edgewalker VS innernet

Can’t say I approve of his endorsement of OpenVPN when Streisand and Algo exist, but I may be biased, having written my own self-hosted VPN script, Edgewalker (https://github.com/fazalmajid/edgewalker).

I’m not sure of the point of the book, generally people learn from doing, when they have a pressing need that provides the motivation, rather than learn new skills in advance “on spec”, so what’s really needed is a reference or wiki, or something like StackOverflow with better curation.

I use a modified version of my Edgewalker script to do this between my OpenBSD router at home an an OpenBSD VPS in the cloud that holds the fixed IP. Works like a charm, but many services blacklist cloud IPs, e.g. streaming or Wikipedia won’t let you make edits, so my client devices still go direct through CGNAT to avoid this.

My home network is behind CGNAT so I use WG to a cloud VPS using a variant of my Edgewalker DIY VPN script to get a static IP.

You are better off renting a cloud server and rolling your own, e.g. using Streisand, Algo or my own Edgewalker

VPN providers are untrustworthy. You’re better off getting a VPS from a cloud provider and running your own, e.g. my Edgewalker.

If you just want to run a WireGuard server, have a look at Edgewalker. Warp does more, like routing through CloudFlare’s network so the source IP as seen by the server varies by server location. It was a good way to defeat Netflix geoblocking at one time, sadly no longer.

You can use WireGuard over the CGNAT connection to a cloud server (e.g. using my Edgewalker) to get essentially a poor man's static IP. I did it on my UK Three 5G connection and still do on my non-static IP fiber broadband connection.

I wrote Edgewalker, a script to quickly setup an IPsec/IKEv2/MOBIKE and Wireguard server on top of any OpenBSD instance, along with QR code based setup for iDevices and Wireguard. It doesn't have integration with enterprise directory services and SSO, and there seems to be an entire ecosystem of commercial Wireguard wrappers that offer that and little else.

Don't trust VPN services. Just build your own, e.g. using my Edgewalker script or something like Argo or Streisand.

You could use my Edgewalker as a starting point. Is the web panel for yourself or for your friends?

Innernet is a barebone alternative. https://github.com/tonarino/innernet

Very relatable! At first, I struggled for days trying to make Netmaker or Innernet functional for my personal home server (Raspberry Pi behind multiple routers). But then I stumbled upon ZeroTier, and everything worked seamlessly within a couple of hours. Tailscale was actually the next one on my list because I heard many positive things about it over at r/selfhosted (especially about headscale). However, I did not end up testing it after ZeroTier worked.

Not if you are running wireguard without any management client/server like Netmaker or innernet or any of the many others like them.

I use the GCP free instance as my innernet coordination server (Wireguard mesh vpn). Which is extremely low traffic.

Or why not the open source tool innernet? https://github.com/tonarino/innernet

I wonder if this might improve over a more modern transport, if you were using an IPSec VPN.

Wireguard is enabling us to re-think what's possible over a VPN. Here's an example of what I mean. The network stack is based on Wireguard, with https://github.com/tonarino/innernet providing the topology and identity provisioning.

Virtual Private Network: Innernet, MASQ