I’m having issues with Tor before VPN using the separate VPN gateway configuration.
I’ve configured a VPN using TCP and have verified that it works using sys-firewall as the net vm. I then switch the net vm to sys-whonix and the initial VPN connection works but after that I get 100% packet loss. I’ve monitored eth0 and can see a consistent stream of outgoing ARP requests asking for the MAC address associated with the remote VPN server IP. This is very strange as the correct routes exist for the remote VPN server (VPN server IP via 10.137.0.9 dev eth0) and for sys-whonix (10.137.0.9 dev eth0 scope host onlink). I have verified that the routes are the same when connected to sys-whonix as when connected to sys-firewall, with the IPs adjusted of course).
I’m using qubes 4.1, whonix-gw-16. The last working configuration I had for tor before vpn was with qubes 4.0 whonix-gw-15. I’ve used the exact same configuration for both. OpenVPN version is 2.5.1. This is all inside a debian-11 vm.
I was certain this was an OpenVPN bug until I confirmed it only occurs when connected to sys-whonix. I have no idea how to even begin to move forward.