383
Using Proton VPN with YouTube now gives me this. (lemmy.ca)
submitted 10 months ago by to c/privacy@lemmy.ca
74 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 10 months ago (7 children)

I have this set up on my router. My wifi is blanket tunneled through a VPN. For annoying sites that restrict access like reddit, my router routes through a specific VPN server that doesn't (yet) get blocked (I don't post/comment/browse, but occasionally find a post that answers a question). That way it works on my whole home network, regardless of device.

Same could be done for YouTube presumably, but maybe a little more complicated (reddit seems to work with a single /32 address).

Plus, it's fun to set up---MikroTik router, Mullvad, and an ARM SBC doing the VPN duties for me, but myriad ways to get it working for other configurations.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 3 points 10 months ago (3 children)

    For reading reddit you can just use a redlib frontend and never get blocked. When I get the "woah there, pardner!" I just take the URL from the /r/ onward and paste it after a frontend URL. Takes 2 seconds.

    Also, setting up a router level VPN is just an OpenWRT config on plenty of routers. Depends on your firmware how many servers you can have listed to bounce between. Otherwise just bounce more per device.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 10 months ago (1 child)

    Yeah, one of the issues I was having with running VPN on router is that you need a somewhat beefy router if you want to use your full bandwidth---my router maxes out at about 90Mbps with WireGuard, even though it can NAT around 1Gbps (which is our service).

    I implemented two workarounds, one was to use my access point as a VPN router since it had a beefier CPU, and the other was to just use an ARM SBC with Linux to handle that task. (I ended up with the latter, as the former ended up maxing out at around 400Mbps, and introduced some additional headaches.)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 10 months ago (2 children)

    I'm doing a crude version of this with a Flint 2 router and Mullvad. Don't enjoy fiddling with my network (and upstream is unreliable for now, making troubleshooting an irritating game of crossing off doubts each time I have issues, rather than learning things better).

    At the moment I just have a guest Wifi that doesn't get VPN'ed for things like Roku devices and such (slowly migrating the home away from stuff like this).

    I appreciate the always-on "blanket" traffic tunneling, a lot. But I'd like a more flexible setup - things like allowing access to Jellyfin from guest Wifi (or similar), site-specific exclusions or other workarounds for when I need to reach a banking site that has predictable VPN complaints, etc.

    Not a fan of just playing house-wide VPN exit whack-a-mole each time myself or someone else experiences an issue, but maybe that's part of the game.

    Know of any good starting points for the flexibility I'm describing? Probably just need to learn LuCI and firewall and VLAN principles?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 10 months ago (1 child)

    I also have an SSID that doesn't get VPN'd, though my DNS is always VPN'd.

    As for accessing JellyFin, etc., I think we have somewhat different setups. My self hosted services are by default accessible without a VPN (SSID is on a VLAN with e.g. 192.168.0.0/24, servers are on 192.168.1.0/24, router routes between them). For the blanket VPN'd SSID I have a routing rule that routes over the main, not VPN, table, so local services can be accessed.

    So: local traffic has a rule to route without VPN, reddit routes with a specific VPN, and general traffic routes with a different VPN.

    There are lots of VLANs involved in my setup, and I'm sure it's overly complicated and has gaping security issues, but it's just a home network and it's kinda fun :(

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •