top | item 18699519

Show HN: VPNHome – 1-click, self-hosted OpenVPN deployment and management app

85 points| ezaquarii_com | 7 years ago |github.com | reply

34 comments

order
[+] tptacek|7 years ago|reply
I think you might be surprised how straightforward an app like this would be for Wireguard, and, unlike OpenVPN, for which there are a zillion wrapper options, Wireguard really needs some non-shell-user UX love right now.

Have you considered doing a version of this for Wireguard? It's much, much better than OpenVPN.

[+] ezaquarii_com|7 years ago|reply
Yes, I'm currently researching wireguard and I even renamed the app from OpenVPN@Home to VPN@Home to anticipate this change.

However, Wireguard requires kernel module which is a bit tricky on VPSes and is not compatible with "it just works" mantra.

[+] morrbo|7 years ago|reply
Just skimming wireguard as this is the first I've heard of it. I haven't got time to read the entire spec tonight as it is late where I am. I see it uses a custom protocol over UDP. Do you know if this is detectable? One of the major advantages of openvpn is the ability to host an sslvpn on port 443 to not have to face any problems with filtering..just wonder if anyone knows if/how wireguard addresses this?
[+] mises|7 years ago|reply
Wireguard might gain a lot of support (especially corporate) by creating a good windows client.
[+] InGodsName|7 years ago|reply
The other day i commented same thing in the Wireguard thread but got downvoted.

I've hard time installing Wireguard on a VPS.

[+] msh|7 years ago|reply
It would properly be safer to use algo. https://github.com/trailofbits/algo
[+] tptacek|7 years ago|reply
This comment is inexplicably downvoted; if you're going to set up a VPN for the first time and don't want to get sysadmin-level intimate with Linux networking to boot up Wireguard (surprisingly easy!), Algo is your best bet.
[+] djbeadle|7 years ago|reply
This looks interesting, and I'm going to try it. Alternatively if you want something a little more lightweight but less-feature packed, there's http://www.pivpn.io
[+] sirodoht|7 years ago|reply
I recently found a similar solution, Outline [1]. Works pretty good, fast, open source.

[1] https://getoutline.org/

[+] AndrewConn|7 years ago|reply
Looks cool, but FYI for those trying to remove themselves from the Google surveillance ecosystem... Outline was created by Jigsaw, an Alphabet/Google owned subsidiary. Outline could very well have the best intentions, and they likely do based on Jigsaw’s mission, but the link to Alphabet/Google should caution some people.
[+] busheezy|7 years ago|reply
I had an OpenVPN server setup for the first time yesterday with a docker container, in about five minutes. This thread's app is probably very useful but I figured someone in here might be interested in the docker container. I found it at the top of google with "openvpn docker." I ended up using the thread on HN yesterday to setup wireguard instead, though. I used the ansible setup and it was a breeze as well.

Sorry for not staying on topic. VPNHome looks nifty.

[+] nodesocket|7 years ago|reply
Looks great, but I prefer to use native Cisco IPSec[1] so I don't have to install 3rd party applications. Works out of the box with macOS, iOS, and Android. Non-technical users can follow a tutorial and setup on their devices. It does lack some nice-to-haves such as two-factor authentication though.

[1] https://github.com/hwdsl2/setup-ipsec-vpn

[+] eximius|7 years ago|reply
I say this on every VPN thread and it's still the best advice:

Just use Wireguard.

[+] g45y45|7 years ago|reply
I say this on every VPN threat and its still the best advice: Just use algo (IPSEC VPN): https://github.com/trailofbits/algo

Wireguard is great, but is not supported on many devices, and does not auto provision configuration files for all your devices. Please look into algo, it really is the best solution for 99% of people.

[+] subway|7 years ago|reply
It's pretty terrible advice for anyone who isn't running Linux on their endpoints, or non-technical users accustom to an openvpn-as or other web-bootstrapped vpn client.
[+] tssva|7 years ago|reply
Wireguard is a great VPN protocol. At this point in time it is a lousy VPN solution for all but the most basic uses. Given time the necessary infrastructure to make it a great VPN solution will develop.
[+] then|7 years ago|reply
works in china?
[+] ezaquarii_com|7 years ago|reply
The VPN is self-hosted, so: 1) technically yes, you can install it on your laptop and deploy VPN to any Linux or OpenBSD host 2) legally, I have no idea if your government allows you to use a VPN
[+] CameronBanga|7 years ago|reply
A good friend is working on a similar idea, and live-streaming his process on Twitch, and doing this as a SaaS. He's calling it Ghostifi, more info below.

https://twitter.com/_rchase_/status/1074789686261022720

He's charging for this because he has some nice convenience features (like auto-rebuild server every day, week, etc), and then managing the VPS integration to make it one click rebuild anywhere in the world, etc.

Been using it for ~7-10 days and getting amazing speeds on my iPhone/Mac. Well worth the small fee he's charging for a dedicated VPN point that I can rebuild whenever on a different location.