I’ve got a Proxy VM set up with Mullvad VPN via WireGuard config files and it’s working great, multihop is solid and reliable. But I’m looking to level it up a bit.
What I want to do is enable Mullvad’s auto-rotating server feature within the Proxy VM itself, then use that as the primary VPN gateway for all my AppVMs connected to it. That way the rotation happens seamlessly for everything downstream without me having to manage it manually.
I know the obvious path is to just install the full Mullvad application in the Proxy VM, but I’m a bit hesitant. My concern is the attack surface, the complete app is a pretty fat binary with a lot of moving parts. If something goes wrong in there, what does that actually expose? Or am I being paranoid?
Alternatively, is there a way to trigger the server rotation through their CLI or config files without installing the whole GUI app? And how do you handle the kill switch aspect of this, like, if the connection drops, does Mullvad’s kill switch still work properly when you’re running it as a Proxy VM for other systems?
Looking for thoughts on the best approach here. Has anyone successfully done this? Would love to know what you went with and if you ran into any gotchas.