edgewalker VS cryptsetup

Can’t say I approve of his endorsement of OpenVPN when Streisand and Algo exist, but I may be biased, having written my own self-hosted VPN script, Edgewalker (https://github.com/fazalmajid/edgewalker).

I’m not sure of the point of the book, generally people learn from doing, when they have a pressing need that provides the motivation, rather than learn new skills in advance “on spec”, so what’s really needed is a reference or wiki, or something like StackOverflow with better curation.

I use a modified version of my Edgewalker script to do this between my OpenBSD router at home an an OpenBSD VPS in the cloud that holds the fixed IP. Works like a charm, but many services blacklist cloud IPs, e.g. streaming or Wikipedia won’t let you make edits, so my client devices still go direct through CGNAT to avoid this.

My home network is behind CGNAT so I use WG to a cloud VPS using a variant of my Edgewalker DIY VPN script to get a static IP.

You are better off renting a cloud server and rolling your own, e.g. using Streisand, Algo or my own Edgewalker

VPN providers are untrustworthy. You’re better off getting a VPS from a cloud provider and running your own, e.g. my Edgewalker.

If you just want to run a WireGuard server, have a look at Edgewalker. Warp does more, like routing through CloudFlare’s network so the source IP as seen by the server varies by server location. It was a good way to defeat Netflix geoblocking at one time, sadly no longer.

You can use WireGuard over the CGNAT connection to a cloud server (e.g. using my Edgewalker) to get essentially a poor man's static IP. I did it on my UK Three 5G connection and still do on my non-static IP fiber broadband connection.

I wrote Edgewalker, a script to quickly setup an IPsec/IKEv2/MOBIKE and Wireguard server on top of any OpenBSD instance, along with QR code based setup for iDevices and Wireguard. It doesn't have integration with enterprise directory services and SSO, and there seems to be an entire ecosystem of commercial Wireguard wrappers that offer that and little else.

Don't trust VPN services. Just build your own, e.g. using my Edgewalker script or something like Argo or Streisand.

You could use my Edgewalker as a starting point. Is the web panel for yourself or for your friends?

Overall, “dm-crypt” is a device-mapper target (https://elixir.bootlin.com/linux/v6.5-rc3/source/drivers/md/dm-crypt.c#L3689) supported from kernel version 2.6.4 (https://elixir.bootlin.com/linux/v2.6.4/source/drivers/md/dm-crypt.c). It is responsible for transparent (aka real-time/on-the-fly encryption) block device encryption while using the kernel crypto API (https://gitlab.com/cryptsetup/cryptsetup/-/wikis/DMCrypt) .

For more information check section 5.21 Why is there no "Nuke-Option"? of LUKS FAQ.

Please read the section 5.21 Why is there no "Nuke-Option"? of the LUKS FAQ for more information (eg. when a "wipe" option could actually harm you).

Check out the section 5.2 and 5.18 of the LUKS FAQ for more information.

See section 5.2 of LUKS FAQ and Key disclosure law all over the world.

References: - Frequently Asked Questions Cryptsetup/LUKS - Question 2.15: "neither dm-crypt nor LUKS1 stores partition size and LUKS2 uses a generic "whole device" size as default." - Stackexchange: What does cryptsetup resize do if LUKS doesn't store partition size?

LUKS is probably what you want