4 ms·

I have taken to sending all traffic through my own IKEv2 VPN hosted in Germany. I have a script to automate setup [1], which I will be updating shortly to use

by gmac 10y ago

I have taken to sending all traffic through my own IKEv2 VPN hosted in Germany. I have a script to automate setup [1], which I will be updating shortly to use Let's Encrypt and to generate an on-demand Mac/iOS configuration profile that keeps one constantly connected. I have half a mind to set up some semi-commercial service on the basis of complete transparency and the motivation to avoid the Investigatory Powers Act (most existing VPN services seem to come across as very shady). [1] https://github.com/jawj/IKEv2-setup https://github.com/jawj/IKEv2-setup

jgrahamc 10y ago
What does this do in your configuration? i.e. why 10.10.10.0/24? VPNIPPOOL="10.10.10.0/24"
- Normal_gaussian 10y ago
  It defines the IP range of the devices on the VPN to be a subset of the special/reserved "private network" range [0]. More specifically it says that the VPN IP's are over the range of 10.10.10.0 to 10.10.10.255. This can be calculated from taking the binary representation of the specified IP and 'fixing' the first 24 (in this case) bits, the range of possible addresses is the range over which the last 8 (in this case) bits can vary. It is common to also see a broadcast address, gateway, and network mask specified. [0] https://en.wikipedia.org/wiki/IPv4#Special-use_addresses https://en.wikipedia.org/wiki/IPv4#Special-use_addresses
billybofh 10y ago
In a similar line, I've been using 'streisand' for the past little while - might be worth looking at for inspiration if nothing else. https://github.com/jlund/streisand https://github.com/jlund/streisand
sdfjkl 10y ago
What makes you think Germany is a better exit point for your traffic? https://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_des_Brief-,_Post-_und_Fernmeldegeheimnisses https://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_d... Much more comprehensive German version: https://de.wikipedia.org/wiki/Artikel_10-Gesetz#.C3.9Cbermittlung_von_BND-Erkenntnissen_an_andere_Staaten https://de.wikipedia.org/wiki/Artikel_10-Gesetz#.C3.9Cbermit...
- sammoth 10y ago
  What is a good country to host an end-point in within a reasonable distance of the UK?
  - austinjp 10y ago
    Wherever it is, the Bad Guys will already be rife there, marking you out as a potential Bad Guy too, by association.
  - razakel 10y ago
    >What is a good country to host an end-point in within a reasonable distance of the UK? Iceland.

by gmac 10y ago

jgrahamc 10y ago

What does this do in your configuration? i.e. why 10.10.10.0/24? VPNIPPOOL="10.10.10.0/24"

Normal_gaussian 10y ago
It defines the IP range of the devices on the VPN to be a subset of the special/reserved "private network" range [0]. More specifically it says that the VPN IP's are over the range of 10.10.10.0 to 10.10.10.255. This can be calculated from taking the binary representation of the specified IP and 'fixing' the first 24 (in this case) bits, the range of possible addresses is the range over which the last 8 (in this case) bits can vary. It is common to also see a broadcast address, gateway, and network mask specified. [0] https://en.wikipedia.org/wiki/IPv4#Special-use_addresses https://en.wikipedia.org/wiki/IPv4#Special-use_addresses

billybofh 10y ago

In a similar line, I've been using 'streisand' for the past little while - might be worth looking at for inspiration if nothing else. https://github.com/jlund/streisand https://github.com/jlund/streisand

sdfjkl 10y ago

What makes you think Germany is a better exit point for your traffic? https://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_des_Brief-,_Post-_und_Fernmeldegeheimnisses https://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_d... Much more comprehensive German version: https://de.wikipedia.org/wiki/Artikel_10-Gesetz#.C3.9Cbermittlung_von_BND-Erkenntnissen_an_andere_Staaten https://de.wikipedia.org/wiki/Artikel_10-Gesetz#.C3.9Cbermit...

sammoth 10y ago
What is a good country to host an end-point in within a reasonable distance of the UK?
- austinjp 10y ago
  Wherever it is, the Bad Guys will already be rife there, marking you out as a potential Bad Guy too, by association.
- razakel 10y ago
  >What is a good country to host an end-point in within a reasonable distance of the UK? Iceland.