News for hackers. Stuff that matters.
Re:Tailscale Has Partnered with Mullvad by ignoramous on Thursday September 07, 2023 @06:06PM (#37426258)
VPNs can, if they can be routed into via SOCKS or Http Connect gateways, for example. Generally, VPNs (L2/L3) can stoop to the level of proxies (L4) but not vice versa (at least not as cleanly).
Re:Tailscale Has Partnered with Mullvad by lxgr on Thursday September 07, 2023 @06:12PM (#37426319)
Sure, you can bridge in either direction (using e.g. this [1] excellent Wireguard-to-SOCKS adapter), but in my view, if you have bytestream semantics, you're often better off using a bytestream-oriented proxying protocol (like SOCKS, SSH or HTTP) and vice versa.

These bridges/adapters do have their applications though – I have a home router that supports Wireguard natively, but not any of the higher-level protocols; this lets me use my per-tab approach with it.

[1] https://github.com/pufferffish/wireproxy

Re:Tailscale Has Partnered with Mullvad by dizhn on Friday September 08, 2023 @01:36AM (#37429779)
I don't really get the value proposition of wireproxy. Especially since it seems not to be complete yet.

It is trivial to run a socks proxy on one of the peers and have your browser point to that. Both chrome and firefox can do this on demand and for the sites you select.

Re:Tailscale Has Partnered with Mullvad by lxgr on Friday September 08, 2023 @08:25AM (#37432620)
There is no peer capable of running a SOCKS proxy in my scenario. My home router only supports Wireguard.

SOCKS is also usually not encrypted.

Re:Tailscale Has Partnered with Mullvad by dizhn on Saturday September 09, 2023 @08:09AM (#37444402)
I have a docker based proxy running on a vm. (I've tried a bunch of them. They all work fine. None of them are hugely better at the bandwidth levels available to me - around 50-70mbps) The proxy is only listening on the wireguard IP. I have my clients connect to that wireguard peer and use the wireguard IP as the proxy. You can't install a proxy on the remote side? It should be possible seeing that you have to install something anyway. I am not sure about not needing root but it should not be a requirement for a proxy server since all it does is make http requests on your behalf.