How to the Qubes add sys proxy

Hello, tech-savvy experts,

This is a request for assistance.

Due to network restrictions, I aim to establish a new proxy appvm in Qubes and install the mihomo-party model (Debian 12) within it. This would route traffic as follows:

(personal or anon-whonix) — sys mihomo — sys firewall-sysnet

Ensuring all traffic from personal or anon-whonix passes through the sys mihomo proxy.

However, after installation, I encountered several issues:

  1. I installed sys-mihomo (including the mihomo-party GUI software). I can ping domestic websites, but still cannot ping Google.

  2. Do I also need to write mihomo’s config.yaml? How should I write it?

  3. Do I need to write firewall rules? To force traffic and DNS to go through sys mihomo before exiting.

  4. How do I persist the software installed via sys-mihomo, along with the config.yaml rules and firewall rules?

I confirmed mihomo-party was correctly installed within sys mihomo, provided the correct subscription link, selected nodes with latency, and chose nodes with latency.

mihomo-party is a proxy software frontend based on Clash.

Hoping an expert can offer guidance. Much appreciated. Wishing you a wonderful day.