The answer is an SSH reverse tunnel. Have privoxy running in the rPi listening on localhost. Have it then connect to your home server via SSH with reverse tunnels enabled, tunneling the privoxy port. On your home server you run another instance of Privoxy that’s listening in your home network and proxy forwarding over the tunnel and you’re done.
I made one years ago that pretended to be an Ethernet adapter as soon as you plugged it into your USB port.
it would boot, connect to WiFi, then connect to VPN, and the laptop it was plugged into would then use that as the primary network source as if it was connected to a lan.
downsides:
WiFi sucks and I only saw ~ 250mb connections
USB is slow capped at 450mb
but it does work in a pinch.
I think RPI A and B were gadget capable but they dropped support after rpi2 was released.
don’t forget you’re going to need to setup the proper routing tables and install a DHCP server(maybe…might be able to do static routing but I found it easier to just install dnsmasq).
You’re just describing a dozen different things that fit this mold, so let me throw some out there and you can decide what does what you want:
SOCKS
STUN
Haproxy
Reverse Proxy
These all do what you want if you’re taking the steps to automate pointing to them from whatever your destination endpoint might be. So then you’re basically NOT using a VPN, and only a proxy.
Honestly, I’d just install OpenWRT on the Pi and try out different plugins to find what does what you want. You can honestly simplify this all by using Dynamic DNS in the first place to just have a predictable hostname.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
The answer is an SSH reverse tunnel. Have privoxy running in the rPi listening on localhost. Have it then connect to your home server via SSH with reverse tunnels enabled, tunneling the privoxy port. On your home server you run another instance of Privoxy that’s listening in your home network and proxy forwarding over the tunnel and you’re done.
I used to use this setup for pen testing.
Used to. Why no longer?
I don’t do that for a living anymore
sounds like you want a rpi-zero Ethernet gadget.
I made one years ago that pretended to be an Ethernet adapter as soon as you plugged it into your USB port.
it would boot, connect to WiFi, then connect to VPN, and the laptop it was plugged into would then use that as the primary network source as if it was connected to a lan.
downsides:
but it does work in a pinch.
I think RPI A and B were gadget capable but they dropped support after rpi2 was released.
don’t forget you’re going to need to setup the proper routing tables and install a DHCP server(maybe…might be able to do static routing but I found it easier to just install dnsmasq).
You’re just describing a dozen different things that fit this mold, so let me throw some out there and you can decide what does what you want:
These all do what you want if you’re taking the steps to automate pointing to them from whatever your destination endpoint might be. So then you’re basically NOT using a VPN, and only a proxy.
Honestly, I’d just install OpenWRT on the Pi and try out different plugins to find what does what you want. You can honestly simplify this all by using Dynamic DNS in the first place to just have a predictable hostname.
This would be easy with
ssh -D 8000 remotehost. I actually do exactly this every day, but not from a Pi, and with a bunch of-Lforwards too.Configure your browser to use 127.0.0.1:8000 as a socks 5 proxy and voila.
Bonus points for having a proxy.pac file with more advanced proxy configuration logic.
Also check out sshuttle.