5 ms·
Depends on the traffic from devices. If you don't have crazy high traffic, flash your router with openwrt and install wireguard. If the flash is too small, you
by ktta 9y ago
Depends on the traffic from devices. If you don't have crazy high traffic, flash your router with openwrt and install wireguard. If the flash is too small, you can compile your own image with wireguard selected which doesn't need as much flash space.
Next you can choose a cloud provider, which is metered (GCE, AWS, etc), or non-metered like OVH, or Digital Ocean(they don't charge you if you go over the 1TB for now).
Or you can choose a VPN service provider like Mullvad who have wireguard option (PIA should be getting it soon), if you trust them.
Be careful in choosing your provider since you might be annoyed with the latency over time, or just get used to it.
There are tutorials for all this.
- woah 9y agoNetflix and other video sites will be blocked from a lot of VPS providers. You may be better off going with a professional service that can keep their ips clean
- ktta 9y agoTrue, but it can be mitigated by setting the routing table for Netflix IPs to avoid the tunnel. There's no standard way this can be done, but it's not impossible.
- rbritton 9y agoI did this for a while, and it was a decent headache to maintain. I had pfSense running at the Comcast edge and configured it to route all but specifically whitelisted traffic through a VPN I controlled. Speed was slower than max but acceptable due to choosing a VPS provider close to me, but the maintenance on the whitelist was cumbersome.
- 411mrc 9y agoYou can mitigate the speed issue by adding your own DNS local caches and then start blocking ads, trackers and malware sites and whomever you want (FB is added to the spyware list) using publicly available lists. All of this speeds browsing considerably. A personalized router is very powerful.
- Diederich 9y ago> your own DNS local caches Doesn't that mean your ISP will now see what domains you are looking up?
- ktta 9y agoNot if you use DNS-over-HTTPS with cloudflare or google. https://github.com/aarond10/https_dns_proxy https://github.com/aarond10/https_dns_proxy
- cwingrav 9y agoJust clarifying your comment for others: Your ISP would still see the IPs of the sites your packets visit unless you are using an encrypted VPN connection. The DNS-over-HTTPS is a great addition to a VPN. (the VPN comment was several levels up so some might miss it)
- Diederich 9y agoRighto!
- ktta 9y agoOpenwrt by default caches using dnsmasq, but the blocklist is a good idea. The problem is, even the blocklist is sometimes too big for the tiny flashes of some routers.
- danharaj 9y agoI use a Qotom mini pc as a router. I configure it with NixOS. It's amazing.
- 411mrc 9y agoAs another poster said, go with a mini-pc like Qotom. Uses little power, configure however you want (memory, SSD). Most web pages load instantly, and it handles a massive blocklist (Bind9). I'm slowly adding a list of always on packages like sync tools. Also, you can use an AP instead of router attached wifi. Move the Power-over Ethernet AP where you want. Ubiquiti Unifi is far better coverage than my previous consumer grade wifi. Do it all in your favorite Linux flavor.
- anarchimedes 9y agoI'm interested in the implementation of this, but do not have the technical background to begin. Would you have any go to resources for a beginner?