Hacker News new | ask | show | jobs
by cypher543 3362 days ago
This still seems too difficult for the average person who isn't a sysadmin, but still wants to protect their privacy. Python? Virtualenv? Config files? Ugh. My ideal VPN appliance would be a minimal Busybox-based disk image that updates using A/B partitions and has a nice web UI. It lets you set basic things like the hostname, time, admin password, and then regenerates all of /etc. A cross-platform GUI setup wizard uploads the disk image to a VPS provider, you get back a URL for the web UI with clear client setup instructions, and that's it. If an update becomes available, you click a button, it downloads the new image to the idle partition, modifies the GRUB config to boot from it, and restarts. Done.
2 comments

I read your comment a week ago and fully agreed that I wanted something similar. So I built this: https://github.com/dan-v/dosxvpn

* It is an OSX packaged app that launches a GUI wizard and deploys to digitalocean, auto configures VPN on OSX, and spits out a mobileconfig file.

* It is based on CoreOS (not busybox) but it set to auto update the OS using A/B partitions.

* VPN docker image running on droplet is also configured to auto update

You can easily build your own IPsec VPN server using a one-liner [1], with support for both IPsec/L2TP and Cisco IPsec.

Disclosure: I am the author of this repo.

[1] https://github.com/hwdsl2/setup-ipsec-vpn