tasket / qubes-tunnel Goto Github PK

It would be nice if this supported wireguard as a protocol in addition to openvpn (I assume naming it "tunnel" and not "openVPN" is due to this intention). It has a smaller and more auditable code base than OpenVPN. It also uses more secure crypto primites by default. And, it will be integrated into the kernel directly. Lastly, it is faster than OpenVPN: https://www.wireguard.com/performance/

Azire, as they are helping to promote wireguard, is offering everyone a free wireguard vpn account: https://www.azirevpn.com/

First, thanks a lot for your work and keep it up!

in README.md

Installation:

1. Install 'qubes-tunnel' using apt-get or dnf in template, or download qubes-tunnel from github and copy to template:

add the code line how to install git / github on the template
git clone https://github.com/tasket/qubes-tunnel.git
qvm-copy qubes-tunnel

3. If you downloaded the github project, open a template shell then:

cd qubes-tunnel
should be
cd qubes-tunnel-master

in vpn.md
the remark:

In Qubes R4.0, an AppVM that 'provides networking' takes the place of ProxyVM, although they function in the same roles. Here the term 'ProxyVM' will be used to refer to both this type of R4.0 qube as well as its R3.2 counterpart.

should be on the beginning of the ProxyVM chapter

image links are broken:
Set up a ProxyVM as a VPN gateway using NetworkManager
Create_New_VM.png
Settings_services.png
Setting_NetVM.png
feel free to reuse my screenshots

Set up a ProxyVM as a VPN gateway using the qubes-tunnel service
3. Test your client configuration!

please add more information / explanation on the code lines
sudo openvpn --cd /rw/config/qtunnel --config qtunnel.conf --verb 3
ping 8.8.8.8
adding
traceroot 8.8.8.8
as additional test

Using both fedora-34 and debian-11 templates, Qubes-tunnel and Qubes-vpn-support no longer work after upgrade to Qubes 4.1.

See discussion here:
https://forum.qubes-os.org/t/qubes-tunnel-blocking-all-traffic-including-vpn/9305/5

What is your suggestion to have an easy switch between VPN servers ?
Should I setup several ProxyVMs (one for each server, cascade config) and select the proper one in the AppVM settings before launching it ?
Do you see any 'VPN-server-GUI-click-list' solution in future ?

A full text of the setup process is here.

https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service

above link is broken it is the full guide to installing the proxyvm using qtunnel

Hi,

would you please consider including a script to build tun2socks on a proxyVM so that users could also perhaps use socks5 for connections.

thank you