[Discuss] Request for possible topic for next LINUX Group Meeting

[Craig Miller]

Hi Murray,

Mark brings up some excellent points. But my answer is different.

If you want to "travel" with your computers, and have them connect back 
to your internal LAN, then running WireGuard on an OpenWrt router is an 
excellent solution. I do a modified version of this, only I use a travel 
router (running Wireguard) to talk to my home router (running 
Wireguard). This means that any devices connected to the travel router 
don't need to be individually configured for wireguard. I have an 
explanation of how I did this here:

http://www.makikiweb.com/ipv6/wireguard_on_openwrt.html

I agree with Mark, running Wireguard within your house, beyond just 
testing, is going to be more trouble that it is worth.

Craig...

On 9/26/20 6:01 PM, Murray Strome wrote:
> Hi Craig and Jean,
>
> Thanks for the links.
>
> I have difficulty in seeing how $85/year and from what I read about 
> it, to be effective, you would need at least two VPN accounts for 
> vpnrotator to offer any extra protection.
>
> Unanswered: Is there any point in installing Wireguard server on the 
> OpenWRT router and client on the computers on my LAN?
>
> Murray
>
>
> On 2020-09-26 1:40 p.m., Craig Miller wrote:
>> Hi Murray,
>>
>> There are a couple of VPN providers which support Wireguard. Because 
>> of my IPv6 bias, I would suggest you look at:
>>
>> https://ungleich.ch/ipv6/vpn/
>>
>> They will give you a routable /48 (65,000 subnets).
>>
>> Craig...
>>
>> On 9/26/20 9:26 AM, Jean Taggart wrote:
>>> Hello all.
>>>
>>> I use this for my work and it might be of interest. Not the cheapest 
>>> solution because of the cost of vpn accounts, but great for 
>>> isolation and geolocation evasion.
>>>
>>> https://github.com/malwareinfosec/vpnrotator
>>>
>>>
>>>
>>> Sent from my iPhone
>>>
>>>> On Sep 26, 2020, at 7:46 AM, Murray Strome <wmstrome at shaw.ca> wrote:
>>>>
>>>> Most of you are probably very familiar with VPNs and Wireguard. 
>>>> Craig has touched upon some of these in some of his OpenWRT and 
>>>> other presentations. However, if anyone feels he/she is able to do 
>>>> so, I would be very interested in more details on the topic. I am 
>>>> not sure if it would be of interest to others or not.
>>>>
>>>> From what I have read, usually a VPN is set up on an external 
>>>> server. The advice I have seen is to avoid the free ones. I don't 
>>>> think I would want nor need to do that.
>>>>
>>>> Wireguard looks interesting.  What, if any protection from hackers 
>>>> etc. if I were to set up a Wireguard server on my openWRT router? 
>>>> Is it something I should consider doing, and what would I have to 
>>>> do with all of my devices? I doubt that things like my smartplugs 
>>>> are even compatible, but I don't know for certain.
>>>>
>>>> More discussion about things like setting up different internal 
>>>> sub-networks, and things like DMZ would be valuable inclusions for me.
>>>>
>>>> Thanks for considering this.
>>>>
>>>> Murray 
>
-- 
IPv6 is the future
ipv6-net.blogspot.ca