Rotating VPN IP

Router
1

Hey, I know this has been asked previously and at that time there didn’t appear to be a satisfactory answer. My requirement is for a rotating IP address for VPN clients connecting to a commercial service such as NordVPN or ProtonVPN. The reason being that fingerprinting avoidance is kind of difficult if the IP stays the same. I know there are also rotating proxy services but that opens up another potential hole. Ideally I would like to force an IP address rotation every 30 mins, Even better would be a server rotation as well. So for example, create a profile with say 10 servers in Paris and rotate them every n minutes.

My guessing it might be possible with a script and cron job, anybody got anything pre-baked or have any better ideas?

An alternative is to just run the VPN on the end client and forget about the VPN on the router but I’d rather explore router based solutions.

Of course a nightly router restart will have a crude rotation within the same server but I would like something more granular and frequent.

The Safari browser with private relay appears to be one of the better anti-fingerprinting options out there - not a lot of use on my non apple devices though.

1 Like
2

does it really need to be a vpn?

what you are asking looks very much on tor which does this rotation by default :slight_smile:

down side alot of servers are flagged though.

basically it just replaces the dns forwarder and points to the tor proxy which then gives you a differrent ip each time.

for extra security you could use a vpn inside tor.

3

I certainly use Tor from time to time and it's a great option but it does have significant performance limitations and I generally feel bad ‘abusing’ it and it's limited resources when I'm just after a bit of privacy. I'm sure there are many people undertaking worthy activities (and some probably not) that are more deserving than me. At the moment I'm playing with browser plugins that let me quickly change vpn server manually, still having a router lever catch all. Not ideal though. Qubes would be ideal but it's major faff and not worth the effort for me. Really just trying to deter as much big tech tracking as I can.

4

I don't say it is not possible with wireguard.

but it does mean they have to invent alot of design here, I know with OpenVPN this was possible to have a list of ip's it rotates.

but on Wireguard this is not build in, not in their implementation.

what I think what they could try is some type of multi hop implementation.

one wgclient and multiple peers with endpoints derived from wgclient, and then change peer and re-apply routes.

or have multiple wgclients with the exact same priv key, but only a different peer and then randomly turn on or turn off vpn.

but I'm afraid this will not go seemless and you will see disconnects, it would be much better if the external vpn had this implemented.

1 Like