Hello i am checking ip of Whonix gateway and workstation and i don’t know why but they are different how its possible i am checking while sending a curl request and i verified on browser too how its possible, in Whonix are we running 2 different tor in same time even in terminal’s ?
How are you “checking the IP address”? If you’re using “what is my IP” services online, then this is expected and intentional behavior. Different connections to different websites will go through different Tor circuits, thus they will usually end up with different Tor exit nodes and therefore different IP addresses. This helps preserve your anonymity by making it harder to correlate actions you take at the same time. See:
If you’re using the ip command-line tool to see what IP addresses each VM thinks it has, then you’re probably just looking at different local IPs, which is how the networking systems in Linux are able to tell that the gateway and workstation are two different machines. That’s necessary for the two to talk to each other.
1 Like
Thanks for your reply, i am using curl command in Whonix gateway and in workstation and i know when you type curl in gateway it changes IP so i am using with tor proxy 127.0.0.1:9050 this way its still using same IP and in workstation i am just using curl.
If you mean that you’re using a special command in the gateway to get the IP address to be the same whether you’re using the gateway or workstation… don’t do that. Stream isolation is an anonymity feature, thwarting it is harmful to yourself in the foot in 99% of circumstances. (You really shouldn’t be using curl in the gateway at all if you can avoid it; the gateway is supposed to just be “there” to make Tor work, and everything you do should be done in the workstation. That’s how Whonix assumes its going to be used, and it’s the only way of using it that preserves your anonymity if a compromise occurs, since a compromise would only affect the workstation and the workstation is incapable of leaking your identity. If you do work in the gateway, it can be compromised, and if the gateway gets compromised, your identity will be leaked.)
2 Likes
No. By design.
1 Like