Properly setting up a VPN for all Internet traffic

[anon35146689]

Hi everyone! I’m new to Qubes OS and I’m trying to set up everything correctly. In doing so, I installed ProtonVPN following the instructions found in this post: ProtonVPN App 4.2 setup guide

However, I would like all my Internet traffic to be protected by my VPN, not just what is generated from the VPN qube itself. To do so, I would have to route the traffic of all my qubes through it, as suggested here: comment on another post

The problem is that that implies routing also the templates (my default is Fedora Xface, but Debian Xface is installed as well), sys-net, sys-firewall, sys-whonix, whonix workstation and whonix gateway, through the VPN qube. Some of these I’ve read here on the website that they shouldn’t be touched or modified, as they’re core parts of the system. On the other hand, if you don’t do that, then at least part of your traffic is not protected by the VPN, which then becomes useless. Might as well not setting up one in the first place!

Anyway, I’m sure I’m missing something because I’m new to Qubes OS.

Please help.

[apparatus]

You need to do it like this:

Preventing non-Tor connections

corridor is indeed the wrong tool for this topic. (Unless it’s installed it on your router. In that case it’s a nice fail-safe mechanism that can also point out some misconfigurations of your e.g. Qubes OS device, allowing you to fix them before you use the device with a non-corridor router.) To avoid making non-Tor connections on a Qubes OS device in the first place: Set the system’s default net qube to sys-whonix or none, and don’t override it to sys-firewall or sys-net for individual qubes…

But with your sys-vpn instead of sys-whonix.
Steps 1-4 can be done in Qubes Global Config.