Is This VPN Setup Correct? (work→sys-vpn→sys-firewall→sys-net)

[B_ryr]

So am i correct in this networking scheme when setting up my “vpn”??
(work/personal/misc domains) > sys-vpn > sys-firewall > sts-net = ClearNet access (youtube,duckduckgo…etc)

[fsflover]

Do We Need Firewall-qube After Sys-VPN? (Qubes-vpn-support)

Continuing the discussion from Secure VPN VMs in Qubes OS: The official Firewall documentation recommends to have separate VPN and firewall VMs. sys-net <--> sys-firewall-1 <--> network service qube <--> sys-firewall-2 <--> [client qubes] I have successfully set up a Mullvad vpn Qube using Qubes-vpn-support (that I have read many recommendations on searching the forum) and Wireguard (does Mullvad even still support openvpn? I can’t find configurations files for it). The GitHub page, however, …

My VPN setup re-explained

This is a side-topic that started in this thread with @newbie. This is all more or less based on an excellent blog post by Micah Lee. I’ll try to explain again with more detail: sys-net is a HW VM that “has” the PCI devices needed to connect to networks (i.e. Ethernet, WiFi). In my case this VM is also disposable. sys-clearnet is a proxy qube that has sys-net as a netvm (get’s its connection from sys-net) and functions as a firewall. What that means is: it will enforce the firewall se…

[B_ryr]

Next questions…
Can anyone tell what vpn service you are using?
If so how could they?

[Sven]

Can anyone tell what vpn service you are using?

Hi @B_ryr this is a typical “All Around Qubes” question that is kind of off-topic (because not Qubes OS specific), but still interesting to pretty much everyone using Qubes OS. For this purpose we have created the respective category, and since you are trust level 2 you can participate in it.

Some time ago I started this thread, which has grown a lot and is not yet concluded. It appears you have some reading to do

[B_ryr]

Thank you, i will check out the thread…

[joe.blough]

That’s how I have it though I’m debating about the effectiveness of making the sysVM disposable. It’s kind of a nice piece of mind knowing or believing it’s a clean slate on every restart.

[deeplow]

This sounds like a better candidate for the topic which vpns do you use? (accessible only to trust-level 2+ users). Shall I move it there?

edit: this has been moved there now.

[B_ryr]

@deeplow as you like