Hi all,
I feel so at risk whenever I use a public (open) WiFi access point that then requires a password (like at a hotel) or makes me agree to so called "terms of service." (And then replaces all browser pages with their advertising...) I'd like to set up a VPN to protect my network traffic in such situations.

I understand that another common use of a VPN is to extend my home network but that's not at the top of my list. It would be a convenience though.

I'm wondering what the trade offs are between hosting a VPN server in the cloud vs. on a server on my home network. (I would be using some kind of dynamic DNS to locate my VPN on a home server.)

In the cloud, none of my personal information is exposed. If the server is compromised, my home LAN remains protected. It could cost money and might be a bit more difficult to administer.

On my home LAN it would give me more ready access to local resources and would not incur any additional expense. It would also provide an additional point which could be compromised.

My home LAN uses a firewall in the WiFi router which blocks all incoming connections except SSH on a non-standard port. I can get in through that and pretty much get access to anything I might need while away from home.

I could pay for a VPN service but it seems to me that I'd just be shifting the security issue from the local unsecured LAN to something under someone else' control. I suppose that's better but not as good as setting up my own VPN.

I think I'm talking myself into a VPN in the cloud but I think it still worth asking those more familiar with network security if there are things I have not considered.

Thanks!

I would never use cloud based services mainly because their terms always include something like "We reserve the right to access your service........etc.

It is usually said to be so that they can check that you are not doing anything illegal, but the access is open to anyone working there including that snotty nosed 15 year old working there during his holidays that hasn't been security checked.
Plus the fact that traffic is often not encrypted securely between you and them.
I also cannot accept that cloud based back up is secure since it is far too easy for such companies to just disappear and "awfully sorry about your lost data old chap". I prefer to be in control myself.

1 members found this post helpful.