mini-pc for ~$40 and it is significantly more capable/reliable than the Pi 3 it replaced. If I need non-server stuff (I2C, GPIO) I stick to microcontrollers now.

Re: Build your own private WireGuard VPN with PiVPN

#212

Post by prmoustache »

AnthonyMouse wrote: post #147
yonatan8070 wrote: post #109

Earlier quoted context omitted.

The Pis shine primarily in terms of power consumption, under load, a mini PC could cosume 50W, where a Pi (and other ARM boards) will do an absolute maximum of 15W. And if you have multiple devices that run 24/7, that could be a significant saving

The trouble there is if you're actually compute bound, the Pi's performance is also a lot worse, and if you're not, you should be comparing the idle power consumption. There are plenty of PCs that idle at under 10W. PCs also support arbitrary amounts of memory, so you can often avoid needing multiple devices by using virtualization.

Also, if you start piling up PIs because one won't have enough compute power and memory, you are likely to habe a lower electric footprint with a single nuc and virtualization or containers.

Re: Build your own private WireGuard VPN with PiVPN

#213

Post by nprateem »

pbnjeh wrote: post #210
marwatk wrote: post #189

Earlier quoted context omitted.

I love these things: https://www.aliexpress.us/item/3256804116114245.html There are a few suppliers, but the 4x Intel NICs open up lots of possibilities. They're very lower power, but still fast enough to handle a lot of traffic. I run VMWare ESXi on mine and use openwrt for my router on two ports and then a general purpose server in another VM.

I have a couple of N5105 boxes I got off of Amazon on sale, but I haven't put them into use, yet. I've never bought off of AliExpress. I'm in the U.S. Do people take precautions when ordering from them? I'm not so worried about the products, themselves. I'm worried about the use and security of my financial data. Worried as in, I just don't know whether they are safe stewards. No experience, no one to ask. Except may…

Just use a 1 time card and reinstall the OS.

Re: Build your own private WireGuard VPN with PiVPN

#214

Post by slowmotiony »

joshbaptiste wrote: post #161
bombcar wrote: post #153

Earlier quoted context omitted.

If you need Pi like but not specifically a Pi check out the Rock5B: https://www.sevarg.net/2023/01/01/battle-of-the-boards-2023/

Alternative SBCs I've been looking at are the Orange PI 5, Khadas VIM1S, NanoPi R6S https://hackerboards.com/

The VIM1S seems almost perfect for home use, too bad it's only got a 100mbit network interface. The Nanopi R6S is more interesting but the price is crazy, it's over 200 euro on Amazon. Then again, the raspberry pi is also over 150 euro, i wish these SBCs would not be so damn expensive.

Re: Build your own private WireGuard VPN with PiVPN

#215

Post by zamadatix »

mixmastamyk wrote: post #206
zamadatix wrote: post #190

Earlier quoted context omitted.

Wattage for the whole thing is as mentioned, TDP of just the CPU is 4 to 6 watt (configurable). This particular one has a fan which will kick in if you run it hard for long periods, for truefanless I'd suggest the B1 instead. Or if you go for the splurge you can knock cTDP down and still run circles around the pi in performance.

Any recommended without Windows around that price?

It'll run anything but if you want to avoid paying the "windows tax" out of principal the best way I've found is to buy one from Ali Express or the like. If you're in the market for the slightly higher end options they also have more varied fabless systems there too. Most of the stuff you find on Amazon is geared towards your average consumer looking for a cheap PC so come with Windows.

Re: Build your own private WireGuard VPN with PiVPN

#216

Post by megous »

> Note: Security is a major concern here—don't set up a VPN if you don't know what you're doing. If someone gets access through the VPN to your home network, they can (and will) hack into your house!

While possible, many people already give access to their home networks via multi-homed devices they carry in their pockets everywhere they go.

Relying on anything below the application layer for security is not very good these days.

Re: Build your own private WireGuard VPN with PiVPN

#218

Post by regularfry »

ye-olde-sysrq wrote: post #89

I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…

Teeny tiny detail:

> just establishing an ssh connection doesn't take multiple seconds

That's almost certainly power saving on the WiFi. Annoying but fixable. Seems to be on by default, and a `/sbin/iwconfig wlan0 power off` line in rc.local should fix it.

Re: Build your own private WireGuard VPN with PiVPN

#219

Post by devaler »

blipvert wrote: post #149

Taking an opportunity here for a completely shameless plug for an enterprise-y wg based corporate VPN. Uses mTLS for device auth, wg (obvs), OIDC to authenticate users/set up firewall access (Azure AD and Keycloak tested). Runs as a redundant cluster and can be hooked in via BGP. Very early and no docs to speak of yet, but raise an issue if interested. Works with standard WireGuard app on computers/phones, but an int…

Interesting and interested. I’ll be following, for the learning experience if nothing else.

Re: Build your own private WireGuard VPN with PiVPN

#220

Post by propogandist »

aborsy wrote: post #128
briancmoses wrote: post #23

At the price Raspberry Pis are being sold (scalped) for it's discouraging and disappointing to see content creators continually going to that well. You can buy a travel router like the GL.iNet GL-SFT1200 (Opal) for $39.99. All of Gl.iNet's devices run OpenWRT already. Setting up Wireguard on OpenWRT is easy, and using Tailscale is even easier! Edit: Jeff's been creating awesome Raspberry Pi content for a long time an…

Any concerns over routers made in China? It’s true that a lot of chips are made in China. Nevertheless, the question remains.

Chinese manufacturing still dominates and they produce most of the routers and modems out there. If we can’t trust routers from China then virtually the entire world is compromised.
Post reply on HN