4 ms·

OpenVPN is very complicated and for that reason I use sshuttle[1] which is very simple. It does require that you own an sshd running on an endpoint somewhere (

by rsync 9y ago

OpenVPN is very complicated and for that reason I use sshuttle[1] which is very simple. It does require that you own an sshd running on an endpoint somewhere (like a VPS or an EC2 instance or your own server somewhere) - but if you can clear that hurdle, you end up with a very elegant and simple solution. [1] https://github.com/sshuttle/sshuttle https://github.com/sshuttle/sshuttle

westbywest 9y ago
tinc is also a popular lightweight VPN, although it's targeted for embedded. It does nevertheless support the libreSSL fork mentioned upthread. https://www.tinc-vpn.org/ https://www.tinc-vpn.org/
- sr2 9y ago
  +1 for tinc
sigjuice 9y ago
The first line on the sshuttle GitHub page says 'does not require admin'. Why even have installation instructions via 'sudo' then?
- ckuehl 9y ago
  A benefit of installing using your system package manager is that you can rely on your distro to manage the security of the package. If you just `pip install` it, you need to personally watch for new security bugs and upgrade (or backport them to your current version, which is what e.g. Debian will do for you). You'd also need to do that for all of the dependencies. Up to you if you trust your distro's security team, of course :). I trust mine.
  - sigjuice 9y ago
    I did not say anything about package managers. I trust my distro and its suppplied packages just like you trust yours and aim to use official packages as much as I can. The instructions in README.md say "sudo pip install" and "sudo ./setup.py". To me, that is a bad idea. Things that are manually installed should be kept in completely separate directories. My preference is to install such packages in my home directory, which should in no way require sudo.
    - ckuehl 9y ago
      I agree. Looks like I only noticed the apt-get install line and incorrectly assumed that's what you were referring to.
curun1r 9y ago
For Mac users, Sidestep [1] offers a similar VPN over SSH experience. It's the only VPN product I've ever used that I've never had an issue with...it just works (no doubt due to the bulletproof nature of SSH). [1] http://chetansurpur.com/projects/sidestep/ http://chetansurpur.com/projects/sidestep/
- rsync 9y ago
  This interested me however it appears to be abandoned ... last commit was on 2013-10-25 and comments like the one at the end of this comment thread: https://github.com/chetan51/sidestep/issues/62 https://github.com/chetan51/sidestep/issues/62 indicate that it is abandoned ...

by rsync 9y ago

westbywest 9y ago

tinc is also a popular lightweight VPN, although it's targeted for embedded. It does nevertheless support the libreSSL fork mentioned upthread. https://www.tinc-vpn.org/ https://www.tinc-vpn.org/

sr2 9y ago
+1 for tinc

sigjuice 9y ago

The first line on the sshuttle GitHub page says 'does not require admin'. Why even have installation instructions via 'sudo' then?

ckuehl 9y ago
A benefit of installing using your system package manager is that you can rely on your distro to manage the security of the package. If you just `pip install` it, you need to personally watch for new security bugs and upgrade (or backport them to your current version, which is what e.g. Debian will do for you). You'd also need to do that for all of the dependencies. Up to you if you trust your distro's security team, of course :). I trust mine.
- sigjuice 9y ago
  I did not say anything about package managers. I trust my distro and its suppplied packages just like you trust yours and aim to use official packages as much as I can. The instructions in README.md say "sudo pip install" and "sudo ./setup.py". To me, that is a bad idea. Things that are manually installed should be kept in completely separate directories. My preference is to install such packages in my home directory, which should in no way require sudo.
  - ckuehl 9y ago
    I agree. Looks like I only noticed the apt-get install line and incorrectly assumed that's what you were referring to.

curun1r 9y ago

For Mac users, Sidestep [1] offers a similar VPN over SSH experience. It's the only VPN product I've ever used that I've never had an issue with...it just works (no doubt due to the bulletproof nature of SSH). [1] http://chetansurpur.com/projects/sidestep/ http://chetansurpur.com/projects/sidestep/

rsync 9y ago
This interested me however it appears to be abandoned ... last commit was on 2013-10-25 and comments like the one at the end of this comment thread: https://github.com/chetan51/sidestep/issues/62 https://github.com/chetan51/sidestep/issues/62 indicate that it is abandoned ...