Does WireGuard require a kernel module or a specific kernel? (I saw a day or two ago it was in linus' tree). Can I run WireGuard on a digitalocean droplet?
Building a Simple VPN with WireGuard with a Raspberry Pi as Server
51–60 of 126 posts
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#52Cool project - if you're looking to set up a secure VPN in a quick, no-nonsense way, be sure to look at [Algo]( https://github.com/trailofbits/algo ). Does WireGuard (and IPSec if you want), only secure, sane defaults, and nothing more. Hands down the easiest, most secure way to setup a modern VPN in a few minutes. Far better than using some random anonymous VPN service running out of some random person's closet that…
+1 for Algo. I've been using it since last year on a VM (took under 5 minutes to setup), for firewall access (SSH, RDP, DBs etc.) to work servers.
Works great for secure access from anywhere when working remotely or travelling.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#53For anyone else wanting to set this up at home, I’d recommend installing the vyatta-wireguard module [1] on an EdgeRouter X instead. It costs about the same as a Raspberry Pi, and you get a reliable network appliance with four gigabit ports and PoE, rather than a general purpose Linux box with graphics and USB. I’ve found the WireGuard module to be fast enough to keep up with my 100/40 Mbps internet connection, and now when my Linux server goes down, the network it’s connected to stays up.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#54I have beeen looking at setting up a vpn to be able to hook up my pc to the office network. I don't know a whole lot about it but I ended up trying out Softether for the job just this weekend. It's a free and opensource project from the University of Tsukuba, Japan. It promises that it can achieve speeds far higher than Openvpn. It was really just a click next, next type setup both on client and server which was the…
Certainly not an expert but I switched from openvpn to softether for personal use back in 2015-16 out of curiosity, saw substantially lower latency. I see openvpn as the samba of vpn servers. Huge hassle to configure for performance, so much history that searching when you have issues is difficult.
Glad to hear of someone using it for a while and who's impressed with it. I've only used it a very little bit but I was very impressed, I think I'm going to dive into it deeper now.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#55For anyone else wanting to set this up at home, I’d recommend installing the vyatta-wireguard module [1] on an EdgeRouter X instead. It costs about the same as a Raspberry Pi, and you get a reliable network appliance with four gigabit ports and PoE, rather than a general purpose Linux box with graphics and USB. I’ve found the WireGuard module to be fast enough to keep up with my 100/40 Mbps internet connection, and n…
I have this router and set up the wg interface but got stuck at how to route all my home traffic through wg. Any recommendations on how to troubleshoot this part?
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#56Earlier quoted context omitted.
That's not open source. They make the source available but open source does not restrict what you can do with it other than sometimes requiring that you share the source for your binaries.
Open source just means you have or can get access to the source. FOSS Free open source software also gives you the rights to use the source.
Thats RMS's fringe definition of OS but the widely accepted OSI definition is that open source software does not restrict your rights to commercial use.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#57For anyone else wanting to set this up at home, I’d recommend installing the vyatta-wireguard module [1] on an EdgeRouter X instead. It costs about the same as a Raspberry Pi, and you get a reliable network appliance with four gigabit ports and PoE, rather than a general purpose Linux box with graphics and USB. I’ve found the WireGuard module to be fast enough to keep up with my 100/40 Mbps internet connection, and n…
I upgraded from an ER-X to an ER-4 because the X can’t do full 1000 Mbit with PPPoE fiber without hardware offload. With hardware offload turned on there’s a bug in the hardware that causes some sites, most notably Netflix, to not route at all.
The ER-4 has been great with the Cavium hardware. No hardware offload issues like this.
Edit: The ER-X tops out around 500 Mbit with hardware offload turned off.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#58I think there's some issues in the config. First of all, at least one of the CIDRs is wrong ("Address = 10.200.200.2/24"). Also by setting AllowedIPs to to 10.200.200.0/24 in the client, only traffic to that subnet will actually go through the VPN, not all traffic.
Isn't there also some missing host/RPI system so that the 10.200.200.0/24 can route to the public internet?
If someone has an example of a full VPN configuration I'd love to see them so I can try it out.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#59A question for people with experience in this area: I've been considering setting up WireGuard so I can keep my mobile phone always connected to my home network. Will I experience degraded network performance (either latency or bandwidth) if I have my mobile phone always connected to a VPN 24/7? My phone is an iPhone 11 Pro and I would be running WireGuard on a Pi4
Some bandwidth and latency downgrade seems certain. Google, Netflix, and others invest a lot to cache content closer to your phone. A VPN circumvents that approach. The experience, though, is individual enough, that nothing other than trying it would tell if it it's "good enough" for you.
Re: Building a Simple VPN with WireGuard with a Raspberry Pi as Server
#60A question for people with experience in this area: I've been considering setting up WireGuard so I can keep my mobile phone always connected to my home network. Will I experience degraded network performance (either latency or bandwidth) if I have my mobile phone always connected to a VPN 24/7? My phone is an iPhone 11 Pro and I would be running WireGuard on a Pi4
No degraded performance in my experience, at least not visibly. Only drawback is more battery consumption.