Network quetion

Just out of curiosity, and I saw the [qubes-users] ANN: Qubes arbitrary network topology

Is there a way to “lock” the network device(s) to a single vm, then use that vm to run, say, pfsense, and them configure all vms to subscribe to network services through the pfsense vm and pfsense only?

Hope I don’t irritate you all too much as I start my journey into learning, using Qubes.
Thanks,
Matt

Hi Matt, and welcome.
I’m not quite sure what level of “locking” you want.

In general, allocate the network device to sys-net.
Make sure that the “chain” of netvms terminates with sys-net.
That’s all you need to do.

Thank you. I’ll follow that line of documentation.