Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Warp – Mobile VPN

blog.cloudflare.com

Post reply on HN
Print view View original

461–470 of 500 posts

Re: Warp – Mobile VPN

#461

Post by topranks »

eridius wrote: post #401
topranks wrote: post #379

Earlier quoted context omitted.

Multipath-TCP is designed for precisely that.

I may be wrong but isn't Multipath TCP pretty darn new and rarely used? At least on iOS you have to explicitly opt into it, either using the new Network framework for raw networking or a special configuration for URLSession, and also requires an entitlement to even do (no idea why). AFAIK the only Multipath TCP that my iPhone regularly actually uses is Siri. Which is to say, it still feels largely experimental.

You're absolutely correct, it's new, not in mainline Linux kernel yet etc.

I just mentioned it as it's a cool project and in time will help address some of the limitations you mention.

Re: Warp – Mobile VPN

#462

Post by topranks »

crummy wrote: post #407
topranks wrote: post #387

Earlier quoted context omitted.

CPU on your phone is probably gonna be the main reason VPN is slower than not using one. But this only sends DNS over the VPN so it won’t use much power at all. 99% of your traffic does not route via the VPN with this app.

Where do you get the idea this is DNS over VPN only? > Any unencrypted connections are encrypted automatically and by default. > Unfortunately, a lot of the Internet is still unencrypted. For that, Warp automatically adds encryption from your device to the edge of Cloudflare’s network It reads to me like all your traffic goes through your service, not just DNS.

Yep... my apologies..

The blog led me to their "1.1.1.1 app", which I installed and found created a VPN on my iOS device that only tunneled DNS traffic.

This "warp" thing, which is not released you can only go on a waiting list for, will apparently tunnel all traffic.

My apologies for the error.

Re: Warp – Mobile VPN

#463

Post by carrotcypher »

ignoramous wrote: post #304
Nux wrote: post #301

Earlier quoted context omitted.

> Having analysed the market, I find that its defragmented with no clear run-away winner. THAT'S HOW IT SHOULD BE! That's how all of this should be.

Yep, agree. Though, I thought it was an important factor for us when we are bootstrapping to consider if we are heading straight into a monopoly that we can't defeat.

I'd look at dominating the standards used in the market rather than the market itself.

Re: Warp – Mobile VPN

#464

Post by arghwhat »

jgrahamc wrote: post #74
arghwhat wrote: post #67

Earlier quoted context omitted.

Asked differently, do you plan on explicitly disallowing/banning it if people unofficially ran the reference implementation against Warp? It would be nice to know the policy there. For those of us that do know what a VPN is, and are okay not having access to support, getting things to work without a desktop app would be nice.

I think my answer was pretty clear. We do not currently plan to allow stock WireGuard clients to use Warp. I say, currently, because things can always change. It's important to appreciate that we have literally millions of users for the 1.1.1.1 App and we are rolling out a free VPN for them. That is a huge support and network burden that we have to deal with to make that experience work well. Yes, we use WireGuard un…

Thank you for clarifying. There is a big difference between supporting something, and stopping it from happening.

It's Cloudflare's service, and of course entirely Cloudflare's decision how it is permitted used. I just hope that, in the future, it will be allowed (but not necessarily *supported) to use stock clients rather than desktop apps (which many of us Linux people would dislike). :)

Good luck with the massive deployment!

Re: Warp – Mobile VPN

#465

Post by eeeeeeeeeeeee »

eximius wrote: post #295
kentonv wrote: post #264

Earlier quoted context omitted.

> So basically Cloudflare created an app with Cloudflare branding and set up a Wireguard server for everyone. Not just one -- servers in 175 (and growing) locations spread around the world, and the app will always use the closest one to you. That's arguably a lot more important that what protocol it uses, and is not something you could easily DIY.

I mean, for DIY you only need one because you're only one user . Pick a VPS host with a data center near you... done.

If you’re traveling a lot, which is often the use case for a VPN, this immediately becomes annoying.

Re: Warp – Mobile VPN

#466

Post by eeeeeeeeeeeee »

eximius wrote: post #343
jedberg wrote: post #302

Earlier quoted context omitted.

It's only near you when you're at home though. This works around the world.

maybe works better. But I used mine hosted in the US while I was traveling abroad in the UAE. Worked fine. I often saw better service with it turned on.

Probably all depends. I tried to use my west coast US VPN in Australia and it was atrocious. I had to deploy to AWS Sydney instead.

Re: Warp – Mobile VPN

#467

Post by dx034 »

kristofferR wrote: post #330
kylec wrote: post #286

Earlier quoted context omitted.

My biggest concern with any VPN is: do I trust you? I’ve been reluctant to sign up with any of these VPN services that seem to be advertising everywhere nowadays because I don’t know what they’ll do with my internet traffic. The CloudFlare VPN is interesting to me because they’re a large, established company with a good reputation, so I trust them more than TunnelBear or ExpressVPN or PIA or whoever’s sponsoring YouT…

One positive for PIA at least is that their "no logs"-policy actually has been proven multiple times by subpoenas. https://torrentfreak.com/vpn-providers-no-logging-claims-tes... I'm not aware of any subpoenas directed at Cloudflare that was equally as useless.

So far that only applied to the DNS, I don't think many would subpoena a DNS provider.

Re: Warp – Mobile VPN

#468

Post by dx034 »

Nux wrote: post #301
ignoramous wrote: post #252

There goes me and my co-founder's plan of disrupting the Mobile VPN market. Or may be, we still have a chance? Anywho, congratulations Cloudflare! I long held an opinion that the VPN market was ripe for disruption when I looked at privacy policy of some of the top players. Having analysed the market, I find that its defragmented with no clear run-away winner. I hope you're able to make a headway with all the interest…

> Having analysed the market, I find that its defragmented with no clear run-away winner. THAT'S HOW IT SHOULD BE! That's how all of this should be.

But it shows that it's either so easy that there's no barrier to entry (I doubt it) or that no one can deliver a really convincing product.

Re: Warp – Mobile VPN

#469

Post by Tor3 »

I'm scratching my head at this one.. I installed it, it claims that VPN is on, there's the little key in the status line as when e.g. OpenVPN is running, but pointing a browser at whatismyip.org still shows the same old IP address. So, no VPN after all?

Re: Warp – Mobile VPN

#470

Post by Mindwipe »

This is very vague about where the endpoints will be.

Will Cloudflare push all of the users in a given country to an exit point in their country? Can they realistically do that? Will it guarantee that, or will it vary with load? Will they detect VPNs coming into the service, or will it be a good way of laundering the VPN? Will it do anything at all as an anti censorship service?

Tl:dr, I'd expect an awful lot of sites that currently block VPNs entirely (and that practice is increasing) to keep doing it here.

Post reply on HN