Hacker News Reader

Comment by pshirshov | Hacker News Reader

I donwt know any single VPN provider apart from Mullvad with proper v6 implementation.

mullvad is the only normie vpn worth using. worth every penny

I've yet to see any reason why mullvad is supposed to be particularly trustworthy compared to the alternatives. They aren't doing anything wrong in particular but there's nothing that stands out to me as particularly making them trustworthy

ram only servers, accepting cash, probably other things.

its the only vpn provider (of a handful of not yt sponsor garbo tier) ive tried that saturates my down and uplink completely (1gbit symmetrical!)

Thanks for the tip!

Even Mullvad give out ULA addresses. You can hardly call that a proper implementation :(

In Context of a VPN Provider like Mullvad a ULA is required. One of the rare cases where ipv6 nat is a thing.

NAT might be a thing in Mullvad's case, but there's no link between that and needing ULA.

Explain because as far as i can tell, to make it impossible for i.e. google to tell me apart from another mullvad user, me and that other user must share the same IP adress.

You don't need to use ULA addresses to use NAT. You can use any GUA prefix too (preferably one you own or are assigned in some way, rather than squatting on one, to avoid the risk of clashing with someone else).

Well it's more private. Also there's only one proper IPv6 implementation (using GUAs) and most people.cant get one

It's exactly as private as doing the same service with a GUA prefix. Just get a PI block and pick a /64 from it to use instead of whatever ULA prefix they picked at the moment.

Do you know if it's supported using OS-native VPN client implementations as well (i.e. Wirecard, IKEv2, or maybe OpenVPN), or only using their official client?

You could run wireguard thru CLI directly instead of jumping through the mullvad app itself

You can download the WireGuard/OpenVPN config files all at once in their web interface.

I've seen that, but I just wasn't sure if that also works for IPv6.

According to their own docs, it seems to work for at least OpenVPN:

> Those not using the Mullvad client program can just add the directive "tun-ipv6" to their OpenVPN configuration file.

Yas. When you download the config files you can choose between IPv4 and IPv6

Pretty sure i've had ipv6 on Proton. How do I check if it's "proper"?

Solid dev + OSS ecosystem + Flat rates

I'm satisfied!

$5/month vs eg $2/month with a long running sub with e.g. PIA (Chinese owners) though... I wish mullvad provided long running subs with better prices then what they currently provide.

Would love a source for Chinese owners of PIA. Last I knew, it was Israeli owners.

-source, former employee.

You are correct: "Kape Technologies is a United Kingdom-based cybersecurity software company. Kape owns VPN services and cybersecurity tools, including CyberGhost, Private Internet Access (PIA), ZenMate, ExpressVPN, and Intego."

https://en.m.wikipedia.org/wiki/Teddy_Sagi#Kape_Technologies

Yes, I missremembered. It was bought by Isreali after all. I dont think my point is affected by this however.

And I feel quite illiterate right now. I somehow managed to misread both your comments twice

Also Kape was formerly known as Crossrider and had alleged ties to shady apps in the past.

https://mronline.org/2024/09/13/exposed-how-israeli-spies-co...

"sub" as in subsidized by your data eh?

Buy a year voucher off Amazon, comes to $4.75/mo. Or be lucky like me and buy the 6 month for $29 from them and receive a 12 month voucher instead when they grab the wrong one.

SwissVPN provides a /64.

Do they allow inbound ports?

Yes, all inbound ports are open.

Reply on news.ycombinator.com