algo

I used wireguard with a personal VPN [0] set up on DO. Worked great, although I occasionally had to tear down & set up a new server when it was detected. [0] github.com/trailofbits/algo

I say this on every VPN threat and its still the best advice: Just use algo (IPSEC VPN): https://github.com/trailofbits/algo Wireguard is great, but is not supported on many devices, and does not auto provision configuration files for all your devices. Please look into algo, it really is the best solution for 99% of people.

It would properly be safer to use algo. https://github.com/trailofbits/algo

I recently used algo[0] and it worked as advertised, pretty seamless. As someone else stated, the config process is pretty standard procedure so I guess there's not a lot of "improvements" one can do on that side :) [0]: https://github.com/trailofbits/algo

Depending on what you're trying to achieve, running your own can be a good and simple option: https://github.com/jawj/IKEv2-setup https://github.com/trailofbits/algo

If anyone is interested in setting up a VPN with wireguard [0], I'd like to whole-heartedly recommend Algo [1]. It's a set of Ansible scripts that sets up a dual IPSec/wireguard VPN on a VM or other machine. Wireguard itself is already super simple to setup and configure, and Algo makes it even easier by automating most of the surrounding process. I personally used it to setup a VPN a few days ago, and then manually tweaked it a bit to turn it into a site-to-site VPN instead of having it be just for tunneling (fun fact: wireguard works on Vyatta (AKA Ubiquiti) [2], and is currently running flawlessly on my Edgerouter Lite). Seriously, this is amazing software that just works and runs incredibly fast. Huge thanks to Jason and all the contributors to the various projects for their great work. [0]: https://www.wireguard.com/ [1]: https://git

If your intention is to build a secure IPSEC VPN, Algo is highly recommended [0] [0] https://github.com/trailofbits/algo

A do-it-yourself solution is Algo https://github.com/trailofbits/algo Algo has a feature to install ad-blocking for all dns queries.

I'm partial to algo: https://github.com/trailofbits/algo

And people always criticize me for avoiding OpenVPN in AlgoVPN. Here's the entry from my FAQ: OpenVPN does not have out-of-the-box client support on any major desktop or mobile operating system. This introduces user experience issues and requires the user to update and maintain the software themselves. OpenVPN depends on the security of TLS, both the protocol and its implementations, and we simply trust the server less due to past security incidents. source: https://github.com/trailofbits/algo/blob/master/docs/faq.md#... Stop using OpenVPN! Use whatever client ships with your operating system for IPSEC or use Wireguard.

> Algo only supports Ubuntu and *BSD. Algo, also called Algo VPN, is a separate project which is built on-top of Wireguard [0]. Algo claims to support Android [1]. Wireguard works on Arch and Android [2]. Wireguard for Arch has first class support [3]. Wireguard for Android exists in a forked repository [4]. [0] https://github.com/trailofbits/algo [1] https://github.com/trailofbits/algo/blob/master/docs/client-... [2] https://www.wireguard.com/install/ [3] https://wiki.archlinux.org/index.php/WireGuard [4] https://git.zx2c4.com/wireguard-android

What Algo does now seems technically correct (the best kind of correct!) since it essentially says WG is for Android. I've added the issue though, for when more desktop-y clients are officially supported. https://github.com/trailofbits/algo/issues/1068 Thanks!

>Does not install Tor, OpenVPN, or other risky servers Does it call OpenVPN a risky server? Why? Found it https://github.com/trailofbits/algo/blob/master/docs/faq.md#...

Question - are there any guides available to help set up a home-brew router to route all outbound connections through an Algo VPN with exceptions for Netflix/etc.? Something like this (this is for OpenVPN): https://arstechnica.com/gadgets/2017/05/how-to-build-your-ow... I currently have a pfSense router set up with Algo, but I have to disable the IPSec policy whenever I want to use Netflix. (Discussion here: https://github.com/trailofbits/algo/issues/292 - see comments near the bottom.)

Hello! Developer for AlgoVPN here. We have many successful reports of using Azure for AlgoVPN. I would appreciate it very much if you could file an issue and include the full details of what happened, including any communications you received from Microsoft (https://github.com/trailofbits/algo/issues/new). I have contacts at Azure that I can escalate this issue to directly.