bivlked

5 ms·

1.
by bivlked 6mo ago
Been running 2.0 on Russian DPI for a few months - works fine. The old version (1.x) randomized packet headers, but ISPs figured out that random bytes are themselves a fingerprint and started throttling (~3 Mbit on some mobile ISPs here). 2
2.
by bivlked 6mo ago
one thing that bit me with LXC: anything that needs its own kernel module won't work. jails have the same limitation — shared host kernel. ran into this trying to run a VPN server (needs DKMS for a custom wireguard fork) in an LXC cont
3.
by bivlked 6mo ago
I live in a country where ISPs actively block WireGuard through DPI. Regular WireGuard gets fingerprinted and blocked within minutes. AmneziaWG ( https://github.com/amnezia-vpn/amneziawg-go ) is a WireGuard fork that add
4.
Show HN: Amneziawg-installer – DPI-resistant WireGuard VPN in one command(github.com)
2 points by bivlked 6mo ago|4 comments
5.
by bivlked 6mo ago
the commitment to not requiring google play services is what makes this different from most privacy ROMs. the real question is whether the app ecosystem holds - banking apps and 2FA are always the pain point that pushes people back to stock
6.
by bivlked 6mo ago
i've been tempted by NixOS for servers but keep going back to Debian. the reproducibility is amazing in theory, but when you need to debug a DKMS kernel module build at 2am on a VPS, having "just apt install" is worth a lot.
7.
by bivlked 6mo ago
One thing i wish more CLI tools did: non-interactive mode. i build bash tools that have interactive prompts for first-time users, but everything the prompt asks also has a CLI flag. makes scripting and CI/CD so much simpler - you can t
8.
by bivlked 6mo ago
ran into this with UFW + Cloudflare on a VPS. had a rule in UFW that should have been denying a range, but Cloudflare was proxying the request so UFW saw Cloudflare's IP instead of the client's. took me way too long to figure out.
9.
by bivlked 6mo ago
I self-host wireguard on a VPS for this exact reason. $5/mo and i know exactly what's running. the setup takes some effort but after that it's basically zero maintenance. The bigger issue with browser VPNs for me is that they