why won't Lemmy let me comment or post unless Idisconnecte from my vpn
That's it, I get an error message whenever I try to post or comment if I'm connected to my VPN, butnot trouble if I just get disconnected.
Does not fit the idea of decentralized social media I had, but overall I'm mainly curious as to the reason why it is so.
Lemmy has nothing in its code that blocks VPNs. Unfortunately a lot of instances use cloudflare and other man-in-the-middle services that do block VPNs.
You are commenting on a lemmy.world community, but your connecting to sh.itjust.works, who then talks to lemmy.world. Your VPN isn't connecting directly to lemmy.world
Because so many bad actors use VPNs for ban evasion or span sources, blocking the VPN endpoints from posting or commenting is a low hanging fruit way of dealing with some spam. This is Lemmy.World stance.
There are many others instances that work over VPNs so in the spirit of decentralization you can use another instance to access lemmy.world content.
Aye good to know some instances block VPNs , didn’t know that. As a user from China who has to use a VPN always that would be problematic. Guys I got lucky with my instance.
It might depend on the lemmy instance you are posting to (lemmy.ml) and/or where you have your account (lemmy.world), because I don’t think that this is built into the AP protocol.
I suspect at least one of these uses some kind of filtering mechanism that blocks VPN users, like cloudflare’s CDN.
Get a free VPS from Oracle cloud in whatever region you want, run Wireguard on it. There, now you have a VPN that you control, and since it’s hosted by Oracle, and not a VPN company, there’s no way to “detect” it.
Many services block these because, as you are pointing out, standing up VPN tunnel routing on a cloud instance is sort of trivial. Cloud providers publish these ranges specifically so anyone can block them easily. If lemmy.world is not blocking Oracle Cloud already, it's only because they just haven't come around to it.
I assure you that's detectable. The VPN detector I know, classifies all cloud providers as VPN as a matter of course, because no normal user would be coming from a cloud network.