Looking for a VPS near Venezuela to host Amnezia WireGuard or similar VPN services.

Yahome · January 14

Looking for a VPS near Venezuela to host Amnezia WireGuard or similar VPN services.
Basically, I need to provide a stable VPN for work. Hosting it locally has been a nightmare — our main/most reliable ISP seems to be blocking ports or VPN traffic somehow, but they won't admit it (probably just following government rules).

The VPN won't get heavy use — mostly for accessing local services like SIP and RDP to remoteapp published apps. Peak might be up to 10 connections, and mostly only on weekends. But if something crazy happens (like what went down on January 3rd), we might need to scale up quickly for a bit, so providers that allow easy/flexible temporary upgrades would be perfect.

Company has about 50 people in the office, small setup overall.
Since it's not my money, cost isn't a big deal. Right now I'm running the same VPN service for the company on my personal RackNerd VPS, but obviously I'd rather the company own its own box and not rely on my personal stuff (and I'm not getting paid extra for it anyway).

PD: Not necesarily near Venezuela, just with a good latency for LAN countries, of course. I'm aiming for 50ms-60ms. My current VPS has about 80ms but of course it gets doubled when traffics flow from a node to the other.

(Edited just for the sake of adding PD)

oloke · January 14

Hi,

I would definitely aim for something in US, Florida region. It should be somewhat cheaper than south american hosting.
I checked latency and it should be around 40-50ms.

I can recommend:

ExtraVM in Miami @MikeA - globalping result
SolidVPS in Tampa @SolidVPS - globalping result

You can browse their existing plans or maybe they could provide you with some custom offer (for example with more bandwidth).

For now I don't think there are any better options you could find on LET, however I would love to see providers with servers in Colombia or Venezuela coming here in the future.

Yahome · January 14

@oloke said:
Hi,

I would definitely aim for something in US, Florida region. It should be somewhat cheaper than south american hosting.
I checked latency and it should be around 40-50ms.

I can recommend:

ExtraVM in Miami @MikeA - globalping result

SolidVPS in Tampa @SolidVPS - globalping result

You can browse their existing plans or maybe they could provide you with some custom offer (for example with more bandwidth).

For now I don't think there are any better options you could find on LET, however I would love to see providers with servers in Colombia or Venezuela coming here in the future.

Thank you very much, friend (I'll check those out).

Also I doubt there being VPS hosted on Venezuela anytime soon since we're stuck in the 90's. But yeah, would be the best if that was an option because nothing beats local latency and avoiding opening ports in a messed up enviroment. Specially when the main purpose of that is just straight up providing a private service for the same company. They don't pay me nearly enough for this shit.

concept · January 14

Brazil or Miami would be your best options. Most Miami providers are connected to SA ISPs

MikeA · January 14

If you're in Venezuela send me a DM and I'll give you a deal in Miami.

Yahome · January 14

@MikeA said:
If you're in Venezuela send me a DM and I'll give you a deal in Miami.

Thank you very much, I just did.

JeDaYoshi · January 14

Also from Venezuela, can't go wrong with @MikeA - happily using his services

BTW, what ISP are you using? I haven't seen any blocks specific to WireGuard etc, but rather throttles to UDP in general. Using something like https://github.com/dndx/phantun has been amazing in my case.

Yahome · January 14

@JeDaYoshi said:
Also from Venezuela, can't go wrong with @MikeA - happily using his services

BTW, what ISP are you using? I haven't seen any blocks specific to WireGuard etc, but rather throttles to UDP in general. Using something like https://github.com/dndx/phantun has been amazing in my case.

Airtek, actually. Might aswell be some kind of missconfig on my side but acquiring a VPS couldn't go wrong anyways.

Yahome · January 14

@JeDaYoshi said:
Also from Venezuela, can't go wrong with @MikeA - happily using his services

BTW, what ISP are you using? I haven't seen any blocks specific to WireGuard etc, but rather throttles to UDP in general. Using something like https://github.com/dndx/phantun has been amazing in my case.

I'll look that up maybe I'm missing that. How did you come to that conclusion by the way? I'm a noobie.

malikshi · January 15

@JeDaYoshi said:
Also from Venezuela, can't go wrong with @MikeA - happily using his services

BTW, what ISP are you using? I haven't seen any blocks specific to WireGuard etc, but rather throttles to UDP in general. Using something like https://github.com/dndx/phantun has been amazing in my case.

Any apps for Android?

Yahome · January 15

@malikshi said:

@JeDaYoshi said:
Also from Venezuela, can't go wrong with @MikeA - happily using his services

BTW, what ISP are you using? I haven't seen any blocks specific to WireGuard etc, but rather throttles to UDP in general. Using something like https://github.com/dndx/phantun has been amazing in my case.

Any apps for Android?

I haven't check out that repo but it seems like something that sits between your wireguard service and peers, so probably just needs to deploy it in your vps. Not really sure though. Amnezia wireguard has some propietary servers you could pay for if you feel like it, it's been working alright for me for about a week in my personal VPS.

Honestly I'm not really sure what's been happening with my attempts to deploy pure wireguard locally. They usually work for a few days (or weeks), then all of a sudden no packets coming through even though there's a handshake, if there's a handshake at all. Sometimes it happens after the common blackouts we experience here in Venezuela. I don't rule out some kind of corruption of data: but we do have batteries, power inverters and even enterprise grade UPS for the main servers.

jam · January 15

If low latency is important to you, first check how good your connection is with the potential provider you are considering and compare your results with other ISPs in the country. You can use globalping to test a few.

Colombia could be the best option if you want the lowest latency, but it won't exactly be cheap compared to the prices you can find with a VPS provider in Florida.
The lowest latency will also depend on your ISP and how good its internet exit routes are.

In Colombia, you can try providers such as Lightnode and Edisglobal, but again, it won't be cheap, and the lowest latency will depend on your ISP.

I have VPS with Extravm and Solidseovps, and so far I've had a very good experience with them.

Finally, if possible, it would be very useful for me and most likely for other Venezuelans and the community in general if you joined the globalping network by placing a probe on your internet connection. A cheap Raspberry Pi is more than enough. That way, others could benefit from being able to test the network from another Venezuelan ISP. Currently, there are only three. I've been hosting one of those for several months now.

Yahome · January 15

@jam said:
If low latency is important to you, first check how good your connection is with the potential provider you are considering and compare your results with other ISPs in the country. You can use globalping to test a few.

Colombia could be the best option if you want the lowest latency, but it won't exactly be cheap compared to the prices you can find with a VPS provider in Florida.
The lowest latency will also depend on your ISP and how good its internet exit routes are.

In Colombia, you can try providers such as Lightnode and Edisglobal, but again, it won't be cheap, and the lowest latency will depend on your ISP.

I have VPS with Extravm and Solidseovps, and so far I've had a very good experience with them.

Finally, if possible, it would be very useful for me and most likely for other Venezuelans and the community in general if you joined the globalping network by placing a probe on your internet connection. A cheap Raspberry Pi is more than enough. That way, others could benefit from being able to test the network from another Venezuelan ISP. Currently, there are only three. I've been hosting one of those for several months now.

I can certainly do that in my homelab, would you be so gentle to point me to the corresponding documentation? I know I can look it up on google or the proper globalping website but at the moment I'm working and I'm prone to forget

jam · January 15

@Yahome said: would you be so gentle to point me to the corresponding documentation? I know I can look it up on google

There is no documentation as such, and Google is not required or necessary. The process is so simple that the explanation is literally on the GlobalPing homepage.

You'll only need to have Docker or Podman installed.

Sign up for Globalping with your GitHub account and go to the Dashboard
Click on probes (left menu)
Click on add probe (green button on the right)
Select Software probe
Choose between Docker or Podman
Run the command they tell you to. The most important thing there is the token. That's what will associate the probe with your GlobalPing account.
Click Next Step.
You did it!

The command will be something like:

docker pull globalping/globalping-probe; docker stop globalping-probe; docker rm globalping-probe;
docker run -d -e GP_ADOPTION_TOKEN=YOUR_TOKEN_HERE --log-driver local --network host --restart=always --name globalping-probe globalping/globalping-probe

JeDaYoshi · January 15

@jam said:
Colombia could be the best option if you want the lowest latency, but it won't exactly be cheap compared to the prices you can find with a VPS provider in Florida.
The lowest latency will also depend on your ISP and how good its internet exit routes are.

Most Venezuelan ISPs don't have direct connections to Colombia, including the major ones (only one that comes to mind that is available nation-wide is VNET). While @Yahome's ISP has peering in Equinix Bogotá (Colombia), Miami FL is pretty much the only way you can be sure you'll have the lowest latency possible around the country. Add to that, the latency to Bogotá is pretty much the same as to Miami, so it doesn't make any sense financially-speaking unless you needed connectivity to other countries in South America.

@Yahome said:

@JeDaYoshi said:
Also from Venezuela, can't go wrong with @MikeA - happily using his services

BTW, what ISP are you using? I haven't seen any blocks specific to WireGuard etc, but rather throttles to UDP in general. Using something like https://github.com/dndx/phantun has been amazing in my case.

I'll look that up maybe I'm missing that. How did you come to that conclusion by the way? I'm a noobie.

Testing with iperf3. It has a TCP and UDP mode you can try out. If you want to check if WireGuard is being blocked is a more elaborate thing... I constantly monitor a few ISPs because I help my friends around the country regarding VPNs, so I've run into a few particular cases.

@Yahome said:
Honestly I'm not really sure what's been happening with my attempts to deploy pure wireguard locally. They usually work for a few days (or weeks), then all of a sudden no packets coming through even though there's a handshake, if there's a handshake at all. Sometimes it happens after the common blackouts we experience here in Venezuela. I don't rule out some kind of corruption of data: but we do have batteries, power inverters and even enterprise grade UPS for the main servers.

Two things come to mind:

For some reason, some ISPs have issues where their CGNAT fails to bind to the proper IPs in case their upstream fails, so packets go nowhere. Usually apps fix this by themselves by restarting the connection; in your case you'd need to ping somewhere inside your WG tunnel and restart the interface in case it goes down. (Also make sure to have PersistentKeepalive set to 25 or anything under 30 seconds).
Something like the UDP issue mentioned a while ago.

Yahome · January 15

@JeDaYoshi said:
Two things come to mind:

For some reason, some ISPs have issues where their CGNAT fails to bind to the proper IPs in case their upstream fails, so packets go nowhere. Usually apps fix this by themselves by restarting the connection; in your case you'd need to ping somewhere inside your WG tunnel and restart the interface in case it goes down. (Also make sure to have PersistentKeepalive set to 25 or anything under 30 seconds).

Something like the UDP issue mentioned a while ago.

We have a public IP, no CGNAT at all. I´ve also done the PersistentKeepalive thing both in the wireguard server and clients. It helped for a while but again, something pretty weird is going on with Airtek. I´ll check the repo you sent! I´m quite grateful for your help.

SpeedBus · January 15

We've got services in Miami too, feel free to DM if you're looking for anything in the region and we'll work something out

GlobalPing for reference (https://globalping.io/?measurement=2FROYO8fzXQDj76Nn0001zfmu)

EDIT: Might be worth looking into something like X-UI or similar, to fall back onto if WireGuard is being blocked/filtered out.

Yahome · January 15

@jam said:

@Yahome said: would you be so gentle to point me to the corresponding documentation? I know I can look it up on google

There is no documentation as such, and Google is not required or necessary. The process is so simple that the explanation is literally on the GlobalPing homepage.

You'll only need to have Docker or Podman installed.

Sign up for Globalping with your GitHub account and go to the Dashboard

Click on probes (left menu)

Click on add probe (green button on the right)

Select Software probe

Choose between Docker or Podman

Run the command they tell you to. The most important thing there is the token. That's what will associate the probe with your GlobalPing account.

Click Next Step.

You did it!

The command will be something like:
docker pull globalping/globalping-probe; docker stop globalping-probe; docker rm globalping-probe;
docker run -d -e GP_ADOPTION_TOKEN=YOUR_TOKEN_HERE --log-driver local --network host --restart=always --name globalping-probe globalping/globalping-probe

I checked the globalping page, associated an account and now is working as intended, it actually shows on the main page! I think that´s cool! Finally I´m contributing to something in life besides converting O2 to CO2.

jam · January 15

@JeDaYoshi said: Most Venezuelan ISPs don't have direct connections to Colombia

Yes, that's why I mentioned several times that low latency will depend largely on your ISP.
For example, my ISP uses Vnet as its upstream, so I have around 30ms of latency to Colombia. But the downside is that latency to Florida is usually much higher than normal for other ISPs in the country.

@Yahome said: I checked the globalping page, associated an account and now is working as intended, it actually shows on the main page! I think that´s cool! Finally I´m contributing to something in life besides converting O2 to CO2.

Thank you for contributing a new probe. Hopefully more people or ISPs in the country will join the globalping network so that we can have more reference points from which to perform network tests and diagnostics within the country.

@SpeedBus said: We've got services in Miami too, feel free to DM if you're looking for anything in the region and we'll work something out

GlobalPing for reference (https://globalping.io/?measurement=2FROYO8fzXQDj76Nn0001zfmu)

crownclod, right? I recently purchased a storage VPS from them. So far, so good. I really like their control panel; it feels intuitive and runs smoothly.

SpeedBus · January 16

@jam said: crownclod, right? I recently purchased a storage VPS from them. So far, so good. I really like their control panel; it feels intuitive and runs smoothly.

Yup, CrownCloud indeed! Thank you for the feedback, much appreciated & glad to have you onboard with us

oloke · January 16

@Yahome said:
@jam said:

@Yahome said: would you be so gentle to point me to the corresponding documentation? I know I can look it up on google

There is no documentation as such, and Google is not required or necessary. The process is so simple that the explanation is literally on the GlobalPing homepage.

You'll only need to have Docker or Podman installed.

Sign up for Globalping with your GitHub account and go to the Dashboard

Click on probes (left menu)

Click on add probe (green button on the right)

Select Software probe

Choose between Docker or Podman

Run the command they tell you to. The most important thing there is the token. That's what will associate the probe with your GlobalPing account.

Click Next Step.

You did it!

The command will be something like:
docker pull globalping/globalping-probe; docker stop globalping-probe; docker rm globalping-probe;
docker run -d -e GP_ADOPTION_TOKEN=YOUR_TOKEN_HERE --log-driver local --network host --restart=always --name globalping-probe globalping/globalping-probe
I checked the globalping page, associated an account and now is working as intended, it actually shows on the main page! I think that´s cool! Finally I´m contributing to something in life besides converting O2 to CO2.

@jimaek important news don't miss

thanks @Yahome

jam · January 16

@Yahome said: We have a public IP, no CGNAT at all.

May I ask how much Airket charges you for a public IPv4 address? I've been thinking about asking my ISP for one, but at the moment I don't have a good enough excuse to justify the expense. For now, I'm still waiting for my ISP to roll out IPv6.

Don't forget to let us know which provider you chose and how your experience with them has been.

Yahome · January 16

@jam said:

@Yahome said: We have a public IP, no CGNAT at all.

May I ask how much Airket charges you for a public IPv4 address? I've been thinking about asking my ISP for one, but at the moment I don't have a good enough excuse to justify the expense. For now, I'm still waiting for my ISP to roll out IPv6.

Don't forget to let us know which provider you chose and how your experience with them has been.

Nothing, they gave me a public ipv4 ip without asking. Of course, it's "dynamic" so I got to update my public domain address or use a ddns to be able to connect remotely to my homelab. They also adopted ipv6 a while ago so all in all I'm happy with the service. If you want a static public ipv4 ip you got to pay 50$/month. Their usual plan is 25$/month. Most ISP here just offer you CGNAT unless you ask for a public ip, at least that's the case with FullData and Maracaibo.net. The last ISP is awful I would not recommend!

Howdy, Stranger!

Categories

In this Discussion

Looking for a VPS near Venezuela to host Amnezia WireGuard or similar VPN services.

Comments

Howdy, Stranger!

Quick Links

Categories

In this Discussion

Looking for a VPS near Venezuela to host Amnezia WireGuard or similar VPN services.

Comments