How to set up a VPN kill switch"

[solene]

Thanks @apparatus

That guide only explain how to prevent traffic to be forwarded if the VPN is not up, but from within the qube, this is practical when using the VPN provider App because you can’t guess the IP : PORTS for the firewall. The drawback is that the qube itself is able to remove the killswitch if it’s compromised (or if you mess with nftables rules)

The only killswitch that will block the traffic for sure, but requires to know the VPN endpoint IP and port, is this one (it’s a direct link to the killswitch section)

Wireguard VPN setup

Good news, with fedora-38 the network manager supports Wireguard out of the box! The only thing required are extra firewall rules in the VPN qube, as explained in the community documentation about VPN. What you’ll need This guide assumes you are using a VPN service that has wireguard support, most of them do, but you can also add your own if you have a server. ProtonVPN has a free plan, it has limits but gives you a fully working VPN and they support WireGuard. This pro…