From Zero to Hero Build a Super Secure VPN Exit Node in 2024 (Cloudflare MASQUE)

[@chasim1982]

Thank You Sir ❤ your content 🙏 👏 🙌 lot of learning

[@LinuxCloudHacks]

Glad to hear that! Thanks!

[@NatalieUoker]

Świetne filmy robisz. Polska wersja byłaby super (lub chociaż polskie napisy). Kilka razy trafiłem na Twój kanał, ale zawsze mi się wydawało, że to kolejna indyjska produkcja, która zwykle jest niskiej jakości i porusza podstawowe tematy. Nigdy w to głębiej nie wchodziłem, aż zacząłem oglądać materiał o NFT. Dla mnie bomba.

[@LinuxCloudHacks]

Dzięki! Probuje jakoś rozkręcić kanał, ale na razie marnie mi idzie :) Pomyślę nad polską wersją (pewnie nowy kanał) w przyszłości.

[@NatalieUoker]

@@LinuxCloudHacks Tematy raczej trudne więc i popularność chyba nie będzie wielka. Kiedyś były filmy OneMarcFifty ale się skończyły (te były jakby bardziej na moim poziomie). Jest Apalard's adventures, ale męczę się tam z angielskim-amerykańskim. W sumie z wartych uwagi jest jeszcze tylko Jim's garage i tyle. Reszta to mniej lub bardziej reklamy produktów. Trzymam kciuki bo robisz świetną robotę. Im więcej oglądam tym bardziej jestem pod wrażeniem. Kolejny odcinek o ipv6 byłby dobry. Ten apalarda jest dla mnie za szybki.

[@LinuxCloudHacks]

Kanały o których wspomniałeś, super, ale bardziej nastawione na budowanie homelabu, domowego firewalla etc. Ja dalej szukam swojej niszy :) ale celuje w przecięcie szerokopojętej sieci oraz linuxa, cloudu, serwisów, etc. itp. bardziej od strony profesjonalnej a nie homelab. Native speakerzy mają dużo łatwiej by się przebić, a też mechanizm promowania filmów przez YT jest jaki jest :) No nic. Walczymy :)

[@shivamsaxena7378]

Amazing content! :)

[@LinuxCloudHacks]

Glad you think so!

[@ranma8890]

please do benchmark between cloudflare peer to peer and tailscale

[@LinuxCloudHacks]

Hi! Great idea but this test would be dependent on various factors. In other words it won't be fair comparison as we'll have to take individual conditions into consideration. Let me explain: Tailscale: - As it's a mesh VPN it will try to establish a direct peer to peer connection between two nodes. If that's successful then assuming you are running a fairly modern PC then you'll get near line-rate performance (it will run as fast as your Internet link). - If Tailscale fails to establish a peer to peer connection and will rely traffic then the performance would be best effort (depending on how far you are from the rely server and what's the utilisation of rely server - how much traffic currently passes through that server) Cloudflare: - It uses Wireguard as well so there won't be any difference on the protocol side but all the traffic passes through Cloudflare infrastructure that's also best effort in free tier. - In Cloudflare you connect to the closest Cloudlfare server and then the traffic is routed via Cloudflare backbone (that's very fast). To sum up - in my opinion (to be tested): - if your servers are close (close distance, low ping) and if tailscale manages to establish a direct connection then it should be the faster - if however your servers are not that close (different continents, moderate ping) then going via Cloudflare infrastructure should be faster as you connect to the closest cloudflare server and then the traffic is routed via cloudflare infrastructure

[@ranma8890]

Thanks for you long explanation, I learn a lot from your channel!

[@LinuxCloudHacks]

Thanks for the visit!

[@blatzer1]

Isn't it the same as using Xray or V2ray which come with various protocols and can obfuscate Wireguard traffic ? Seems really cool

[@LinuxCloudHacks]

Hi! Apart from the fact that the in this case the traffic is routed via Cloudlfare network the concepts are similar although MASQUE utilizes QUIC protocol and Xray/V2Ray go with VMess, VLess, Shadowsocks, XTLS, etc. Xray/V2Ray are dedicated solutions to bypass censorship and Cloudflare's MASQUE focuses more on performance and obfuscating VPN/proxy traffic. Once I have some free time I'm planning to do a video or comparison of proxy protocols. We'll see how that goes :) Cheers!

[@mmshasan]

Would you kindly make a video of Cloudflare's Remote Browser Isolation (RBI)? Thank you in advance.

[@LinuxCloudHacks]

Hi! I'll need to reach out to Cloudflare as this feature is non-free. We'll see if they allow me to test that in a youtube video.

[@M_SVD]

I use warp but it doesn't change my ip How can i change the ip?

[@LinuxCloudHacks]

Hi! Are you running WARP on Windows or Linux? If Windows, did you click Connect button (and it shows Connected)? If Liunx than what "warp-cli status" command shows?

[@EchipPro]

Is this feature similar to Netbird or Tailscale?

[@LinuxCloudHacks]

Hi! At first sight they may look similar (as both use Wireguard) but they use different concept. Tailscale/Netbird is a mesh vpn - it tries to establish a direct connection between the sites using UDP hole-punching vs WARP connects to the nearest Cloudflare datacenter and routes the traffic via Cloudflare infrastructure (like a hub and spoke). If Tailscale/Netbird is unable to perform hole-punching it will relay the traffic through one of the relay servers (that's usually slower). Cloudflare on the other hand will always work with the same performance as the connection is outgoing from the client to the Cloudflare datacenter. Moreover once you connect to Cloudflare your Internet traffic will go out via their gateways (you'll have a public IP from Cloudflare's network). WARP also has this concept of ZeroTrust and allows you to perform network, DNS and HTTP filtering, AV scanning, SSO, protection of applications etc. It can also support MASQUE VPN that is harder to detect and block vs Wireguard (as it uses HTTP/QUIC). By no means I'm trying to discourage Tailscale/Netbird as those are fantastic products, where you can setup exit node or site to site VPN in 3 minutes. I'm just saying those two are similar but at the end of the day have different concept/assumptions or how to call it :) When you have few moments please look at this kzbin.info/www/bejne/bKuVqql6hchgpcksi=KUwkmKXOYpW2Kl0J

[@YoS2i]

Tak Polskie wersje byłyby super

[@LinuxCloudHacks]

Myślałem nad tym, ale na razie brak czasu :(

[@AdrianuX1985]

++

[@LinuxCloudHacks]

Thanks!