popup-openvpn
Infrastructure
self-hosted vpn server
SHOW HN2017
206points
51comments
#157of 2,242 in 2017
Top 8%of 2017 by points
How HN took it
CuriousMostly questions and neutral comments
2 positive, 17 neutral or asking, 1 mixed, 6 critical, out of 26 comments about the project. Thread score -0.13.
Idea: 2 for, 1 againstPrivacy: 0 for, 3 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Tight focus on one thing; easy to audit
From 1 comment
Wew, goodies is about right. That's pretty cool. I have a VPS and I use it for webhosting for myself and some friends. I've thought about (in some cases tried) and then decided…
mos_basik on HN
Objections
Streisand and Sovereign already do this; why another tool
From 2 comments
I'd like to hear how this is different from Streisand? [0] (and also Sovereign, which I see someone else posted below). I set up Streisand on a $5/mo Digital Ocean droplet a…
cyberferret on HNCame here to say the same thing. How is this better than Streisand? Both even use Ansible.
rosser on HN
OpenVPN defaults in the templated role are outdated
From 1 comment
I misread your question, my apologies. At a quick glance (and a very quick one at that), Streisand's OpenVPN setup is configured to work on both TCP and UDP ports, where as the…
subliminalpanda on HN
IPv6 is not routed through the VPN by default, causing leaks
From 2 comments
> Do not check use IPv6 last time I set up an openvpn server on digitalocean without `tun-ipv6`, it leaked my ISP's ipv6 address to the internet while my ipv4 address was correct…
tribby on HNI'm guessing the author was resolving AAAA records on the client side which caused his network stack to prefer IPv6 routing. Which means anything he was connecting to that was…
dijit on HN
Requests
Add IPv6 support
From 2 comments
testing is a good idea, and I've seen it done in other "road warrior" type scripts in an unsafe way via `curl -s6 https://canhazip.com`. I may not have the time to contribute for…
tribby on HNHi, thanks for your feedback. Can you submit a github issue? I need to establish a traffic testing method for assessing whether any traffic is leaking. This would be a valuable…
robbintt on HN
Add server hardening
From 1 comment
I'd like to see some hardening of the box if it's going to be used as a VPN server. My boxes in the DO IP range routinely get targeted by malicious traffic from China and Russia.
tedmiston on HN
Questions
How does it differ from Streisand?
From 2 comments
I'd like to hear how this is different from Streisand? [0] (and also Sovereign, which I see someone else posted below). I set up Streisand on a $5/mo Digital Ocean droplet a…
cyberferret on HNCame here to say the same thing. How is this better than Streisand? Both even use Ansible.
rosser on HN
Does it work for Netflix from abroad?
From 1 comment
Does this work for offshore usage of USA Netflix or do they detect Digital Ocean?
cylinder on HN
Alternatives named
Streisand
From 1 comment
I'd like to hear how this is different from Streisand? [0] (and also Sovereign, which I see someone else posted below). I set up Streisand on a $5/mo Digital Ocean droplet a…
cyberferret on HN
Sovereign
From 1 comment
I prefer Sovereign for this. Sets up OpenVPN as well as a bunch of other goodies. https://github.com/sovereign/sovereign
NickBusey on HN
Algo
From 1 comment
Algo[1] may be a good fit for you. Just be aware the authors deliberately target only very recent clients. [2] I recently spun up a new Algo instance on an Ubuntu host and…
paws on HN
Nyr/openvpn-install
From 1 comment
You can simply run a sh script that sets it up... https://github.com/Nyr/openvpn-install
necessity on HN
Pritunl
From 1 comment
I'm surprised no one's mentioned pritunl. Open source and one click deployment on DO https://pritunl.com
lucasjans on HN