https://blog.orhun.dev/cant-trust-any-vpn/

[utterances-bot]

Can't trust any VPN these days - Orhun's Blog

FOSS • Linux • Programming

https://blog.orhun.dev/cant-trust-any-vpn/

[h1alexbel]

@orhun Thanks for this blog post. I'm actually using the similar to OpenVPN tool - Outline. It simply runs in Docker container, and can automatically reconnect if something went wrong. Though I didn't face with the problems you describe.

[orhun]

Hello! Outline looks quite good actually, I might give it a try. OpenVPN seems a bit problematic these days (as you can tell from the post :D) Thanks for sharing!

[erayaydin]

Thanks for the post. I also suggest using WireGuard. Additionally, wg-easy is a very simple way to deploy it. You can even configure it to route only specific applications through the VPN, such as 'use this VPN for only this process.' WireGuard also has kernel-level support.

[Xetera]

FYI wg-easy is still somewhat problematic as a workaround though. Mobile carriers like Turkcell drop outgoing wireguard handshakes on well-known ports (51820) so using Discord with mobile data can be kind of annoying.
Even after changing to a different port my connection is somewhat spotty, but maybe that's a wg-tunnel problem on my phone. IPSec is probably a better option but I haven't messed with that yet.

[ghaem51]

Nice write-up! When I was in Iran, I used V2Ray, which helps create a more secure connection to your VPS. It provides different methods for securing the connection and is particularly useful for bypassing multiple layers of traffic filtering to reach your host. If you're looking for an easier way to set it up, you can use [Hiddify][https://github.com/hiddify/Hiddify-Manager] Server Manager, which simplifies the configuration process on your server.

[y5]

Not sure how much anonymity matters compared to avoiding certain blocks, Perfect Privacy has been around the block for many years and they have some cool blog posts, e.g. why they can't offer WireGuard, how they set up their servers (first with RAM-only I believe), some stuff about DNS over TLS. Definitely worth a read