Abut VPN in Whonix Workstation

Qubes-Whonix
1

Hello everyone, first of all, many thanks to this excellent team of developers.

There are many sites that do not accept the Tor network. So I tried to install a VPN inside my workstation. It only shows connected with openvpn but no internet. Other connection types do not connect directly anyway. But even though it shows connected with openvpn, internet is not coming. What should I do? Is it possible to configure it so that the VPN provider always sees only the TOR network? Thanks!

Also, I’m using Whonix Xfce, does Qubes have a different system?
I want this / User → → → .Tor VPN Internet`

1 Like
2
2 Likes
3

Unfortunately this issue is not Whonix-specific:

Even if you manage to successfully configure a VPN within Qubes-Whonix, your VPN may still be detected and blocked:

The VPN may work If the IP address range is provisioned from a residential ISP. The Tor Project team has also acknowledged geo-blocking issues in the past:

However, ephemeral exit bridges for Tor (EEBT) and exit bridge Onion Services (HebTor) do not seem to be a significant priority at this point in time.

2 Likes
4

Thank you very much for the excellent information and support. I have been trying to solve this problem for almost 2 days without sleeping.

I got some information. I was using Whonix and I started to think that using Cubes was definitely a better decision for this situation. But as far as I understand, Cubes, unlike Workstation, is not forced to work with the TOR network.

The VPN IP can access everything I’m trying to access right now. So building a system in the order below is more than enough for me.

So TOR > VPN > INTERNET is a perfect option for me.

When I do this in cubes, do I create 2 different Gateaway?

So Tor Gateaway > VPN Gateaway > VM Workstation

Is it going to be like this?

How can I most efficiently set up a system so that the VPN can always see the TOR IP and the VPN IP can go out?

Bonus question: When I open a VPN on the host computer, does Whonix Gateaway’s TOR node see the bare IP or the VPN IP?

I am already grateful to everyone!

1 Like
5

Separate VPN-Gateway: User → VPN → Tor → Internet

Using Terminology for Support Requests required.

See Modified Configuration Location - Comparison Table.

See also Connecting to a VPN before Tor (User → VPN → Tor → Internet) see:

What’s the difference of installing a VPN on the host OS versus installing on Whonix-Gateway?

1 Like
6

Patrick thanks for the articles, I found a lot of useful stuff.

But I want to ask you a specific question, I don’t use Cubes, I only use Whonix Gateaway and Whonix Workstation (thanks for this excellent technology).

I just want to confirm a few things since you are the expert.

I have a VPN on my main computer in the form of an app and I am using Gateaway. Is Gateaway going to use the IP from this VPN no matter what? Is there a possibility that it could connect to the router by mistake? Does Whonix use NAT under all circumstances and is the NAT connection always secure?

Does it matter if my VPN connection is UDP or TCP?

Will the entry node that the Gateaway connects to always see the VPN IP on the computer?

I have gone through the articles, but I would be very happy to hear a few sentences from you. Eternal gratitude, thanks.

1 Like
7

You would need a fail-closed mechanism.

Whonix-Workstation, Whonix-Gateway (which is a Tor-Gateway) combination protects against leaks outside of Tor.

A VPN-Gateway with similar protection against leaks for non-Qubes is undocumented.

related:

1 Like