Hacker News new | ask | show | jobs
by walrus01 1635 days ago
mullvad, the company mozilla recently partnered with.

not much else...

I am biased because I do my own VPN so all of them seem shady to me.

2 comments

Tangential to the thread, but I've never understood what people mean when they say this.

Do you run all your personal traffic through a VPS or something? That's not really offering the same thing as most VPN's. It hides your traffic from your ISP so they can't sell your data and snoop on you, but doesn't accomplish some of the anonymizing that an actual multi-user VPN can provide by adding additional traffic under the same IP.

So, what do YOU mean when you say you "do your own VPN"?

One of the VMs that I have on a system in colocation is my own customized OpenVPN setup, where I also run the openssl CA for it. My phone, laptop, etc all have their own keys.

It's set up for my own needs when I want to use a VPN from a weird place. Or simply to bypass artificial restrictions on traffic if I'm on amenity wifi in somebody's office, airport, hotel, etc. Since I can arbitrarily reconfigure it at will, and run multiple openvpn daemons from differnt .conf files listening on different ports with unique configurations (all relying on the same CA), I can do things like have one VPN that pushes a default route for my spouse's need to do internet things on restricted amenity wifi.

Another part of it pushes only routes to a few /24 that are my personal project servers, and the routing table on vpn clients remains otherwise unmodified. Sometimes known as a split horizon VPN.

>95% of the time I am not using it to run all my traffic through there.

It's also the gateway and pushes routing table entries to things that exist for my personal test/project/development VMs that are in private IP space, so I need to be connected to the VPN in order to talk to those.

Thanks for responding, that sounds cool! I have contemplated a similar setup myself.
> thread about sec

> OpenVPN

What is your context here?
Wireguard user.
Seconded mullvad. The only vpn provider which accepts cash by mail as a payment method.

No email needed for sign up either.