6 ms·

Anyone have VPN recommendations?

mbubb 11y ago
This company looks interesting - https://www.tunnlr.com/ https://www.tunnlr.com/ I learned about them from http://devio.us/ http://devio.us/ (which is great when it works...) I did the trial for 1 day and tried them out. Have no pressing reason to continue for now but have filed them in the mental rolodex.
nyolfen 11y ago
i've been renting a cheap-as-dirt vps ($15/yr) and just using sshuttle[0] to proxy through it which works great for my circumstances (my school blocks nonstandard ports but is just dandy with 22) [0] https://github.com/apenwarr/sshuttle https://github.com/apenwarr/sshuttle
- yc1010 11y ago
  You could also setup tinyproxy (https://banu.com/tinyproxy/ https://banu.com/tinyproxy/) to proxy http/https via your linux VPS (and limit connections to only your ip) or even better just run socks5 thru ssh http://straightedgelinux.com/blog/howto/socks.html http://straightedgelinux.com/blog/howto/socks.html Tho I recommend using autossh to maintain the ssh tunnel which could be flaky at times http://www.debianadmin.com/autossh-automatically-restart-ssh-sessions-and-tunnels.html http://www.debianadmin.com/autossh-automatically-restart-ssh...
- mverwijs 11y ago
  And just in case you're in a network that does block access to port 22, use sslh to listen to port 443 and map all ssh traffic to port 22 (and all https traffic to httpd, and all openvpn traffic to 1194). One port (443) to rule them all!
deleted 11y ago
[deleted]
asquabventured 11y ago
https://www.privateinternetaccess.com/ https://www.privateinternetaccess.com/ (PIA) works for me. Of course with any VPN you run the risk of providing all of your information through a (potentially) captured source.
bifrost 11y ago
I usually point people to this: http://torrentfreak.com/anonymous-vpn-service-provider-review-2015-150228/ http://torrentfreak.com/anonymous-vpn-service-provider-revie... As a former privacy VPN operator I can tell you its extremely hard to operate one securely.
- asquabventured 11y ago
  There is no such thing as total security, there is only what we know and then what we do not know.
  - bifrost 11y ago
    Exactly. And even when you're working on the known issues, they tend to be non-trivial. Its hard.
  - rumsfeld 11y ago
    ...but we don't know what we don't know.
shawkinaw 11y ago
Roll your own: https://www.digitalocean.com/community/tutorials/how-to-setup-your-own-vpn-with-pptp https://www.digitalocean.com/community/tutorials/how-to-setu...
- theGimp 11y ago
  That works if you want to pretend you're from a different country. It doesn't work if you want to anonymize yourself.
  - ryanlol 11y ago
    Use Tor if you want to anonymize yourself, not a VPN ffs.
- tonyhb 11y ago
  Please do not ever use PPTP — it has been broken for years. Instead use OpenVPN. https://security.stackexchange.com/questions/47518/is-pptp-vpn-ever-secure-under-dd-wrt https://security.stackexchange.com/questions/47518/is-pptp-v...
mingabunga 11y ago
HideAway: Uses rules so can be always on http://www.firetrust.com/en/products/hideaway http://www.firetrust.com/en/products/hideaway
okbake 11y ago
I use NordVPN, which I have no complaints about. But occasionally I'll get a 1 week token from cryptostorm (https://cryptostorm.is/ https://cryptostorm.is/) They have an interesting model: you buy a token that expires after a certain length of time (1 week, 1 month, 1 year, etc). The clock doesn't start ticking until the first time you log in. Instead of registering a username/password, you're sent the token via email and your login ends up being a sha512 hash of the token for the username. There is no password associated, just the hash of the token is all you need. I like this because you're able to buy 'disposable' accounts basically. They take bitcoin and some alt coins too, which is nice. Dns protection and access to .onion and .bit domains. It all seems pretty solid. NordVPN tends to be a little bit faster for me, though it may depend on which servers you use.
khnd 11y ago
tunnelbear
developer1 11y ago
For technically inclined people, setting up your own SOCKS proxy is the simplest method possible. 1. Get a cheap server (ex: DigitalOcean $5/month) in the city/country you want to connect through. 2. Add these 2 lines to /etc/ssh/sshd_config: AllowTcpForwarding yes GatewayPorts yes 3. Restart sshd (service ssh restart), or restart the server. 4. Connect to the server setting a dynamic port forward. On linux or Mac, this is just "ssh -D 8000 user@domain.com". On Windows, putty lets you set a dynamic port forward. 5. Personally I use Chrome for my real browsing, and then use Firefox for the proxy since it allows configuring a proxy for the browser only rather than the entire operating system. You just set the SOCKS proxy under advanced networking settings (host 127.0.0.1, port 8000). 6. If you want all internet traffic to go over the proxy rather than just Firefox, this is easy on Mac through the Network Preferences panel. I'm not able to comment on linux/Windows in this regard.
- mahouse 11y ago
  As far as I know, that leads to terrible performance.
  - ultramancool 11y ago
    It actually leads to much better performance than using someone else's home connection. Any VPN or proxy will have some performance penalty associated with it.
- ultramancool 11y ago
  A few extra things to add: 1) If you want everything, UDP data, non-SOCKS supporting apps, etc to go through, you're better off configuring an OpenVPN server. It takes some extra effort, but this allows it to work easily on mobile platforms and stuff too. 2) If you want to use this from a restricted network, use port 443 (for OpenVPN or SSH). 3) If your network is extremely strict, use stunnel to make it look exactly like standard SSL web traffic. I've written a helper app for people who need this on Android, https://github.com/ultramancool/Stunneler https://github.com/ultramancool/Stunneler

mbubb 11y ago

This company looks interesting - https://www.tunnlr.com/ https://www.tunnlr.com/ I learned about them from http://devio.us/ http://devio.us/ (which is great when it works...) I did the trial for 1 day and tried them out. Have no pressing reason to continue for now but have filed them in the mental rolodex.

nyolfen 11y ago

i've been renting a cheap-as-dirt vps ($15/yr) and just using sshuttle[0] to proxy through it which works great for my circumstances (my school blocks nonstandard ports but is just dandy with 22) [0] https://github.com/apenwarr/sshuttle https://github.com/apenwarr/sshuttle

yc1010 11y ago
You could also setup tinyproxy (https://banu.com/tinyproxy/ https://banu.com/tinyproxy/) to proxy http/https via your linux VPS (and limit connections to only your ip) or even better just run socks5 thru ssh http://straightedgelinux.com/blog/howto/socks.html http://straightedgelinux.com/blog/howto/socks.html Tho I recommend using autossh to maintain the ssh tunnel which could be flaky at times http://www.debianadmin.com/autossh-automatically-restart-ssh-sessions-and-tunnels.html http://www.debianadmin.com/autossh-automatically-restart-ssh...
mverwijs 11y ago
And just in case you're in a network that does block access to port 22, use sslh to listen to port 443 and map all ssh traffic to port 22 (and all https traffic to httpd, and all openvpn traffic to 1194). One port (443) to rule them all!

deleted 11y ago

[deleted]

asquabventured 11y ago

https://www.privateinternetaccess.com/ https://www.privateinternetaccess.com/ (PIA) works for me. Of course with any VPN you run the risk of providing all of your information through a (potentially) captured source.

bifrost 11y ago

I usually point people to this: http://torrentfreak.com/anonymous-vpn-service-provider-review-2015-150228/ http://torrentfreak.com/anonymous-vpn-service-provider-revie... As a former privacy VPN operator I can tell you its extremely hard to operate one securely.

asquabventured 11y ago
There is no such thing as total security, there is only what we know and then what we do not know.
- bifrost 11y ago
  Exactly. And even when you're working on the known issues, they tend to be non-trivial. Its hard.
- rumsfeld 11y ago
  ...but we don't know what we don't know.

shawkinaw 11y ago

Roll your own: https://www.digitalocean.com/community/tutorials/how-to-setup-your-own-vpn-with-pptp https://www.digitalocean.com/community/tutorials/how-to-setu...

theGimp 11y ago
That works if you want to pretend you're from a different country. It doesn't work if you want to anonymize yourself.
- ryanlol 11y ago
  Use Tor if you want to anonymize yourself, not a VPN ffs.
tonyhb 11y ago
Please do not ever use PPTP — it has been broken for years. Instead use OpenVPN. https://security.stackexchange.com/questions/47518/is-pptp-vpn-ever-secure-under-dd-wrt https://security.stackexchange.com/questions/47518/is-pptp-v...

mingabunga 11y ago

HideAway: Uses rules so can be always on http://www.firetrust.com/en/products/hideaway http://www.firetrust.com/en/products/hideaway

okbake 11y ago

I use NordVPN, which I have no complaints about. But occasionally I'll get a 1 week token from cryptostorm (https://cryptostorm.is/ https://cryptostorm.is/) They have an interesting model: you buy a token that expires after a certain length of time (1 week, 1 month, 1 year, etc). The clock doesn't start ticking until the first time you log in. Instead of registering a username/password, you're sent the token via email and your login ends up being a sha512 hash of the token for the username. There is no password associated, just the hash of the token is all you need. I like this because you're able to buy 'disposable' accounts basically. They take bitcoin and some alt coins too, which is nice. Dns protection and access to .onion and .bit domains. It all seems pretty solid. NordVPN tends to be a little bit faster for me, though it may depend on which servers you use.

khnd 11y ago

tunnelbear

developer1 11y ago

For technically inclined people, setting up your own SOCKS proxy is the simplest method possible. 1. Get a cheap server (ex: DigitalOcean $5/month) in the city/country you want to connect through. 2. Add these 2 lines to /etc/ssh/sshd_config: AllowTcpForwarding yes GatewayPorts yes 3. Restart sshd (service ssh restart), or restart the server. 4. Connect to the server setting a dynamic port forward. On linux or Mac, this is just "ssh -D 8000 user@domain.com". On Windows, putty lets you set a dynamic port forward. 5. Personally I use Chrome for my real browsing, and then use Firefox for the proxy since it allows configuring a proxy for the browser only rather than the entire operating system. You just set the SOCKS proxy under advanced networking settings (host 127.0.0.1, port 8000). 6. If you want all internet traffic to go over the proxy rather than just Firefox, this is easy on Mac through the Network Preferences panel. I'm not able to comment on linux/Windows in this regard.

mahouse 11y ago
As far as I know, that leads to terrible performance.
- ultramancool 11y ago
  It actually leads to much better performance than using someone else's home connection. Any VPN or proxy will have some performance penalty associated with it.
ultramancool 11y ago
A few extra things to add: 1) If you want everything, UDP data, non-SOCKS supporting apps, etc to go through, you're better off configuring an OpenVPN server. It takes some extra effort, but this allows it to work easily on mobile platforms and stuff too. 2) If you want to use this from a restricted network, use port 443 (for OpenVPN or SSH). 3) If your network is extremely strict, use stunnel to make it look exactly like standard SSL web traffic. I've written a helper app for people who need this on Android, https://github.com/ultramancool/Stunneler https://github.com/ultramancool/Stunneler