4 ms·

Are you guys vpn’ing on your phones too? Do you just use the built in vpn connection profiles? I’m having trouble getting mine to stay connected to a plain old

by heyoni 7y ago

Are you guys vpn’ing on your phones too? Do you just use the built in vpn connection profiles? I’m having trouble getting mine to stay connected to a plain old IPSec tunnel running on my raspberry pi and thinking I probably need a special client for “always on” to work.

a012 7y ago
I use Wireguard on both mobile and laptop, setting it up is easy and fast (with my Ansible playbook it's just play then get configs).
- heyoni 7y ago
  Wireguard is its own protocol separate from IPSec or l2tp right?
Scramblejams 7y ago
On iOS the only way I found for “always on” to work well was with the IKE protocol using the built-in VPN client. I set up a cheap Vultr VM and used this: https://github.com/jawj/IKEv2-setup https://github.com/jawj/IKEv2-setup One caveat: Reconnects worked poorly until I disabled the iptables rate limiting the script imposes. Outside of that, it’s worked really well. I pointed the VM’s DNS at Adguard so I get some good filtering as part of it.
- heyoni 7y ago
  I'm trying wireguard at the moment for the always on feature. Setup was absurdly easy.
  - Scramblejams 7y ago
    Cool. When I set my VPN up, Wireguard didn’t do iOS yet, but I’m interested in it. Please post back to this thread with a short experience report, if you wouldn’t mind. :-)
    - heyoni 7y ago
      So far it's been really good. It's very good at staying on all the time and it was really easy to setup. Right now it's running on a raspberry pi but since I took down my ipsec vpn container, my ram/temp/cpu usage has gone down quite a bit. I still need to spend a minute configuring things like dynamic dns in case my IP changes but I'm really impressed right now.
      - Scramblejams 7y ago
        Thanks! Just ordered an Rpi4 for home routing duties, I’ll give it a try there first.
        heyoni 7y ago
        Btw, I also highly recommend a case cooling case for the rpi4. I got the aluminum one at https://flirc.tv https://flirc.tv but I think anything like it will do. It dropped the idle temperature by quite a bit. I think it went from ~75ish to about 45
        Scramblejams 7y ago
        Good call. Those are pretty cases. I saw some tests indicating open+fan really dropped temps vs closed+fan so I ordered one of these: https://www.amazon.com/dp/B01LXSMY1N https://www.amazon.com/dp/B01LXSMY1N
        heyoni 7y ago
        I'd be curious to see what the idle temperatures land on.

by heyoni 7y ago

a012 7y ago

I use Wireguard on both mobile and laptop, setting it up is easy and fast (with my Ansible playbook it's just play then get configs).

heyoni 7y ago
Wireguard is its own protocol separate from IPSec or l2tp right?

Scramblejams 7y ago

On iOS the only way I found for “always on” to work well was with the IKE protocol using the built-in VPN client. I set up a cheap Vultr VM and used this: https://github.com/jawj/IKEv2-setup https://github.com/jawj/IKEv2-setup One caveat: Reconnects worked poorly until I disabled the iptables rate limiting the script imposes. Outside of that, it’s worked really well. I pointed the VM’s DNS at Adguard so I get some good filtering as part of it.

heyoni 7y ago
I'm trying wireguard at the moment for the always on feature. Setup was absurdly easy.
- Scramblejams 7y ago
  Cool. When I set my VPN up, Wireguard didn’t do iOS yet, but I’m interested in it. Please post back to this thread with a short experience report, if you wouldn’t mind. :-)
  - heyoni 7y ago
    So far it's been really good. It's very good at staying on all the time and it was really easy to setup. Right now it's running on a raspberry pi but since I took down my ipsec vpn container, my ram/temp/cpu usage has gone down quite a bit. I still need to spend a minute configuring things like dynamic dns in case my IP changes but I'm really impressed right now.
    - Scramblejams 7y ago
      Thanks! Just ordered an Rpi4 for home routing duties, I’ll give it a try there first.
      - heyoni 7y ago
        Btw, I also highly recommend a case cooling case for the rpi4. I got the aluminum one at https://flirc.tv https://flirc.tv but I think anything like it will do. It dropped the idle temperature by quite a bit. I think it went from ~75ish to about 45
        Scramblejams 7y ago
        Good call. Those are pretty cases. I saw some tests indicating open+fan really dropped temps vs closed+fan so I ordered one of these: https://www.amazon.com/dp/B01LXSMY1N https://www.amazon.com/dp/B01LXSMY1N
        heyoni 7y ago
        I'd be curious to see what the idle temperatures land on.