(Looking for) Best Practice Guide: Using OpenVPN for Hack The Box / TryHackMe on Qubes OS

[solene]

You can use my wireguard guide, just replace wireguard config by openvpn config in network manager. This take care of DNS, firewall and everything.

Wireguard VPN setup

Good news, with fedora-38 the network manager supports Wireguard out of the box! The only thing required are extra firewall rules in the VPN qube, as explained in the community documentation about VPN. What you’ll need This guide assumes you are using a VPN service that has wireguard support, most of them do, but you can also add your own if you have a server. ProtonVPN has a free plan, it has limits but gives you a fully working VPN and they support WireGuard. This pro…

To go further, add a sys-firewall-vpn qube between the appvms and the VPN qube. It’s just a disposable providing network.