Hacker News Reader

You can always put a vpn before mac eg using some Cisco or Linux based. Although it is obviously more complicated and expensive.

View on HN

If this Apple firewall nonsense sticks I can see a market emerge for self-contained USB ethernet/wifi dongles that incorporate a built-in router/firewall with VPN functionality. You could build something like this yourself using an rPI or something similar, but my feeling is there could be a sizable market for a small & cheap off-the-shelf device you just plug in.

Every router I have seen in the past decade has had at least basic VPN functionality built in (L2TP/PPTP).

Yes, but it's only useful when connected to your home LAN where you have control over the router, and even then only if you know how to set it up.

Edit: also not sure if the router I got from my ISP (which I don't use, but I guess 99% of their other customers do since it is non-trivial to replace without losing IPTV) would allow me to configure it as a VPN gateway. Pretty sure it won't considering they try to lock it down as much as possible.

How does it work with IPv6, where there is no (need for) LAN (unless maybe if you're a huge company) ?

I'd do the reverse, block any internet access unless it's over a VPN gateway.

Additionally, block anything by default that wasn't looked up over my DNS proxy and/or uses HTTPS without SNI...

Reply on news.ycombinator.com