Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Build your own private WireGuard VPN with PiVPN

jeffgeerling.com

Post reply on HN
Print view View original

221–230 of 235 posts

Re: Build your own private WireGuard VPN with PiVPN

#221

Post by regularfry »

1vuio0pswjnm7 wrote: post #187
ye-olde-sysrq wrote: post #89

I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works". Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 do…

What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people…

It's more that all the instructions you'll find assume raspberry pi os as it is the hardware. If there was more diversity of OS in everyday use you might see more fragmentation.

Re: Build your own private WireGuard VPN with PiVPN

#222

Post by blipvert »

devaler wrote: post #219
blipvert wrote: post #149

Taking an opportunity here for a completely shameless plug for an enterprise-y wg based corporate VPN. Uses mTLS for device auth, wg (obvs), OIDC to authenticate users/set up firewall access (Azure AD and Keycloak tested). Runs as a redundant cluster and can be hooked in via BGP. Very early and no docs to speak of yet, but raise an issue if interested. Works with standard WireGuard app on computers/phones, but an int…

Interesting and interested. I’ll be following, for the learning experience if nothing else.

Will update with some docs next week, then.

Re: Build your own private WireGuard VPN with PiVPN

#223

Post by ChuckNorris89 »

nprateem wrote: post #213
pbnjeh wrote: post #210

Earlier quoted context omitted.

I have a couple of N5105 boxes I got off of Amazon on sale, but I haven't put them into use, yet. I've never bought off of AliExpress. I'm in the U.S. Do people take precautions when ordering from them? I'm not so worried about the products, themselves. I'm worried about the use and security of my financial data. Worried as in, I just don't know whether they are safe stewards. No experience, no one to ask. Except may…

Just use a 1 time card and reinstall the OS.

Why stop at reinstalling the OS? You also need to throw away the PC in the dumpster of another neighborhood or city and at least use an angle grinder on the NIC and SSD. Don't forget to wipe off the fingerprints beforehand.

Re: Build your own private WireGuard VPN with PiVPN

#224

Post by ciupicri »

nprateem wrote: post #213
pbnjeh wrote: post #210

Earlier quoted context omitted.

I have a couple of N5105 boxes I got off of Amazon on sale, but I haven't put them into use, yet. I've never bought off of AliExpress. I'm in the U.S. Do people take precautions when ordering from them? I'm not so worried about the products, themselves. I'm worried about the use and security of my financial data. Worried as in, I just don't know whether they are safe stewards. No experience, no one to ask. Except may…

Just use a 1 time card and reinstall the OS.

Wgat about the firmware? Stuff like Intel ME.

Re: Build your own private WireGuard VPN with PiVPN

#225

Post by pwpw »

I set all of this up about 3 weeks ago. Wish I had come across this guide then! It's a great solution that has made my dev work and media consumption so much easier on the go.

One thing that tripped me up on arch linux with KDE Plasma was that importing the downloaded WireGuard configuration didn't work in NetworkManager using the gui. After a bit of tinkering, I finally discovered that you can download the conf file to your computer and then run the following command:

  nmcli connection import type wireguard file [CONF_FILE]
That adds it to NetworkManager, making it easy to connect to from the gui.

Re: Build your own private WireGuard VPN with PiVPN

#226

Post by 1vuio0pswjnm7 »

regularfry wrote: post #221
1vuio0pswjnm7 wrote: post #187

Earlier quoted context omitted.

What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people…

It's more that all the instructions you'll find assume raspberry pi os as it is the hardware. If there was more diversity of OS in everyday use you might see more fragmentation.

One of the other aspects of the RPi I think deserves more credit is the ability to easily boot into a variety of OS. Ideally I prefer to boot from USB or the network, but SDCard is still better than nothing. For some strange reason people try to use an SDCard in r/w mode after boot, treatng it like primary storage. IME, that is a recipe for failure. I prefer to boot to RAM. Then I might mount external storage device if I need it, but certainly not an SDCard.

Now, maybe the setup I choose is more difficult on one OS than on another. This is where RPi shines, IMO. As a project creator, I can use an OS I choose from among a variety that have been ported to the RPi, including non-popular ones, and I know every RPi user can easily run it because it's been already been pre-installed on SDCard; the RPi is not OS-specific. No pre-installtion of OS! (This pre-installation practice enabled Microsoft to stifle competition and hold back progress in computing for decades.)

Prior to RPi, many SBC only had GNU/Linux as an OS choice because that's what's popular. For example, prior to the RPi port running Plan9 required careful hardware purchasing choices. Choosing RPi, a well-known brand, is arguably much easier.

Re: Build your own private WireGuard VPN with PiVPN

#227

Post by byteflip »

carride wrote: post #114

Algo project still works well. Very quickly launch a WireGuard VPN to several popular cloud providers, or any Linux instance you already have access to, including your rPi. https://github.com/trailofbits/algo

Yes, I've been using this since I moved overseas. Works great, was able to add NextDNS for ad blocking.

I still find some websites will block you as your traffic will be originating from a datacenter (if going cloud option like me), but most work. I find this setup also works for some services that do not work via VPNs such as Mullvad.

If you want to talk to other devices check out the `BetweenClients_DROP` setting ("road warrior")

Re: Build your own private WireGuard VPN with PiVPN

#228

Post by nprateem »

ChuckNorris89 wrote: post #223
nprateem wrote: post #213

Earlier quoted context omitted.

Just use a 1 time card and reinstall the OS.

Why stop at reinstalling the OS? You also need to throw away the PC in the dumpster of another neighborhood or city and at least use an angle grinder on the NIC and SSD. Don't forget to wipe off the fingerprints beforehand.

No, that's excessive. I always just unsolder and replace every component, but I thought that went without saying.

Re: Build your own private WireGuard VPN with PiVPN

#229

Post by alsobrsp »

pbnjeh wrote: post #210
marwatk wrote: post #189

Earlier quoted context omitted.

I love these things: https://www.aliexpress.us/item/3256804116114245.html There are a few suppliers, but the 4x Intel NICs open up lots of possibilities. They're very lower power, but still fast enough to handle a lot of traffic. I run VMWare ESXi on mine and use openwrt for my router on two ports and then a general purpose server in another VM.

I have a couple of N5105 boxes I got off of Amazon on sale, but I haven't put them into use, yet. I've never bought off of AliExpress. I'm in the U.S. Do people take precautions when ordering from them? I'm not so worried about the products, themselves. I'm worried about the use and security of my financial data. Worried as in, I just don't know whether they are safe stewards. No experience, no one to ask. Except may…

I buy from AliExpress often. Most recently a batch of anodized metal business cards, before that a bunch of home automation sensors. I could get the same sensor from Amazon for a lot more money, I did get one for a test piece before buying 16 of them.

My experience has always been a good one. Just be prepared to wait a while for delivery, the business cards were about three weeks.

Re: Build your own private WireGuard VPN with PiVPN

#230

Post by lanrat »

7839284023 wrote: post #41
briancmoses wrote: post #23

At the price Raspberry Pis are being sold (scalped) for it's discouraging and disappointing to see content creators continually going to that well. You can buy a travel router like the GL.iNet GL-SFT1200 (Opal) for $39.99. All of Gl.iNet's devices run OpenWRT already. Setting up Wireguard on OpenWRT is easy, and using Tailscale is even easier! Edit: Jeff's been creating awesome Raspberry Pi content for a long time an…

> GL.iNet GL-SFT1200 (Opal) According to https://docs.gl-inet.com/en/4/tutorials/tailscale/ the GL-SFT1200 (Opal) does not support Tailscale but different models from GL.iNet do.

I made a open-wrt repo that auto-builds Tailscale for my older GL-Inet router for this exact use case: https://lanrat.github.io/openwrt-tailscale-repo/
Post reply on HN