Show HN: SmokeVPN – All-in-One WireGuard VPN Hub – Switch Exits in Realtime

Posted by lobito25 23 hours ago

I have started developing a prototype of a WireGuard VPN hub, where I could set a custom exit to a specific device, for example, my TV box would use a VPN in Germany, while my desktop a VPN is Serbia and I could switch the exit in realtime without having to stop the VPN connections and consequently no disconnections (ssh, etc).

The project grew, and I ended up adding SOCKS5 and HTTP proxy, Tor exits, exit pools, random exits, timed exits, and exits/routes based on domains or IP addresses. I also added an in-house DNS with several default block lists (malware, gambling, social media, etc.)

I found this project to have potential and decided to commercialize it, Smoke VPN was born.

The logs live entirely on the RAM, and I plan to open-source the full stack as soon as I get feedback from real users, people like you...

Can you please try the project for free for 7 days or 50 GB (whichever comes first)?

You don't need an account, email or password and you can add up to 10 devices.

Real feedback is truly welcome!

Comments

Comment by akerl_ 23 hours ago

Some questions:

> Your 16-digit account number is your login - anyone who has it can use your account, and it cannot be recovered if you lose it.

Can you explain the intent here? 16 digits seems to be nowhere near the threshold that's viable for any user authentication in 2026, especially given "Your own devices on one account can still talk to each other, like a small private LAN.".

> Acceptable use. We're logless and don't monitor what you do - but illegal or abusive use is not allowed and puts the whole shared service at risk. No spam, and zero tolerance for child sexual abuse material.

If you're not logging, how are you enforcing this? And relatedly, are you "logless" or do "traffic logs live in memory only and are scrubbed"?

> I plan to open-source the full stack as soon as I get feedback from real users, people like you

Why wait?

Comment by lobito25 15 hours ago

yeah the account number is basically the mullvad model, 16 digits, no email no password. its a tradeoff, i know some people hate it. login is rate limited server side so you cant just sit there hammering numbers at it. is it weaker than a long passphrase? probably yeah. the flip side is theres no personal info sitting in a database for someone to leak, or for someone to show up with a subpoena for.

on the local network point, thats only your own devices seeing each other. traffic between different customers is blocked.

logs, our thing is reactive, we're not sitting there watching everything. we act when we get an abuse report. some of it is just blocked structurally anyway, port 25 is closed so no spam is coming out of there. and we keep zero logs. child abuse material, account gets terminated if we get a credible report or a legal notice, but we dont proactively scan, thats not really possible when the traffic is encrypted and theres nothing logged to scan in the first place. the only thing counted is aggregate bytes per account for the quota and the trial. not what, not where.

and honestly, this is a one person project. code needs cleanup, secrets and config need to come out, and it needs a proper security pass before its safe to publish.

Comment by lobito25 22 hours ago

[dead]

Comment by lobito25 23 hours ago

I didn't mention on the original post, but the server currently has 84 exit servers in 45 countries.

Comment by koko3tallah 23 hours ago

[flagged]