VPN's recommendations?
from Brutticus@lemm.ee to privacy@lemmy.ml on 29 Apr 15:38
https://lemm.ee/post/62682895

Hello, all

I’m sorry if there is an FAQ somewhere. My VPN is about enter it’s yearly billing cycle and I thought I would come over here and see if anyone had a better suggestion. I’ve been using IPvanish for the last 10 years and have been pretty satisfied. I picked it by going into the darkweb and seeing what the criminals recommended to each other.

If anyone has other suggestions or tales before I renew, I would love to check it out.

#privacy

threaded - newest

ExcessShiv@lemmy.dbzer0.com on 29 Apr 15:45 next collapse

If you can live without port forwarding, mullvad is another great option.

SincerityIsCool@lemmy.ca on 29 Apr 15:52 next collapse

It’s what I use and it works well for me. It seemed like the best option when I was researching this recently. Plus the icon is cute.

sunzu2@thebrainbin.org on 29 Apr 18:52 collapse

It's all around goat unless you torrent maniac... You can still torrent without port forwarding, just not at high speeds

TauZero@mander.xyz on 29 Apr 22:03 collapse

OVPN is a 1-to-1 feature clone of mullvad (wireguard, multiple device keys, crypto payments/cash in the mail, no usernames/emails, etc.) AND has port forwarding. Switched to them when mullvad sadly closed their ports, no problems since. Can’t live without port forwarding.

sunred@discuss.tchncs.de on 30 Apr 15:10 collapse

+1 for OVPN. I switched to them from Mullvad for the same reason. They are also one of the more trustworthy VPNs in my book ever since they actually won a court case proving that they actually practise what they advertise.

sic_semper_tyrannis@lemmy.today on 29 Apr 15:55 next collapse

IVPN, Mullvad, or Proton. Criminals aren’t necessarily smart, I remember a ghost phone that criminals thought were secure and it was a honeypot. Shoulda used Graphene for free.

sunzu2@thebrainbin.org on 29 Apr 18:51 next collapse

Two these are the goats. Figure out your use case and pick one.

breadguy@kbin.earth on 30 Apr 12:02 next collapse

encrochat?

xela@lemmy.ml on 30 Apr 21:22 collapse

ANOM?

sic_semper_tyrannis@lemmy.today on 01 May 00:06 collapse

That sounds familiar

kobra@lemm.ee on 29 Apr 16:19 next collapse

FWIW I am not enjoying the Proton app experience. I can’t favorite servers so I have to manually search and connect to the location I want each time.

WellTheresYourCobbler@hexbear.net on 29 Apr 16:32 next collapse

Mullvad, and if you need port forwarding like @ExcessShiv@lemmy.dbzer0.com said protonvpn is decent too. Proton executives have had some controversial statements supporting trump though making me wary of them

lowspeedchase@lemmy.dbzer0.com on 29 Apr 17:10 next collapse

I enjoyed mozilla vpn until a few months ago - seemed like every site in the world had their ips blocked; ended up rolling my own on a cheap vps.

lopar49@lemm.ee on 29 Apr 17:13 collapse

How does the price of a vps compare to any other vpn. Surely this isnt as private?

lowspeedchase@lemmy.dbzer0.com on 29 Apr 17:22 collapse

I purchased a lowend vps for $15 USD a year. Correct, it is not as private - due to the singular ip; however, for my needs it works quite well.

afk_strats@lemmy.world on 29 Apr 18:36 collapse

Would you be willing to share which one can be had for that cheap?

lowspeedchase@lemmy.dbzer0.com on 30 Apr 02:11 collapse

Sure! softshellweb.com/shared-hosting looks like it’s $20 USD a year without a promotion/coupon. I bought a holiday special if memory serves me correct.

hexagonwin@lemmy.sdf.org on 29 Apr 17:51 next collapse

airvpn seemed nice but i havent tried it.

Kumikommunism@hexbear.net on 29 Apr 19:59 collapse

It’s very good. I download a lot of obscure torrents so I wanted port forwarding, and it’s very simple to set up. The user experience is great. The only part they could work on is the desktop client, but I needed split tunneling so I use a third party one anyways. But I’ve never had any noticeable slowdown and it’s very stable.

Kobo@sh.itjust.works on 29 Apr 17:54 next collapse

mullvad but you cant seed while torrenting with it due to no port forwarding

Kovpak@lemmygrad.ml on 29 Apr 20:59 collapse

You can seed, it’s just slow. It’ll only connect to other users that have closed ports. With ports open, it’ll connect to both, but as said not possible with Mullvad with port forwarding disabled. That’s at least as far as I know

amanverasia@lemm.ee on 29 Apr 17:57 next collapse

Windscribe or Mullvad. I personally use Windscribe and it has some really good features and so far they have a really good reputation in privacy circles.

asudox@lemmy.asudox.dev on 29 Apr 18:05 next collapse

Mullvad.

n3m37h@sh.itjust.works on 29 Apr 19:02 next collapse

Ive never had an issue with PIA, CHEAP as hell on a 3 year plan with an affiliate link and they run their servers on RAM Disk so no logging

Xanza@lemm.ee on 29 Apr 19:22 next collapse

nym.com is great.

RiQuY@lemm.ee on 29 Apr 22:33 next collapse

I love Mullvad but for some reason they refuse to add reverse split tunneling, so imo the only options are IVPN or Proton.

Reverse split tunneling gives you the ability of using the VPN only in the apps/programs you select.

TauZero@mander.xyz on 30 Apr 03:15 collapse

You can set up split tunneling yourself if you run the wireguard/OpenVPN daemon manually and move the “mouth” of the tunnel to a separate Linux network namespace.

rirus@feddit.org on 30 Apr 19:21 collapse

Last time I researched it I didn’t found easy answers. Do you have an easy script?

TauZero@mander.xyz on 01 May 03:20 collapse

The exact script would depend on the use case; you’d use commands something like this:

mkdir -p /etc/netns/VPN
sh -c 'echo nameserver 1.1.1.1 > /etc/netns/VPN/resolv.conf'
ip netns add VPN
ip link add tun1 type wireguard
ip link set tun1 netns VPN

Because the wireguard device was created in the default namespace, it will “magically” remember its birthplace, even after you move its mouth (the tun1 device) to a separate namespace. The envelope VPN packets will keep going in/out in the default namespace.

ip netns exec VPN wg setconf tun1 /etc/wireguard/vpn.conf
ip netns exec VPN wg set tun1 private-key /etc/wireguard/vpn-key.private
ip -n VPN addr add 192.my.peer.ip/32 dev tun1

Get the wireguard config file from the VPN website, both mullvad and OVPN have a wizard to generate them. Your assigned private network ip is in the config file. Also get and save your device key.

ip -n VPN link set tun1 mtu 1420
ip -n VPN link set tun1 up
ip -n VPN route add default dev tun1
ip netns exec VPN su myuser -c 'firefox --no-remote'

Now all firefox (and only that firefox) traffic will go through the tunnel. Firefox has its own DNS, if you run another app it will use 1.1.1.1.

I actually do the reverse of this - I create a namespace ETH and move my eth0 device in there and attach dhcpcd to it. Then I create the wireguard tun1 device inside ETH namespace, and move tun1 to the default namespace. Then any software I run can only use the tunnel, because the ethernet device doesn’t even exist there. This keeps the routing table simple and avoids a whole class of issues and potential deanonymization exploits with the split routing table used in traditional single-namespace VPN configurations.

WQMan@lemm.ee on 30 Apr 03:38 next collapse

Hi just wanted to share these 2 links, since others have already answered your question:

Links should help you decide what to use for other apps as well.

I personally use Mullvad since I don’t need port fowarding, but it does come with full IPv6 support.

Tieas@lemmy.ml on 30 Apr 07:20 next collapse

Proton or mulvad

Estebiu@lemmy.dbzer0.com on 30 Apr 07:25 next collapse

Airvpn is perfect for my needs (torrenting)

grapple1298@lemy.lol on 30 Apr 15:38 next collapse

www.privacyguides.org/en/vpn/

Refer this page for better understanding about vpns and to know about good providers in market.

Windscribe is also good which is the same company own controld.

lexoyo@lemmy.ml on 30 Apr 15:51 next collapse

I recently started using WireGuard hosted on elest.io platform It works realy well, we are a 4 people company full time using it and i pay around $15usd a month with a dedicated ip It’s self hosting made easy elest.io/open-source/wg-easy

A9b382ks@lemmy.world on 30 Apr 16:03 next collapse

Top 3 for me are IVPN, Proton VPN and Mullvad.

I personally use Proton VPN because it has lot’s of servers to choose from.

I suggest using www.techlore.tech/vpn to compare VPNs and see which one has the features you want.

DieserTypMatthias@lemmy.ml on 30 Apr 21:52 next collapse

Don’t know if Tor proxy front ends like Orbot or Carburetor count as a VPNs. If so, I highly recommend them.

sirico@feddit.uk on 01 May 00:27 next collapse

Tailscale Mullvad combo

toastmeister@lemmy.ca on 01 May 01:45 next collapse

Firefox VPN is cheaper isn’t it, and funds the Firefox nonprofit?

phoenixz@lemmy.ca on 01 May 02:42 collapse

Mullvad apparently no longer supports port forwarding. This better in tailscale?

OpFARv30@lemmy.ml on 01 May 03:20 next collapse

Njalla, hands down.

Co-founded by Peter Sunde of The Pirate Bay fame. Run by a great little crew that cares about privacy. They do VPN, domains, and hosting.

Wireguard and OpenVPN. Your external IP periodically rotates through the pool, but at least all ports are forwarded.

Too bad almost nobody knows about them. They even have a Wiki page, ffs!

mooncake@lemm.ee on 02 May 05:21 next collapse

Not one surfshark mention…

SilliusMaximus@mander.xyz on 06 May 20:49 collapse

Mullvad and IVPN

You don’t need to give any data, not even email address