Hacker News Reader

Comment by gmac | Hacker News Reader

I have taken to sending all traffic through my own IKEv2 VPN hosted in Germany.

I have a script to automate setup [1], which I will be updating shortly to use Let's Encrypt and to generate an on-demand Mac/iOS configuration profile that keeps one constantly connected.

I have half a mind to set up some semi-commercial service on the basis of complete transparency and the motivation to avoid the Investigatory Powers Act (most existing VPN services seem to come across as very shady).

[1] https://github.com/jawj/IKEv2-setup

View on HN

In a similar line, I've been using 'streisand' for the past little while - might be worth looking at for inspiration if nothing else.

https://github.com/jlund/streisand

What makes you think Germany is a better exit point for your traffic?

https://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_d...

Much more comprehensive German version: https://de.wikipedia.org/wiki/Artikel_10-Gesetz#.C3.9Cbermit...

What is a good country to host an end-point in within a reasonable distance of the UK?

>What is a good country to host an end-point in within a reasonable distance of the UK?

Iceland.

Wherever it is, the Bad Guys will already be rife there, marking you out as a potential Bad Guy too, by association.

What does this do in your configuration? i.e. why 10.10.10.0/24?

    VPNIPPOOL="10.10.10.0/24"

It defines the IP range of the devices on the VPN to be a subset of the special/reserved "private network" range [0].

More specifically it says that the VPN IP's are over the range of 10.10.10.0 to 10.10.10.255. This can be calculated from taking the binary representation of the specified IP and 'fixing' the first 24 (in this case) bits, the range of possible addresses is the range over which the last 8 (in this case) bits can vary.

It is common to also see a broadcast address, gateway, and network mask specified.

[0] https://en.wikipedia.org/wiki/IPv4#Special-use_addresses

Reply on news.ycombinator.com