Network quetion

Just out of curiosity, and I saw the [qubes-users] ANN: Qubes arbitrary network topology

Is there a way to “lock” the network device(s) to a single vm, then use that vm to run, say, pfsense, and them configure all vms to subscribe to network services through the pfsense vm and pfsense only?

Hope I don’t irritate you all too much as I start my journey into learning, using Qubes.

Hi Matt, and welcome.
I’m not quite sure what level of “locking” you want.

In general, allocate the network device to sys-net.
Make sure that the “chain” of netvms terminates with sys-net.
That’s all you need to do.

Thank you. I’ll follow that line of documentation.