technology

23908 readers

388 users here now

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

Rules:

1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.

founded 5 years ago

MODERATORS

context@hexbear.net

EmmaGoldman@hexbear.net

SexUnderSocialism@hexbear.net

gaycomputeruser@hexbear.net

ZoomeristLeninist@hexbear.net

Any VPN Self-hosters about? (hexbear.net)

submitted 2 weeks ago by aanes_appreciator@hexbear.net to c/technology@hexbear.net

16 comments fedilink hide all child comments

Hello comrades! In light of the fucked up state of the UK govt I'm looking at some VPN options to further harden my homelab.

Right now, I have zero VPN coverage for my seedbox/jellyfin server which of course means a major security hole, even if my ISP hasn't shit over me for it yet.

I had a few questions about selfhosting a VPN versus a third party service.

How does a self hosted VPN actually do anything? I was under the impression that VPNs had to be off-site to give the benefits of, say, location spoofing.
Do I need to pay any subscriptions to other services for a self hosted VPN? At least in order to access features such as location spoofing.
We use Cloudflare WARP at work to access internal services. Will a LAN-VPN Fuck this up even if I explicitly avoid spoofing my location to ensure my IT guy doesnt shit a brick?

thanks cumrades!

you are viewing a single comment's thread
view the rest of the comments

[–] leftAF@hexbear.net 6 points 2 weeks ago* (last edited 2 weeks ago)

Truly anonymous networking looks like this:

Home -> Tor -> VPN/Proxy -> Tor -> VPN/Proxy -> Tor -> Web

If they start restricting VPN technologies, look into the tlsfragment/V2Ray/shadowsocks proxy software out there for the first hop.

Any VPN/Proxy is paid for with Monero via Tor. The network traffic is encrypted to one of the proxy servers with symmetric keys, installed by writing terabytes of data to them via SSH and then uploading a script which pulls the key from some random bytes throughout those terabytes. NSA isn't logging every byte out of terabytes, just start/end & intermittent packets.

I've never found a link to it again but I use something known to me as ts (tombstone, I think?) and it is a virtual driver which I add on the self-hosted proxies/VPNs that effectively forces everything to the pagefile, which is encrypted on a ramdisk volume. They have to be unlocked via KVM though.