Tor → VPN on Qubes 4.3 / Whonix 18 with stream isolation disabled & arp_ignore=1: can this hide both Tor and Qubes OS itself from state-level DPI?

[todox]

@abdullah

Are there any VPS providers that accept Monero (XMR) and are known to work well with AmneziaWG (no logging, clean IPs)?

Amnezia WG can be user on any VPS. Just do a bit research about VPS provides.

@abdullah

• AmneziaVPN GUI vs awg-quick? What is the correct /rw/config/rc.local content for auto-start and proper DNS handling?
• Since the built-in kill switch does not work under Qubes, what exact nftables rules should go into /rw/config/qubes-firewall-user-script?

I’ve never tried awg-quick. For configuration just check guide below. For firewall configuration you can use qvm-firewall. Default amneziaWG port is 51820/UDP

Installation of Amnezia VPN and Amnezia WG: effective tools against internet blocks via DPI for China, Russia, Belarus, Turkmenistan, Iran. VPN with Vless XRay reality. Best obfuscation for WireGuard. Easy self‑hosted VPN. Bypass

AmneziaVPN – an open‑source VPN, specifically designed for reliable circumvention of DPI-censorship filters in countries with strict internet control (China, Russia, Belarus, Turkmenistan, Iran). It uses modern protocols that make the connection less noticeable to DPI systems. This is the simplest VPN for self‑hosting on your VPS. You can also use the free version or the premium version in the GUI App. AmneziaVPN undergoes annual security audits: AmneziaVPN Security Audit by 7ASecurity - 7ASe…

@abdullah

After setting sys-whonix NetVM = sys-vpn and applying uwtwrapper_global="0", does Tor Browser require any additional proxy removal steps?

I’m not sure but probably step with uwtwrapper_global="0" is not required to make it work. But you need to test it self.

@abdullah

How exactly do I set sys-whonix as ClockVM and UpdateVM for all other qubes? Qubes Manager or qubes-prefs command?

check Qubes Global Config