Yay... tunnels! reddit / selfhosted ---------------------------------------------------------------------- Nestramutat- · 2023-11-23 14:59 Wireguard running on a $3/mo VPS with unmetered gigabit bandwidth. Hides my real IP, does some light caching, and gives me what is essentially a static IP for cheap. ---------------------------------------------------------------------- SnooPets20 · 2023-11-23 15:11 Cloudflare is cringe. ---------------------------------------------------------------------- Raithmir · 2023-11-23 15:28 Yeah but Vince is a dinosaur. I've heard he's still running OpenVPN. Eeeww. ---------------------------------------------------------------------- artemis73 · 2023-11-23 15:31 Genuinely curious. Why are they cringe? And what are some better alternatives? ---------------------------------------------------------------------- SnooPets20 · 2023-11-23 15:35 > You self host to have control of your data. > Your entire data goes through somebody else's network that literally acts as a man in the middle and holds you up to their own regulations. It's the opposite of what I want. As for alternatives, just don't use them. Have a VPN and access your services through that. It's enough security. ---------------------------------------------------------------------- nitsky416 · 2023-11-23 15:50 I really want to do something like this but can't seem to sort out a host or exactly how tbh. ---------------------------------------------------------------------- HaussingHippo · 2023-11-23 15:53 I really need to convert my vpn containers to wire guard 😔 ---------------------------------------------------------------------- arond3 · 2023-11-23 15:55 I'm not using wireguad but here is my setup : One openvpn server on a cheap vps My server at home is a client of this server and get an ip assigned ex : 1.2.3.4 on this network. My phone is connectes to said vpn and can access 1.2.3.4 to access my services. My computer is just on my home network : it can access ghe server from the ip on that network (wich isn't 1.2.3.4). ---------------------------------------------------------------------- Minecon724 · 2023-11-23 15:58 personally a huge issue is that you're forced into their DNS ---------------------------------------------------------------------- Minecon724 · 2023-11-23 15:59 you can go way lower than 3$ (maybe even Oracle cloud) ---------------------------------------------------------------------- LavaCreeperBOSSB · 2023-11-23 16:21 All fun and games until you're on a restricted network where even OpenVPN is blocked ---------------------------------------------------------------------- Turtvaiz · 2023-11-23 16:26 Why? ---------------------------------------------------------------------- Dapper_Media7707 · 2023-11-23 16:37 Why even run wireguard just use the vps ip... ---------------------------------------------------------------------- Nestramutat- · 2023-11-23 16:38 Wireguard tunnel between the VPS and my homelab. ---------------------------------------------------------------------- Turtvaiz · 2023-11-23 16:50 I had a Hetzner 3€ VPS for like 3 years. They upped prices to 4.5 € and I upgraded since the Intel CPUs were slow as shit, but still. You could probably get something for 3€ PER YEAR from lowendtalk too. Wireguard is very easy to use once you understand it, and [there are graphical frontends for it too](https://github.com/wg-easy/wg-easy). ---------------------------------------------------------------------- -rwsr-xr-x · 2023-11-23 16:57 Now do it without allowing a third-party control ingress access to your home LAN. ---------------------------------------------------------------------- -rwsr-xr-x · 2023-11-23 16:58 > All fun and games until you're on a restricted network where even OpenVPN is blocked This is my life. Customer's site does DPI and terminates any VPN traffic on any port or protocol before connection is even established. Their VPN works, anything else gets dropped. ---------------------------------------------------------------------- FormerlyGruntled · 2023-11-23 17:17 Such a shame wireguard specifically won't let you hide your VPN connection on port 443 with a passthrough like OpenVPN does. Useful in some environments that like to particularly lock things down on anything that isn't a standard web port. ---------------------------------------------------------------------- TheQuantumPhysicist · 2023-11-23 17:37 Firewall? ---------------------------------------------------------------------- that_boi18 · 2023-11-23 17:39 You can use https://github.com/wangyu-/udp2raw to hide Wireguard's udp packets in "TCP" which can help with more restrictive firewalls (and you can choose whatever port you want). But it won't hold up to powerfull firewalls or DPI. ---------------------------------------------------------------------- lestrenched · 2023-11-23 17:40 In their free-tier, yes. They basically want to harvest the domain names your infrastructure visits. Fuck that. ---------------------------------------------------------------------- lestrenched · 2023-11-23 17:40 The problem I'm facing is the outbound charges for the VPS. Which VPS provider is this and do they allow for a decent amount of traffic leaving their server? ---------------------------------------------------------------------- lestrenched · 2023-11-23 17:41 Wait wtf $3-$4 a year? I thought $1.2 a month was low enough already lol ---------------------------------------------------------------------- maynardnaze89 · 2023-11-23 17:42 Nows the time. Lots of wild Vps deals 12 bucks for a full year ---------------------------------------------------------------------- lestrenched · 2023-11-23 17:42 There have been reports of OpenVPN traffic being discovered as VPN traffic even after using obfuscation with obfs-proxy. I believe SSL VPNs are coming out for the self-hoster, and I'm personally very interested in SoftEther ---------------------------------------------------------------------- lestrenched · 2023-11-23 17:42 SSL VPN? ---------------------------------------------------------------------- XxCrazyMikeyxX · 2023-11-23 17:43 What VPS service do you use? ---------------------------------------------------------------------- lestrenched · 2023-11-23 17:43 The VPS is the server with the router being the client. The only configuration required is the nftables routing config to route traffic to and fro from Wireguard interfaces. ---------------------------------------------------------------------- HurricanKai · 2023-11-23 17:49 Well beyond getting your own BGP router and getting someone to peer with you... I want to do that, but one way or another your data is going through someone else anyways. To me self hosting is about easily moving between providers, not being tied to one specific entity (besides myself) having control of that data. ---------------------------------------------------------------------- RydRychards · 2023-11-23 17:51 Why use a vps at all? Isn't the benefit in this scenario only the hidden ip? ---------------------------------------------------------------------- Nestramutat- · 2023-11-23 17:54 Hidden IP, static IP, and light caching on the VPS side. ---------------------------------------------------------------------- Turtvaiz · 2023-11-23 18:09 Well, ehh, you get what you pay for. And like at that price point the deal is something like "256MB RAM, shared IPv4 or IPv6 only, capped bandwidth". But you could. Realistically though it's proably better to pay that 15€ per year minimum. ---------------------------------------------------------------------- -rwsr-xr-x · 2023-11-23 18:31 > SSL VPN? They MiTM SSL connections. ---------------------------------------------------------------------- nitsky416 · 2023-11-23 19:19 Like where ---------------------------------------------------------------------- nitsky416 · 2023-11-23 19:19 All I'm seeing are like 15E monthly, where you seeing these ridiculous low plans? ---------------------------------------------------------------------- SnooPets20 · 2023-11-23 19:33 Nah. With something like Tailscale or ZeroTier your data doesn't go through their servers. They simply initiate the connection, the rest is peer to peer. If you're talking about your ISP, then yes, but the difference is that the data is not decrypted on their end. With Cloudflare, it is. ---------------------------------------------------------------------- maynardnaze89 · 2023-11-23 19:41 Nerdrack for example. They expired yesterday ---------------------------------------------------------------------- HurricanKai · 2023-11-23 19:46 I might be wrong, but I'm pretty sure tailscale also manages the keys for you, and is also installed on every machine (while cloudflare is installed nowhere with origin pull or just on the host with cloudflared) but regardless, you also put a lot of trust in tailscale not siphoning Data, just like with cloudflare. ---------------------------------------------------------------------- nitsky416 · 2023-11-23 20:38 Racknerd you mean? Looks like they still have some cheap ones but lowass data caps ---------------------------------------------------------------------- lestrenched · 2023-11-23 21:38 They force you to use their certificates? ---------------------------------------------------------------------- lestrenched · 2023-11-23 21:39 I'm looking for a VPS machine that has good outbound traffic limits so I can route all of my application and search traffic through it. Media, I probably won't use a VPN for that. Know anything like it? ---------------------------------------------------------------------- maynardnaze89 · 2023-11-24 23:39 Yes!!! Did you get a deal? I'm still torn ---------------------------------------------------------------------- nitsky416 · 2023-11-24 23:40 Nope