Question about sys whonix to do different tasks for each Qubes

Hellow all

I have a question about Phonix workstations and gateways. I want to work on a cube that is completely unrelated. For example, I want to do completely different work on cube A and cube B so that outsiders don’t know the connection between cube A and cube B at all. Therefore, I am thinking of using different templates for each cube.

However, Whonix has two elements: a workstation and a gateway. I’m thinking of making workstations possible by creating multiple workstation templates. But in this case, you don’t know how to handle the gateway. I know the gateway is connected to syswhonix.
However, I have not connected the other cubes to the gateway. Is it okay to continue like this? In this case, how can the gateway be more anonymous? By the way, both Cube A and Cube B are assumed to use the same syswhonix.

1 Like

Thank you. I think the most important part for me is the content of the following article.

{How to use Multiple Whonix-Gateway}

・Article Content

{Please ensure that the newly created sys-whonix is based on the whonix-gateway-17 Template and has a distinctive VM name, so it is not confused with other VMs. Additionally, it is recommended not to run multiple Whonix-Gateway instances in parallel, see Multiple Whonix-Gateway.}

So what this is indicating is that you can’t set up multiple different Whonix-Gateways on sys-whonix, so you can’t use them at the same time?

In other words, if I use different Whonix-Gateways with different Whonix app Qubes, do I have to manually change the Whonix-Gateway that is set to sys-whonix each time?(Set Whonix-Gateway{A} to sys-whonix when using whonix app Qube {A}, and set Whonix-Gateway{B} to sys-whonix when using whonix app Qube {B}).

Also, this time I put the question to {support} instead of {Qubes whonix}. If necessary, resubmit it to {Qubes whonix}.

Unspecific to Qubes. Applies to Whonix generally.

You can, but it’s discouraged. Rationale: Only Use One Online Pseudonym at the Same Time

This is actually even unspecific to Whonix. It’s a general principle.

It’s not nearly as messy as that. It’s much simpler. For example one could use?

anon-whonix1 → sys-whonix1
anon-whonix2 → sys-whonix1
anon-whonix3 → sys-whonix1
anon-whonix4 → sys-whonix2
anon-whonix5 → sys-whonix2
anon-whonix6 → sys-whonix2

Why use multiple App Qubes with the same sys-whonix? To separate applications but use the same identity.

Why use different multiple App Qubes with a different sys-whonix? To separate applications and identities.

These can be permanently configured that way. No need for repetitive configuration changes. In other words, you can configure this once and keep using it until you decide to app/remove VMs.

1 Like

Thank you for your answer. First of all, I want to organize the story. In other words, because whonix is connected as follows, changing only Whonix’s AppQube does not completely maintain anonymity.

whonix-gateway > sys-whonix > whonix-appQube

Therefore, This means that you can increase anonymity by creating multiple whonix-gateway and sys-whonix as follows.

whonix-gateway1 > sys-whonix1 > whonix-appQube1

whonix-gateway2 > sys-whonix2 > whonix-appQube2

Is it the same with respect to sys-net sys-firewall as well as sys-whonix? (I think it’s the same because you said it’s the same, but this is confirmation)

That’s not what Multiple Whonix-Gateway does.

It’s discouraged as per: Refrain from “Tor over Tor” Scenarios

1 Like

You should create a new Sys-Whonix in the Multiple Whonix-Gateway way. Understood.

But I read the article about “Tor over Tor” Scenarios, but I don’t really understand it. Are you saying that “Tor over Tor” Scenarios can happen in my way? Does that mean that if you run whonix1 and whonix2 at the same time, you have a total of 6 hops with 3 of each, but the same thing can be mixed in those hops?

Also, do I need to create a similar method for sys-net and sys-firewall for each Qube? How can it be made? If answering in this thread is not appropriate, I will start another thread.

Yes.

Yes.

No.

Documentation is complete as is. No additional information required in top of what is in the wiki.

Multiple sys-firewall / sys-net are purely up for Qubes, not Whonix supports.

1 Like

{Multiple sys-firewall / sys-net are purely up for Qubes, not Whonix supports.}

That’s certainly true. However, when using whonixQube, do I need to duplicate these systems and use them for each whonixQube? This may be a question that is out of the box of this forum, but I mentioned sys-firewall/sys-net with that intention.

No.

Documentation is complete as is. No additional information required in top of what is in the wiki.

When I checked, it was correct. I misunderstood. sys-firewall and sys-net don’t seem to be related to whonix.

Thanks for the answer, I will try to adopt the method you presented.:grinning_face_with_smiling_eyes:

For reference, what that is, see:

and/or

That, I guess, would be this wiki chapter:
Disable Transparent Proxying

For reference:

1 Like

Thank you very much. I learned a lot.