Amnezia – Self-Hosted VPN(amnezia.org)
amnezia.org
Amnezia – Self-Hosted VPN
https://amnezia.org/self-hosted
8 comments
Not affiliated with them but I tested them out, a few clarifications:
> hidden and not visible to me
Everything it runs is blasted out to the terminal you launched the app from.
> in the JSON was also the private key
Yes, because you asked for this. There are two types of shared connections, connection-only (VPN user) and "server management". If you shared for management, of course they shipped the SSH credentials.. how else would the receiver manage your server? Their services don't expose any kind of control plane, all management is through SSH.
Agreed on all your other points though. I strongly disliked the "wizard" interface, and it clobbered a good amount of the baseline settings I deploy to servers. I would much prefer it if they had a more manual mode, but I didn't find anything other than the wizard in their docs.
> hidden and not visible to me
Everything it runs is blasted out to the terminal you launched the app from.
> in the JSON was also the private key
Yes, because you asked for this. There are two types of shared connections, connection-only (VPN user) and "server management". If you shared for management, of course they shipped the SSH credentials.. how else would the receiver manage your server? Their services don't expose any kind of control plane, all management is through SSH.
Agreed on all your other points though. I strongly disliked the "wizard" interface, and it clobbered a good amount of the baseline settings I deploy to servers. I would much prefer it if they had a more manual mode, but I didn't find anything other than the wizard in their docs.
FWIW, this org is the only VPN provider (that I've found) that is both mostly focused on Russian border-firewall circumvention (yes they're doing DPI now, although not to the extent of the GFW) and runs an open-source stack.
Although their setup is kinda wacky (you provide their GUI app SSH credentials, it connects and installs packages, set up firewall rules, and spawns some containers), I walked through everything on a throwaway VPS and everything was above board (as of the most recent release about a month ago).
Although their setup is kinda wacky (you provide their GUI app SSH credentials, it connects and installs packages, set up firewall rules, and spawns some containers), I walked through everything on a throwaway VPS and everything was above board (as of the most recent release about a month ago).
Bit dodgy that they don't provide transparent setup commands or server source code on their github. I get the ease of user setup thing, I just think that the server should be able to be self deployed without a client GUI, or providing them the IP and creds to your VPS.
Probably not a great idea to run a private vpn. You aren’t hiding your ip. You are only acquiring a second ip, that is still your ip.
A private vpn is only good for punching through firewalls
A private vpn is only good for punching through firewalls
The goal behind Amnezia is state censorship circumvention, it started as an activist project in Russia and target audience could care less about technicalities. This is something your slightly technical parents/friends can run to re-gain access to YouTube, Instagram or Telegram calls.
Thank you for adding context.
It's also useful if you use public wifi. Makes sure all your traffic is encrypted, and stops your IP changing constantly which can log you out of some services.
I exported the config (they offer this to share the connection with others), the export is a Base64 of a JSON, inside which are several strings which are JSON but as escaped strings (so { "someKey": "{\"hello\":\"world\"}" }), and sometimes the nesting happened 2-3 layers deep! I had to write an encoder/decoder for my own setup.
Then I noticed in the JSON was also the private key that I used to setup the server! Wow, great work!