Building a Simple VPN with WireGuard with a Raspberry Pi as Server

Post by steve19 » Thu, Jan 30, 2020, 1:53 AM UTC

willis936 wrote: post #46

fnord77 wrote: post #8

Would a Pi4 be able to handle being both a VPN and a pihole, or should these be two separate boxes?

I set my Pi4 up with wireguard+pihole recently. I think pihole does nothing 99.99% of the time, so I can’t speak to how performance is in worst case scenarios, but wireguard seems fine. I get about 25 Mbps up/down (speedtest.net with a single client, so assume it’s 25 Mbps aggregate. Not a lot for hefty file transfers but comfy enough for VNC to multiple hosts. The big win is in decreased latency. I don’t have good q…

Post by tyingq » Thu, Jan 30, 2020, 1:55 AM UTC

nucleardog wrote: post #68

tyingq wrote: post #59

Earlier quoted context omitted.

Some bandwidth and latency downgrade seems certain. Google, Netflix, and others invest a lot to cache content closer to your phone. A VPN circumvents that approach. The experience, though, is individual enough, that nothing other than trying it would tell if it it's "good enough" for you.

You don't have to route all your traffic through the VPN (though it's unclear from the question whether or not that's the goal). If he only wants access to resources on his home network, it's entirely feasible to set that up while still routing other traffic out through the public internet via your ISP/carrier.

Post by sjy » Thu, Jan 30, 2020, 2:30 AM UTC

axiomdata316 wrote: post #55

sjy wrote: post #53

For anyone else wanting to set this up at home, I’d recommend installing the vyatta-wireguard module [1] on an EdgeRouter X instead. It costs about the same as a Raspberry Pi, and you get a reliable network appliance with four gigabit ports and PoE, rather than a general purpose Linux box with graphics and USB. I’ve found the WireGuard module to be fast enough to keep up with my 100/40 Mbps internet connection, and n…

I have this router and set up the wg interface but got stuck at how to route all my home traffic through wg. Any recommendations on how to troubleshoot this part?

    set protocols static table  interface-route 0.0.0.0/0 next-hop-interface wg1

Post by doctoboggan » Thu, Jan 30, 2020, 2:38 AM UTC

jonstewart wrote: post #72

doctoboggan wrote: post #50

A question for people with experience in this area: I've been considering setting up WireGuard so I can keep my mobile phone always connected to my home network. Will I experience degraded network performance (either latency or bandwidth) if I have my mobile phone always connected to a VPN 24/7? My phone is an iPhone 11 Pro and I would be running WireGuard on a Pi4

I do this fairly often with an Algo vpn. Sometimes the initial connection setup suffers, but there can be a gain from adblocking if you use PiHole. I’ve had to turn it off a few times when some apps do geo-ip lookup and give me errors about not knowing whether I’m in the US. Otherwise the main drawback is battery usage.

Post by doctoboggan » Thu, Jan 30, 2020, 2:50 AM UTC

willis936 wrote: post #46

fnord77 wrote: post #8

Would a Pi4 be able to handle being both a VPN and a pihole, or should these be two separate boxes?

I set my Pi4 up with wireguard+pihole recently. I think pihole does nothing 99.99% of the time, so I can’t speak to how performance is in worst case scenarios, but wireguard seems fine. I get about 25 Mbps up/down (speedtest.net with a single client, so assume it’s 25 Mbps aggregate. Not a lot for hefty file transfers but comfy enough for VNC to multiple hosts. The big win is in decreased latency. I don’t have good q…