New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
The fabric "tattoo arm sleeves". Ignore the poor photo, will get better sample photos outside in daylight and with a proper camera and won't be wearing my 'sitting around the house' attire.
(I have no tattoos)
ALSO WE ARE REVAMPING OUR VPN SERVICE!!!!
Suggest what protocols we should support.
I think, but am not 100% yet, we will do something similar to what we are doing now where you select what POP you want individually. Right now, you can generate X number of Wireguard configs per POP.
What I want to do is do that, but allow you to also choose different protocols per POP. Maybe (For example), Amsterdam is closest to you. You want a Wireguard config for speed, but want to have a config with V2Ray, or Hysteria, or something different. Ideally you could generate different configs for within the same POP to meet your needs.
We have 10 POPs now ( See: https://as40663.net) and okay coverage of the US and Europe. We want to offer a good VPN service that extends beyond a relatively stock Wireguard setup as we now offer.
What features, within reason, would you like to see?
Multi-hop options? (Either user configurable entry / exit points, or choose between pre-set multi-hop options?), enhanced DPI resistance options? (We did register DPIVPN.com today... )
How important is IPv6 to you for normal browsing? We don't support IPv6 on Wireguard at the moment and have only had a couple people ask about it. Is it something you care about?
Is your PA location at the Tierpoint Valley Forge datacenter?
Tbh since most sites still use IPv4 or both IPv4 and IPv6, having IPv6 connectivity hasn't been a problem in any capacity I've encountered. I use incogvpn daily with no issues.
IPv6 connectivity is only something to consider if we think the future internet is going to be a lot more IPv6-only. At this point in time, I'm in no position of authority to speculate about that.
I think v2ray - either VLESS or VMESS with xtls-vision would be pretty helpful in heavy censorship areas.
Yeah. It's downstream of Crunchbits.
I'll likely try to get some people in these areas to test.
Been using VPNs for 10+ years and after all this time, some basic essentials are more important than bells and whistles. Personally, an important feature for me would be a reliable kill switch. Aside from that, an easy way to switch the country, with Wireguard app that's more or less covered. On the server (i.e. incognet) side to provide a DNS with adblocking features, would be nice if possible to give a customer an option to customize it (to select what to be blocked).
Two the most important features tho would be a clear no log policy and the cleanest possible IP reputation. There's nothing more frustrating for a user than to constantly solve captchas while browsing.
Regarding IPv6, an option to block it would suffice.
Where would you like this kill switch to be? In the web based UI / control panel (Which for the customer, would be inside WHMCS)? We don't have any plans at this time to develop a mobile app. My theory and point of view has always been there is nothing we can do better or more securely than the official apps created and maintained by those who maintain the protocol (Ex: Wireguard app for Android).
At the desktop level, a kill switch can be implemented via some scripts. That can be easily done I think and may be more of an "advanced users guide to IncogVPN" knowledge base entry or something.
I've thought about running several different DNS options. Right now our ad-blocking DNS is just based on https://oisd.nl/ . We check for updates every hour and pull / sync to the DNS cluster. The thought I had was continue to offer that, as well as offer a "Family Safe" version (basically blocking porn and other things families may want to block) and a "Unfiltered" (nothing blocked) version. The IPs of the VPN servers would be whitelisted to query whichever setup there is.
What did you have in mind? Without you running your own private DNS servers I'm not sure how User A can say, "I want Facebook blocked" and User B use the same setup and want to also reach Facebook. If it's several selectable DNS profiles, that are pre-configured, that we can do and I think is a good idea.
(Otherwise maybe we can offer incentives for you to run your own in-house private DNS server for just you and we can offer a template or some thorough guides for it)
So, with this new system I'd be interested in having some sort of verifiable external audit at the VPN node level. Saying "no logs" and having a 3rd party that is trusted saying, "hey, they're telling the truth" are two different things. Something we'll have to look more into. Then theres the technicality things like, "Is it logging or privacy invasive if I'm able to determine that User XYZ's Wireguard profile is pounding the port 24/7 in a manner that isn't suggestive of normal use?" I'll have to look more into what the big players are doing.
Even clean IPs are often blacklisted just because they're not residential. It's annoying and not something we can really overcome. I'm constantly filling out catpchas and most of the IPs I use on the public facing internet are private, not shared, only used by me. I can't access reddit anymore, and it's probably a good thing, and some other sites are more annoying than others.
It's actually blocked on the Wireguard servers now, just simply as a means of reducing attack or conflict surface. I should write a guide on how to prevent DNS leaks from users who have native IPv6 at home but connect to an IPv4 only Wireguard server so they're not leaking requests to their ISPs.
IIRC android has native support for "Always-on VPN" & "Block connections without VPN"
You don't even have to try, Wireguard won't work in these locations.
Yup
sweden needs moar powrrr... AMD Ryzen Threadripper PRO 9995WX
It wouldn't be based on Wireguard. While we'll always offer Wireguard, the discussion was about offering other protocols as well.
I can test them out locally but I can't really mimic living in an oppressive country with heavy internet and mobile data restrictions.
Could you also add https://amnezia.org/ to the mix to see if it helps in these kinds of locations?
Obfuscation methods would be amazing but i believe these would involve work on the client end
Lightweight WireGuard Obfuscation, v2ray, QUIC
The other problem is that to bypass censors requires constantly changing IP addresses which would require VPSs outside your network which goes against the whole controlling the network of all products (Though migrated if the obfuscation double hops back into the network).
Nah, app based, for example Android option you showed above. I wasn't sure is a mobile/desktop app planned or not. Network shutdown, if VPN connection dropped.
Pretty much this, but with a bit more granularity if possible. Something like https://controld.com/free-dns, so for example, hagezi as well besides oisd.nl. The idea is to have DNS from the same company as VPN.
3rd party audit would be nice, but I'm aware it can be quite expensive, especially for a smaller company.
True, hence why I said the cleanest possible. I had to stop using mullvad, cause with their IPs things were unusable unfortunately. It's shame, because I really liked their service.
i got my vpn refunded, after noticing it does not support ipv6. i find it important to have both and its a sign of quality for me as only a few vpn providers support it.
The lack of multi-hop support is the only thing holding me back currently.
What sort of multi-hop support would you like to see?
User can:
I would prefer the first option. Currently using Mullvad I usually select NYC->SomewhereEurope or MIA->Paris, based off sea cable routes to optimize inline speed while enhancing plausible deniability (Also good for optimizing CS latency).
Multi-hop, as I view it, doesn't really effect privacy or anonymity but rather plausible deniability. I like knowing that on paper, it looks as though I used a VPN in Miami, but my actual activities were occurring in say, Sweden.
Used 1.23TB Yesterday on my IncogNet VPN:
Reinstalled my GamingPC and re-setup my VPN and then reinstalled everything from Steam and the MS Store.
If you can't see the image because its on Imgur your country sucks and you need to go to:
https://incognet.io/wireguard-vpn
Also I need to go back to Asia and Rob @MannDude of one of his shirts again:
This was me after I fled the country he was in and was leaving the Airport and heading into Kuala Lumpur.
I would love to have such a shirt.
I need to get more made! Had planned on a larger batch than I did but then wasn't sure about the tarrif and shipping situation to send stateside.
Got a local screen printer who does great work.
Been testing out a multi-hop AmneziaWG setup today. Since I'm in the APAC region, it's going:
me <> hosthatch Singapore <> Incognet Amsterdam. I'm about 50ms from Singapore, and from Singapore to Amsterdam is about 150ms. Some light junk packets mixed in but not going heavy on obfuscation at the moment.Been streaming YouTube music and general browsing fine. No VPN and I get about 60Mbps down, and about 40Mbps down with the multihop setup.
Will continue to test this out. Would likely offer non IncogNET entry points over common ports like 443 from random providers and exit over our space.
Stock Update:
Yeah, I think just chatting with ppl on Mastodon will eventually pay dividends as it's a target-rich environment for tech people who are highly skeptical of Big Tech, and also there aren't many other small general/VPN hosts on there at this point. In my experience there since 2017, users tend to really value personal engagement.
Regarding your VPN service, I wanted to chime in with my 2 cents because my use case is probably different from many others, but I suspect more people may have it going forward.
I'm a digital nomad who is not living the lifestyle by choice. So my important aspects are:
please full fix implement 1776
That's a decent number of locations. Congratulations!