Live data from Hacker News

Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

github.com

31–40 of 88 posts

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#32
post #31

Use Wireguard. It is wonderful and the community is friendly. `wg-quick` is easy to use but if you need it, I believe Streisand supports automatically provisioning a wireguard setup.

Yes! Algo also sets up Wireguard for you.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#33
post #29
post #18

I actually tried running Algo through Azure and Microsoft terminated my Azure account citing I was breaking Terms of Service. I had hosted Algo for all of two and a half days before the takedown. Not sure if anyone else has had luck - that was all I was using Azure for was to test Algo out so had nothing else running on Azure at the time. I also ran into a few snags trying to deplay Algo onto Azure so haven't bothere…

Hello! Developer for AlgoVPN here. We have many successful reports of using Azure for AlgoVPN. I would appreciate it very much if you could file an issue and include the full details of what happened, including any communications you received from Microsoft ( https://github.com/trailofbits/algo/issues/new ). I have contacts at Azure that I can escalate this issue to directly.

I don't tend to hold onto email as I don't really care for or value them; especially not emails saying my account has been terminated. Those are more of a delete and move on with my life kind of notice. I ended up getting an email from a rep. asking how my experience was and either two or three (I think it was two) calls to speak with me. A funny left-hand not speaking to the right-hand scenario where customer reps tried to salvage a client even though the client had been terminated by the service.

Thanks for extending a hand. I'll look for the email tomorrow - and if found - I'll open an issue. Though if you don't hear from me, it's because the email in all likelihood was deleted shortly after getting it. My use wasn't critical need, so I didn't particularly care to deal with the headache of getting things sorted.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#34
It should be noted that if you've setup Algo already that it now supports WireGuard. The WireGuard Android app (which would be great to verify that it is indeed published by www.wireguard.com) is stupid easy to setup and enable on your device.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#36

How do you decide what vpn tech to use? I was using openvpn and then switched to wireguard because openvpn was consuming a lot of power on my phone. Why would I want to use Ipsec?

> Why would I want to use Ipsec?

It's already built into your phone. (Probably)

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#37

It’s worth mentioning that it is not, nor does TrailOfBits pretend, that the goal of this project is privacy; it is security. Algo doesn’t and couldn’t care less about your privacy once you reach the endpoint, only about securing the tunnel. You shouldn’t use Algo if you are concerned about surveillance from corporations/governments, you should use Algo if you are concerned about surveillance/attacks from your local…

Governments take the data from ISP too. And hiding your IP behind VPN is good in any case.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#38
Question - are there any guides available to help set up a home-brew router to route all outbound connections through an Algo VPN with exceptions for Netflix/etc.?

Something like this (this is for OpenVPN): https://arstechnica.com/gadgets/2017/05/how-to-build-your-ow...

I currently have a pfSense router set up with Algo, but I have to disable the IPSec policy whenever I want to use Netflix. (Discussion here: https://github.com/trailofbits/algo/issues/292 - see comments near the bottom.)

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#39
post #31

Use Wireguard. It is wonderful and the community is friendly. `wg-quick` is easy to use but if you need it, I believe Streisand supports automatically provisioning a wireguard setup.

Wireguard is awesome, but the kernel module is so far a mess. If you're paranoid I wouldn't rely on it until the code has been cleaned up and perhaps audited.

Re: Algo: A set of Ansible scripts that simplify the setup of a personal IPSEC VPN

#40

Question - are there any guides available to help set up a home-brew router to route all outbound connections through an Algo VPN with exceptions for Netflix/etc.? Something like this (this is for OpenVPN): https://arstechnica.com/gadgets/2017/05/how-to-build-your-ow... I currently have a pfSense router set up with Algo, but I have to disable the IPSec policy whenever I want to use Netflix. (Discussion here: https://…

Try OPNsense

Here is detailed tutorial https://forum.opnsense.org/index.php?topic=4979.0

Post reply on HN