Not just one -- servers in 175 (and growing) locations spread around the world, and the app will always use the closest one to you. That's arguably a lot more important that what protocol it uses, and is not something you could easily DIY.
I was lucky to find small paid VPN provider, that doesn't do marketing, pay for referral and stuff, and I'm sticking to it.
In this case, I agree that a single VPS is usually enough for most but never underestimate the market power of making things simpler and faster.
I'd say that even the known unknown that ips and networks change routinely should make it a headache to maintain.
Once you get your script to work, you’d have to wait minutes for the VPN to spin up in a new region.
Check out algo: https://github.com/trailofbits/algo
I think you could bake your configuration into a custom image, so it would be fast to get a VM started (about 30 secs on GCE, not sure about EC2).
If you use stopped instances, it's even faster.
(I work at GCP so know more about GCE than EC2)
(Not implying anything, just providing a discussion point.)
Even if you change residences, you'll typically be in the same state. Even if you change states, you can just set it up again in, what, super conservatively, under an hour (you've already done it once so fewer missteps).
I'd disagree. Many VPN protocols suck even if the gateway is in-house. I guess there's a reason they introduced that with Wireguard specifically.
https://www.stavros.io/posts/how-to-configure-wireguard/
It's actually very easy to set up, I don't know why the official docs make it seem super hard.
Might have to set this up again!
Not sure what you mean. Algo has no relationship to WireGuard; it's basically a customized StrongSwan setup under the hood, which utilizes IKEv2 (not WireGuard) as the transport.
Could be mistaken though .. not sure
It could be the different routing.
Your ISP's routing might be sub-optimal to certain destinations. After all, it chooses routes based (at least in part) on cost, not performance.
There are commercial products that do this sort of tunneling (among other things) to lower routing latencies.
In short, because they can and they're assholes.
Just search through HN for any discussion of net neutrality.
When coupled with an DNS based ad blocker Wireguard can actually make your internet faster than when not using it.
More so on Android than iOS and more so on mobile than fixed, but still feels so much smoother.
you can even only forward the DNS requests and not the rest of the data so your home upload speed won't become your bottleneck.
Confluence as in the Atlassian software? What do you use it for at home?
The only thing I was never able to get working was the IPv6 support. Oh well...
To make split tunneling work in WireGuard I changed AllowedIPs = 0.0.0.0/0 in the config file into: AllowedIPs = 92.13.14.15/32 10.192.122.0/24
where 10.192.122.0/24 is the subnet of my tunnel, and 92.13.14.15/32 is the ip address of my home computer
this works on iOS and macos for me
https://www.ckn.io/blog/2017/11/14/wireguard-vpn-typical-set...
Then you'd just need to use the iOS app, I hope?
Disclosure. It is my day job
You can go on the wait-list for WARP+ which sounds like it’ll route everything over the VPN.
So basically Cloudflare created an app with Cloudflare branding and set up a Wireguard server for everyone. No bad, but just check out the original:
https://www.wireguard.com
While I am not a big fan of VPNs in general, I have to admit, that Wireguard performs exceptionally well. I tested it a week ago and the added latency is pretty much just the network latency and the bandwidth loss is minimal (so small I couldn't even measure it reliably). What I found most interesting, was that there were some use-cases when the network with Wireguard performed even better than without it (probably related to congestion control).