3 ms·
Right, you can't trust any one VPN service. But you can use nested VPN chains. Sort of like Tor circuits. To distribute trust, so no one VPN can pwn you. Orchi
by mirimir 7y ago
Right, you can't trust any one VPN service. But you can use nested VPN chains. Sort of like Tor circuits. To distribute trust, so no one VPN can pwn you.
Orchid is a P2P VPN network that offers dynamic multi-hop connectivity.[0] Users buy bandwidth with supposedly anonymous Etherium-based cryptocurrency. But so far, it's only available on Android and (soon) iOS.
Some years ago, I wrote a guide for IVPN for doing static nested VPN chains (aka multi-hop connectivity) using pfSense VMs as gateway routers for various VPN services.[1]
And not long ago, published on GitHub about doing dynamic nested VPN chains, with recursive NAT forwarding within a single Debian router VM. There are iptables rules that forward one VPN through another, and restrict traffic to the chain. That's lighter, and easier to setup. And it's dynamic, more like Tor. But there's no compartmentalization between OpenVPN processes.
Unlike Orchid, that's not limited to smartphones. But there's are no ~automatic payments and reputation management.
0) https://www.orchid.com/ https://www.orchid.com/
1) https://www.ivpn.net/privacy-guides/advanced-privacy-and-anonymity-part-1 https://www.ivpn.net/privacy-guides/advanced-privacy-and-ano...
2) https://github.com/mirimir/vpnchains https://github.com/mirimir/vpnchains