subspace VS dsnet

Setup Subspace on a container on your EC2 & utilize wireguard to login

Or the equally simple Subspace [1] if you want to stick with self-hosting Wireguard directly.

[1] - The community fork at least. Upstream is no longer updated: https://github.com/subspacecommunity/subspace

https://github.com/subspacecommunity/subspace#setup

I have been using a $5 vps for setting a simple vpn for family. it is super easy to ru your own vpn now. Some sites dont work because they have dumb ip blocklists but most do or give hcaptcha.

Imo,

I would use WireGuard with a popular front-end and install in on a raspberry pi. At least that was my initial idea. At my work we use https://github.com/subspacecommunity/subspace.

I think it's worth knowing how simple and easy it is to set up wireguard when you don't need a web UI or any of that other fluff on there. It's right in entrypoint.sh[1] and some dockerfiles - set up firewall; set up wireguard devices, keys and configs; set up dnsmasq. Three simple steps on linux or openbsd (Not sure if FreeBSD ever got past that integration issue yet)

[1] https://github.com/subspacecommunity/subspace/blob/master/en...

Yes, that is true. But there are projects that can simplify WG's deployment without compromising security like dsnet.

I have a config provided by a VPN provider, which generates the private key as well as the public (I think there's no way to provide a public key for them to use). I'm also using dsnet to generate peer configurations, and that also generates a new priv/pub key pair. The end result is that I have two different private keys, one for each endpoint. This (having multiple pub/priv pairs) is neither bad security[1], nor uncommon, and while it's trivial to have multiple Wireguard configurations running at the same time on Linux I haven't found a way to do this through the mobile app. This is because the app allows only one active Wireguard configuration at a time, and there's no facility for supplying two private keys within one Wireguard config file.

I made this: https://github.com/naggie/dsnet/ -- a simple command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation