News for hackers. Stuff that matters.
Re:Ask HN: What do you do with your Raspberry Pi? by guyromm on Monday June 24, 2019 @02:01PM (#20266455)
A client that I'm consulting was being ripped off by a local IT provider with pricing for on-premises servers & MS software. I proceeded to rent cheaper equivalent machines off-site. The IT provider claimed the hardware firewall (Fortigate) was not configurable for site-to-site to the new machines directly (could be, not an expert on those). Therefore, I ended up purchasing several Raspberries and configuring them as OpenVPN routers that opened up the office LAN to said machines. Quite satisfying, as it allowed to break the client out of the proprietry software/hardware/vendor chain at a rather small expense.
Re:Ask HN: What do you do with your Raspberry Pi? by weaksauce on Monday June 24, 2019 @03:46PM (#20267671)
Fortigate is pretty configurable. I’d be really surprised if it couldn’t do site to site or site to client with a little configuration.
Re:Ask HN: What do you do with your Raspberry Pi? by the_angry_angel on Monday June 24, 2019 @04:29PM (#20268115)
You can absolutely configure IPSec tunnels on Fortinet.

Can I ask, do you perform updates and maintenance on these boxes? How do they perform in terms of throughput with openvpn?

Re:Ask HN: What do you do with your Raspberry Pi? by e12e on Tuesday June 25, 2019 @02:47PM (#20277510)
I'd be more interested if wireguard is an option, and how it performs. Since they're already on linux/oss.
Re:Ask HN: What do you do with your Raspberry Pi? by the_angry_angel on Thursday June 27, 2019 @09:04AM (#20293989)
IPSec is pretty much the standard interop still - pretty much everything talks it Cisco, Juniper, pfSense, Fortinet, etc. You name it I’d be surprised if it didn’t have support.

I’d love to see wireguard implemented in the networking world, but I think it may take some time to get there :/