Help with setting up a vpn conncection

white10491 · February 4, 2022, 2:01pm

Hi,

I (Linux noob) love Qubes so far and the documentation on the website is also amazing. The only problem i have is setting up a vpn. I read the official info and many forum posts but i am still not sure what the right/best way is (some solutions are also somewhat old with people saying it doesn’t work anymore). I want to use mullvad (openvpn/wireguard the one that works best) in debian11/ fedora34.

What i want:

completely leak proof and secure setup
i want to connect some templates/appvms and standalones (Fedora/Windows) to the vpn. (separate connections on every vm and also change them sometimes)
doesn’t need much maintenance

Whats the best way to do it? (a somewhat beginner friendly way would be nice but i still want the best setup possible for me)

(A detailed explanation would be very nice)

Qubesquark · February 4, 2022, 2:24pm

This method works very well.

Using Mullvad VPN in Qubes | Micah Lee

oijawyuh · February 4, 2022, 7:03pm

Hi. I tediously followed the ProxyVM as a VPN gateway using iptables and CLI scripts instructions here to make a VPN Qube, and it works. Since Fedora 34, this method only work in Debian-11.

github.com

Qubes-Community/Contents/blob/master/docs/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-iptables-and-cli-scripts


How To make a VPN Gateway in Qubes
==================================

<div class="alert alert-info" role="alert">
  <i class="fa fa-info-circle"></i>
  <b>Note:</b> If you seek to enhance your privacy, you may also wish to consider <a href="/doc/whonix/">Whonix</a>.
  You should also be aware of <a href="https://www.whonix.org/wiki/Tunnels/Introduction">the potential risks of VPNs</a>.
</div>

Although setting up a VPN connection is not by itself Qubes specific, Qubes includes a number of tools that can make the client-side setup of your VPN more versatile and secure. This document is a Qubes-specific outline for choosing the type of VM to use, and shows how to prepare a ProxyVM for either NetworkManager or a set of fail-safe VPN scripts.

Please refer to your guest OS and VPN service documentation when considering the specific steps and parameters for your connection(s); The relevant documentation for the Qubes default guest OS (Fedora) is [Establishing a VPN Connection.](https://docs.fedoraproject.org/en-US/Fedora/23/html/Networking_Guide/sec-Establishing_a_VPN_Connection.html)

### NetVM

The simplest case is to set up a VPN connection using the NetworkManager service inside your NetVM. Because the NetworkManager service is already started, you are ready to set up your VPN connection. However this has some disadvantages:

- You have to place (and probably save) your VPN credentials inside the NetVM, which is directly connected to the outside world
- All your AppVMs which are connected to the NetVM will be connected to the VPN (by default)

This file has been truncated. show original

white10491 · February 5, 2022, 11:35am

thanks i will check it out!

oldschool · February 17, 2022, 4:03am

I just setup a VPN using the above proxyvm link, and yes, it works great! Love it!

I created a couple private VPN servers using the github Nyr openvpn install script:

w00t!