https://www.just99.com/products/fastestvpn
Take 10% off with coupon code NEWOFF

/Tom

• Kill Switch - When activated, it automatically disconnects your device from the internet if your VPN connection is lost, helping to keep your device and private information private.

• Split Tunnelling - Choose which traffic uses a VPN connection to help keep your sensitive data away from prying eyes

• Compromised Network Detection - Alerts you to secure your connection if you connect to a compromised network

• Support 24x74: Have questions or need help? Member Services & Support is here to help you via phone and online chat.

Link

*This offer starts on 01/05/2023 and expires on 01/12/2023. Automatically renews at $49.99/year after the first year. Terms apply.

Resource wise, I don’t need much. Below
are the minimums:

• 256MB RAM
• 10GB disk
• 250GB traffic
• 100Mb b/w
• 1x IPv4

I’d like to pay between £10-£15 a year for this spec, and of course would be happy to pay yearly.

Also interested in a UK-based storage VPS with 500GB or more storage, again off Clouvider/OVH network.

https://www.namecheap.com/vpn/

1 USD/month for 12 months, renewal at around 3 USD/month

1.88 USD/month for 36 months

WireGuard is an exciting, new, extremely simple VPN system that uses state-of-the-art cryptography. Its Linux implementation runs in the kernel, which provides a significant performance boost compared to traditional userspace VPN implementations

The WireGuard kernel module is great, but sometimes you might not be able to install new kernel modules. One example scenario is on a VPS that uses OpenVZ or LXC. For these cases, we can use wireguard-go, a userspace implementation of WireGuard. This is the same implementation used on MacOS, Windows, and the WireGuard mobile apps. This implementation is slower than the kernel module, but still plenty fast.

This post focuses on Debian, however the instructions should mostly work on other Linux distros too.

Install WireGuard Tools

We need to install the WireGuard tools (wg-quick). On Debian, you can run this as root:

echo "deb http://deb.debian.org/debian/ unstable main" > /etc/apt/sources.list.d/unstable.list
printf 'Package: *\nPin: release a=unstable\nPin-Priority: 90\n' > /etc/apt/preferences.d/limit-unstable
apt update
apt install wireguard-tools --no-install-recommends

(see the WireGuard site for instructions if you're not on Debian)

Install Go

Unfortunately, since wireguard-go is not packaged for Debian, we need to compile it ourselves. To compile it, we first need to install the latest version of the Go programming language (currently version 1.13.4).

cd /tmp
wget https://dl.google.com/go/go1.13.4.linux-amd64.tar.gz
tar zvxf go1.13.4.linux-amd64.tar.gz
sudo mv go /opt/go1.13.4
sudo ln -s /opt/go1.13.4/bin/go /usr/local/bin/go

Now, running go version should show the version number.

Compile wireguard-go

Now that we've got Go, we can download and compile wireguard-go. Download the latest release version:

cd /usr/local/src
wget https://git.zx2c4.com/wireguard-go/snapshot/wireguard-go-0.0.20191012.tar.xz
tar xvf wireguard-go-0.0.20191012.tar.xz
cd wireguard-go-0.0.20191012

If you are on a system with limited RAM (256 MB or lower), which you probably are if you're on this forum, you will need to do a small tweak to the wireguard-go code to make it use less RAM. Open device/queueconstants_default.go and replace this:

MaxSegmentSize             = (1 << 16) - 1 // largest possible UDP datagram
PreallocatedBuffersPerPool = 0 // Disable and allow for infinite memory growth

With these values (taken from device/queueconstants_ios.go):

MaxSegmentSize             = 1700
PreallocatedBuffersPerPool = 1024

This will make it use a fixed amount of RAM (~20 MB max), rather than allowing memory usage to grow infinitely.

Now we can compile it:

make
# "Install" it
sudo cp wireguard-go /usr/local/bin

Running wireguard-go --version should work and show the version number.

If you have multiple VPSes that use the same OS version and architecture (eg. Debian 10, 64-bit), you can compile it on one of them and then just copy the wireguard-go binary to all the others.

Configuration

wg0.conf

You'll need to configure /etc/wireguard/wg0.conf to contain the configuration for your peer. This post won't go into significant detail about this; please refer to another general WireGuard guide (like this one) for more details. The basic jist is that you need to run:

wg genkey | tee privatekey | wg pubkey > publickey

to generate a public/private key pair for each peer, then configure the [Interface] with the private key for the peer, and a [Peer] section for each peer that can connect to it.

Your wg0.conf should end up looking something like:

[Interface] 
Address = 10.123.0.2
PrivateKey = 12345678912345678912345678912345678912345678
ListenPort = 51820

[Peer] 
PublicKey = 987654321987654321987654321987654321987654321
AllowedIPs = 10.123.0.1/32
Endpoint = 198.51.100.1:51820

systemd

We need to modify the systemd unit to pass the WG_I_PREFER_BUGGY_USERSPACE_TO_POLISHED_KMOD flag to wireguard-go, to allow it to run on Linux. Open /lib/systemd/system/wg-quick@.service, find:

Environment=WG_ENDPOINT_RESOLUTION_RETRIES=infinity

and add this line directly below:

Environment=WG_I_PREFER_BUGGY_USERSPACE_TO_POLISHED_KMOD=1

Finally, enable and start the systemd service:

systemctl enable wg-quick@wg0
systemctl start wg-quick@wg0

Enabling the systemd service will connect the VPN on boot, and starting the systemd service will connect it right now.

You're Done

Now, everything should be working! You can check the status of wg-quick by running systemctl status wg-quick@wg0, which should return something like:

● wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0 
   Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled; vendor preset: enabled) 
   Active: active (exited) since Mon 2019-07-01 06:30:30 UTC; 1 day 22h ago 

Running wg will give you a list of all the peers, and some details about them:

interface: wg0
  public key: 987654321987654321987654321987654321987654321
  private key: (hidden)
  listening port: 38917

peer: 987654321987654321987654321987654321987654321
  endpoint: 198.51.100.1:51820
  allowed ips: 10.123.0.1/32
  latest handshake: 1 day, 22 hours, 59 minutes, 34 seconds ago
  transfer: 2.75 KiB received, 2.83 KiB sent

Note this is a "lifetime" deal, but at this price, even for 1 year, 5 devices, a good deal..

I'm not associated with them, speeds were quite good when I used it.

Here is a review I found on duckduckgo https://vpnpro.com/vpn-reviews/seed4-me-vpn-review/

This guide should be unreadable since I am bad in all Language. I just hope my experience worth 2 cents.

What is AdguardHome?

AdguardHome is a alternative of pi hole. If you dont know what is pi-hole, google it.

What is OpenVPN?

Openvpn is a VPN

My server: 256MB from @mrvm

1. install AdguardHome, too simple,skip. Hints : I use [ipv6]:3000 to complete the install process
2. Encryption settings for AdguadHome. Hints : you can get a let's encrypt cert very easy with acme.sh

3. config Adguardhome's Adguardhome.yaml (127.0.0.1 -> your internal IP address), Like that

   dns:
   bind_host: your internal IP address

4. set up proxy from mrvm clients panel. (That domain forwarding bottom),this action give you a Adguard Home control panel

5. install openvpn or any other vpns then point the dns to your internal IP

my suggestion is bash a script

Now, you get a ad-free VPN and a DNS over https.

Is it too short?

From what I can tell, VPN providers seem to be evading the blocks by getting access to new IPv6 blocks from nondescript ASNs. Could I simply just register a new IPv6 block and RIPE/APNIC ASN and BGP peer with it - then run a VPN or Tunnelbroker of sorts and successfully access these Netflix libraries?

https://techcrunch.com/2019/12/19/ghosteyr-midnight/

Quote from the article (this is also the crux of the Techcrunch article, to save you the trouble of clicking and veering off of LES)

"Midnight will block ads and data trackers in email clients like Microsoft Outlook, entertainment services like Spotify and any other desktop app — including web browsers that don’t support the Ghostery extension. You’ll also be able to see which apps are trying to track you and customize which apps get blocked or whitelisted.

In addition, Midnight includes a virtual private network (VPN) to encrypt and anonymize your online activity. Tillman said that many Ghostery users already use a VPN, but it made sense to build one for Midnight because “we want our entire ecosystem to be integrated.”

I've used the ghostery add on for browsers in the past- runs iffy on Safari but okay on Firefox. Thinking of giving it a try. Any of you have thoughts on Ghostery/ have you used it?

Interesting way used to catch them, using the Akamai header.

Only thing left from the article would be a portscan proving that a big percentage of the listed hosts are webcams, home routers and other insecure IoT stuff. They use a backconnect to route traffic trough compromised hosts, this is common practice in the VPN industry.

I'm of course biased, but think twice before supporting with your wallet this kind of scum.

Disclaimer: This is not a thread to discuss whether a VPN is secure/useful/makes you anonymous/ or whatnot.