Live data from Hacker News

Building a Simple VPN with WireGuard with a Raspberry Pi as Server

snikt.net

41–50 of 126 posts

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#41
post #2

What's the throughput like on a Raspberry Pi?

I was only able to get ~60mbps with OpenVPN through a hard wired Raspberry Pi 3 connected to Google Fiber, due to limitations of its bus. The 4 is supposed to be actual gigabit, but I have not yet tried it out to confirm.

OpenVPN is extremely slow, same setup with wireguard is guaranteed to be much faster.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#43
post #42

I have been using ZeroTier( https://www.zerotier.com/ ) much simpler solution to setup.

Doesn't sound like it's Open Source to me.

"A commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app."

I would stay away from software that wants to restrict how you use it.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#44
post #8

Would a Pi4 be able to handle being both a VPN and a pihole, or should these be two separate boxes?

Yep! This is how I started out (I run it one a VPS now so I'm not tied to my home network) and it works fine. The only limit you're likely to run into is your blocklists filling RAM. I have a 5M+ long blocklist and it won't fit into 1GB, so you might want to spec up a little bit in that area, depending on how block-happy you are.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#45
post #43
post #42

I have been using ZeroTier( https://www.zerotier.com/ ) much simpler solution to setup.

Doesn't sound like it's Open Source to me. "A commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app." I would stay away from software that wants to restrict how you use it.

From their site:

> commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app.

A cursory look suggests that it's open source, with restrictions that they clearly list on their site here[0]. I get your point, but I personally don't mind if a business open sources their software and allows free use of it for non commercial cases.

[0] https://www.zerotier.com/pricing/

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#46
post #8

Would a Pi4 be able to handle being both a VPN and a pihole, or should these be two separate boxes?

I set my Pi4 up with wireguard+pihole recently. I think pihole does nothing 99.99% of the time, so I can’t speak to how performance is in worst case scenarios, but wireguard seems fine. I get about 25 Mbps up/down (speedtest.net with a single client, so assume it’s 25 Mbps aggregate. Not a lot for hefty file transfers but comfy enough for VNC to multiple hosts. The big win is in decreased latency. I don’t have good quantifications of this beyond speedtest.net run from my work. 5 ms with no VPN. 82 ms using my router’s OpenVPN. 24 ms using Pi4 wireguard. These were just single runs so the strong law of small numbers may apply. I know iperf is more scientific, but I wanted a quick, empirical full internet test. My home internet is 550 Mbps down / 36 Mbps up.

Full data (iPhone 11 client at work):

: / /

No VPN: 145 / 139 / 5

Router OpenVPN: 25 / 6 / 82

pi4 wireguard: 24 / 27 / 24

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#47
post #43

Earlier quoted context omitted.

Doesn't sound like it's Open Source to me. "A commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app." I would stay away from software that wants to restrict how you use it.

From their site: > commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app. A cursory look suggests that it's open source, with restrictions that they clearly list on their site here[0]. I get your point, but I personally don't mind if a business open sources their software and allows free use of it for non commercial cases. [0] https://www…

That's not open source. They make the source available but open source does not restrict what you can do with it other than sometimes requiring that you share the source for your binaries.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#49

Earlier quoted context omitted.

From their site: > commercial license is only needed if you want to offer a paid network management service or embed it into a proprietary device or app. A cursory look suggests that it's open source, with restrictions that they clearly list on their site here[0]. I get your point, but I personally don't mind if a business open sources their software and allows free use of it for non commercial cases. [0] https://www…

That's not open source. They make the source available but open source does not restrict what you can do with it other than sometimes requiring that you share the source for your binaries.

Open source just means you have or can get access to the source. FOSS Free open source software also gives you the rights to use the source.

Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server

#50
A question for people with experience in this area:

I've been considering setting up WireGuard so I can keep my mobile phone always connected to my home network.

Will I experience degraded network performance (either latency or bandwidth) if I have my mobile phone always connected to a VPN 24/7?

My phone is an iPhone 11 Pro and I would be running WireGuard on a Pi4

Post reply on HN