Open source Zscaler alternatives

A Farewell to FRP

“> My thesis was related to synchronous programming languages and articles about FRP tend to have too little to say about them, for my taste. What would you expect them to say exactly? Synchronous languages are first-order reactive programming, but FRP is about higher-order…”

Frp: A fast reverse proxy to help you expose a local server to the internet

“Looks like a good project, but the name might cause a little confusion, as FRP is a style of programming [1] with not-insignificant exposure [2]. [1] [2]”

Headscale: Open-source implementation of the Tailscale control server

“Of course they do -- that's why I use them. I don't have to. > Lack of “feature parity” is a strange term for something that completely replicates a third party service but requires self-hosting. It doesn't completely replicate it though, does it? No iOS app, no file sending --…”

Headscale: Open-source implementation of the Tailscale control server

“You buy a Tailscale contract for the same reason you buy a Red Hat contract. If something goes wrong, and you need to fix it fast , their experts will work on that, not yourself. Also, Tailscale offers OAuth through large corporate providers; I'm not sure Headscale is going to…”

Tailscale raises $100M

“Yea, but my friends and family would rather have a service that just works, has apps, etc instead of an open one. Tailscale is a good actor ~for now~ and ~for now~ thats good enough for us. Not everyday in every situation can I be an activist. I have a list of alternatives incl…”

Tailscale raises $100M

“You may want to take a second look at Tailscale - it can be used as a classic VPN ("exit node"), but it really wants to broker host-to-host connectivity secured by ACLs and SSO.”

Deep packet inspection to classify V2Ray traffic in Dec, 2020

“I collected V2Ray traffic data and reran my deep packet inspection test, as described from [the issue here]( I compiled V2Ray (commit hash `5dffca842`) in Go 1.15 and use TLS + websocket. In 10 days, I collected V2ray connections 17,998, none-V2ray TLS connections 136,981. I…”

OpenAI Trains Language Model, Mass Hysteria Ensues

“I'd shrug and move on, but the problem is that I believe that these flaps about AI are distracting attention from the real concerns and forces that are having a serious impact on people now. The distortion of public debate caused by community exclusiveness on social platforms,…”

LimitNPROC line in /lib/systemd/system/[email protected] has to be commented out (maybe relevant to issue #199?)

“The LimitNPROC line in /lib/systemd/system/[email protected] has to be commented out in order to be able to start OpenVPN. This issue manifests on a fresh install and update of Ubuntu 16.04.1, clean iptables and latest version of the installer script. Only OS post-install…”

after update new clients not connect to server

“MULTI: multi_create_instance called Re-using SSL/TLS context Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication Incoming Control Channel…”

Nebula Sans

“I'm not saying it doesn't have any, just that it doesn't have as many. My YouTube is just so much more diverse in every way, I'm never going to get my favourite UK canal boat creators on Nebula for instance. Nebula is a narrow thing for a narrow audience that likes one specific…”

Nebula Sans

“I absolutely love the idea behind Nebula, but to this day there isn't a single creator there that I'm interested in actively following... A big part of it is just my hobbies being different, but a no small part is that the videos are still the same YouTube videos that are first…”

Revoking a client issues

“**Describe the issue** **1-** After using the script to revoke a client. He still able to use the OpenVpn server if he didn't disconnect from the server. In server.conf I confirm that: ``` crl-verify crl.pem``` is available referring to this question on OpenVpn Forum: [ **2-**…”

[Bug]: EasyRSA asking for "PEM pass phrase"

“### Make sure your check these beforehand! - [X] Issues - - [X] README and FAQ - - [X] Wiki - - [X] Discussions - ### Server OS Ubuntu 22.04 ### OpenVPN version 2.5.5 ### Client OpenVPN 2.5.5 on Ubuntu ### What is the bug? During the install process, the script is now asking for…”

SoftEtherVPN - WireGuard integration. Possible?

“See the article. It is posssible? (like OpenVPN, SSTP, etc...)”

Please add support for IKEv2 for IPSec VPN

“The current IPSec VPN is based on ISAKMP(IKEv1). Please add support to IKEv2. You can port openswan or strongswan.”

Spectrum Internet blocks bore.pub

“I'm having this problem persistently, even after reboots ``` bore local --to bore.pub 3001 Error: could not connect to bore.pub:7835 Caused by: Connection refused (os error 111) ``` _Originally posted by @ekzhang in”

Abuse reports and suspension of bore.pub service

“I received the following email from Porkbun today. This is disappointing, bore has been running for almost three years now and the use of the public instance for phishing has only recently started. It's intended as a public service for developers, and I'm disheartened that it's…”

not working on Oracle Free Cloud

“installed OK but dont have access to internet from Oracle Free Cloud in installation steps it detect private adress 10.10.x.x on enp0s3 adapter instead of public 182.x.x.x and if im insert public then i dont have access to internet”

no traffic

“hi i just used your script and its running but i want to connect to vpn server using wiregaurd on windows i can connect to vpn server but there is no inbound traffic at all, i cant do anything! whats the fix?”

FireZone – Open-source VPN server and firewall

“Hi everyone! Firezone CEO here. Someone just clued me into this thread. Unfortunately I’m in and out of Internet service today but I’ll do my best to answer questions. As noted by others, Firezone isn’t really aiming to be a mesh networking tool like Tailscale, but more of a…”

FireZone – Open-source VPN server and firewall

“Hi, I deleted that post because it had something in it I didn't want forever recorded on the internet. Nobody harassed me and I wasn't wrong. One of my pihole blocklists includes telemetry.* which matches some network call made by the command you run to update the Firezone…”

Internet access does not work (abuse prevention)

“0 B received. Handshake did not get completed. I thought it could be account issue. Registered a new account from a VPN and tried connecting with the new config. Still same. --- **Edit from maintainer:** Just to give some organization to all the "internet does not work" reports.…”

Internet access does not work (system issue)

“Basically if I run wg-quick up wgcf-profile.conf I have no internet access, pings fail, but somehow telegram works. In the version without [this revert commit]( , I had no internet at all, even in telegram. Only now when I updated to the version with this commit I find this…”

PiVPN v4.6.0: The End

“This really goes to show you how valuable a good experience / API is. PiVPN is so easy to use. You run 1 command and pass in the name of the config to generate and you're done. Now you can take that config and use it client side. I've used it on Debian servers (not a Raspberry…”

PiVPN v4.6.0: The End

“Anyone got a recommendation for a router with Wireguard support baked in? I've been running PiVPN on a separate box but since I need a new router anyways and it's not going to be supported, that might be a viable replacement.”

Detection of radioactive iodine at trace levels in Europe in January 2017

“Other sources indicate something that might be related - arrival of a "sniffer" WC-135 plane from Florida to UK that detects and monitors radioactive events. So there might be something going on (or not). Anyway, why is it so bad to be concerned about health impact of even…”

Detection of radioactive iodine at trace levels in Europe in January 2017

“> Many installations in Europe and neighboring countries are allowed to reject iodine-131 in the air. Given the very short half-life of 131I being just 8 days and the daughter isotope 131Xe being stable this is a really weird policy. There's no good reason to force nuclear…”

Rise of the telepresence robots

“Yeah, there's a dissonance. People stay from being messed up physically and mentally by moving around and keeping their surroundings varied. On the other hand, you keep your mainframe CPU in a nice stable server room, not rolling around on the factory floor where it gets crushed…”

Rise of the telepresence robots

“You can, and probably 99% of trademarked brands are dictionary words, but not when the word means generically what your product does and you try to use just that word as your mark. You can't trademark "Computer", but you can trademark "Apple Computer" or "Dell Computer", etc.…”

Server sent FIN

“Server `[MasterDnsVPN Server] [11:03:01] [INFO] Stream 1 connected to Forward Target: 127.0.0.1:1099 [MasterDnsVPN Server] [11:03:17] [INFO] Closing Stream 1 in Session 2. Reason: Marked Closed by ARQStream (Local App Closed Connection (EOF)) [MasterDnsVPN Server] [11:03:26]…”

BoringTun, a Userspace WireGuard Implementation in Rust

“According to the blog post: "The name might sound a bit boring but there's a reason for it: BoringTun creates a tunnel by 'boring' it. And it’s a nod to Google’s BoringSSL which strips the complexity out of OpenSSL. We think WireGuard has the opportunity to do the same for…”

Not dropping root privileges running on macOS 11.6.1

“Good afternoon, I've just been testing `boringtun` on macOS but noticed that when I run using the following command, that it does not drop root privileges. sudo WG_QUICK_USERSPACE_IMPLEMENTATION=boringtun WG_SUDO=1 wg-quick down ~/wireguard/example.conf The `boringtun` process…”

WsTunnel – Tunnel Your Traffic over WebSocket or HTTP2 – Bypass Firewalls/DPI

“WsTunnel improved a lot since last shared/communicated version, with the addition of: - Reverse tunneling \o/ - Added support of unix socket, transparent proxy/ip, UDP for socks5 - Support of mTLS - Config file to restrict the allowed tunnels - Cerfificate and config auto-reload…”

Build for iphoneos aarch64?

“It’d be really nice for jailbroken iOS users to connect from wireguard over websocket to bypass restricted networks without taking much of a performance hit. I can provide you SSH access to a jailbroken iPhone if you’d like to run test builds on. There’s also [this project]( but…”