31
Alternative to NordVPN Meshnet? (lemmy.ml)
submitted 1 year ago by to c/selfhosted@lemmy.world
25 comments fedilink hide all child comments
 

Hello everyone, hope you are doing great.

I am not sure if my question goes here, but this was my best guess. Apologies if I am wrong.

So, I have been using the mesh network offered by NordVPN alongside with their VPN subscription to sync some folders between my phone (Android) and my laptop (Linux Mint). This was great because I remember not being able to use Tailscale and VPN at the same time in the past, at least not on my phone.

Now they are dropping Meshnet support in December, so I am trying to figure out if there's any way I can still run NordVPN and a Meshnet, or if I have to discard one.

If you know of any alternative, please let me know!

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 year ago* (1 child)

This is a decent idea. You can configure the VPS to be an exit node on the Tailnet, and configure the clients to use it as their exit node. Then you'd just need to configure some nftables rules to masquerade (source NAT) to the VPN network interface.

Having said that... At that point, why do you need the other VPN? You can just use the VPS as your exit node.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    I do some pretty crazy stuff honestly because I’m really into privacy. Since I’m stuck using a VPS I usually put it in the same country that I’m currently in so that for my end devices it appears I’m just accessing some corporate VPN.

    On the VPN I actually have two in-country double hop VPN tunnels. I then have two more double hop VPN tunnels that first go into some random country, then finally to Switzerland (because I love their privacy laws). Those two tunnels are set as two equal cost multipath hops for my Tailscale clients, then they get stuffed into the first set of in-country tunnels.

    Iinject random delays to protect against timing attacks too, and on top of all that I run Blocky with an insane amount of blocklists and that traffic also spread between all the tunnels over DoT.

    It’s a lot of overkill but I absolutely love having no ads, strong data protection and a higher level of freedom of speech.

  • permalink
  • fedilink
  • source
  • parent