• 0 Posts
  • 520 Comments
Joined 2 years ago
cake
Cake day: February 1st, 2024

help-circle
  • Yeah, one of the issues I was having with running VPN on router is that you need a somewhat beefy router if you want to use your full bandwidth—my router maxes out at about 90Mbps with WireGuard, even though it can NAT around 1Gbps (which is our service).

    I implemented two workarounds, one was to use my access point as a VPN router since it had a beefier CPU, and the other was to just use an ARM SBC with Linux to handle that task. (I ended up with the latter, as the former ended up maxing out at around 400Mbps, and introduced some additional headaches.)


  • I also have an SSID that doesn’t get VPN’d, though my DNS is always VPN’d.

    As for accessing JellyFin, etc., I think we have somewhat different setups. My self hosted services are by default accessible without a VPN (SSID is on a VLAN with e.g. 192.168.0.0/24, servers are on 192.168.1.0/24, router routes between them). For the blanket VPN’d SSID I have a routing rule that routes over the main, not VPN, table, so local services can be accessed.

    So: local traffic has a rule to route without VPN, reddit routes with a specific VPN, and general traffic routes with a different VPN.

    There are lots of VLANs involved in my setup, and I’m sure it’s overly complicated and has gaping security issues, but it’s just a home network and it’s kinda fun :(


  • I have this set up on my router. My wifi is blanket tunneled through a VPN. For annoying sites that restrict access like reddit, my router routes through a specific VPN server that doesn’t (yet) get blocked (I don’t post/comment/browse, but occasionally find a post that answers a question). That way it works on my whole home network, regardless of device.

    Same could be done for YouTube presumably, but maybe a little more complicated (reddit seems to work with a single /32 address).

    Plus, it’s fun to set up—MikroTik router, Mullvad, and an ARM SBC doing the VPN duties for me, but myriad ways to get it working for other configurations.







  • nc is useful. For example: if you have a disk image downloaded on computer A but want to write it to an SD card on computer B, you can run something like

    user@B: nc -l 1234 | pv > /dev/$sdcard

    And

    user@A: nc B.local 1234 < /path/to/image.img

    (I may have syntax messed up–also don’t transfer sensitive information this way!)

    Similarly, no need to store a compressed file if you’re going to uncompress it as soon as you download it—just pipe wget or curl to tar or xz or whatever.

    I once burnt a CD of a Linux ISO by wgeting directly to cdrecord. It was actually kinda useful because it was on a laptop that was running out of HD space. Luckily the University Internet was fast and the CD was successfully burnt :)




  • Maybe not a service in the typical sense, but setting up your router+server to route your home network traffic through a VPN is a fun project.

    My router (MikroTik) supports WireGuard, so I can use it with Mullvad for the whole house—but wg is demanding and it’s a slow router, so while it can NAT at ~1Gbps, it can’t do WireGuard at more than ~90Mbps. So, I set up WireGuard/Mullvad on a little SBC with a fast processor, and have my router use that instead. Using policy based routing and/or mangling, I can have different VLANs/subnets/individual hosts selectively routed through the VPN.

    It’s a fun exercise, not sure I implemented it in a smart way, but it works :)









  • Daniel Radcliffe used this to his advantage—same outfit, and the paparazzi stopped bothering him:

    It was three or four months. Because I was doing a play in London and every night there was paparazzi outside. And I suddenly realized after like after I just had just been lazy and not changed my clothes for a few days, that they were not there. And I realized it’s probably because I’m wearing the same thing so it all looks like photos from the same day. So I was like ‘I’ll just continue wearing this.’ And they never came back because it all looks like the same picture in front of the same door.