On Tue, Sep 04, 2018 at 08:01:27AM -0700, drogo wrote: > Is there an easy way to re-direct network traffic from disp VMs? I've already > got a separate router for some outbound traffic, and would like to send > traffic to that as a default gateway rather than my usual default gw. > > Doing a quick look over the config (of sys-net), it seems like I might need a > whole new sys-net serviceVM (and associated interface). Or is there an easier > way? > > Thanks. >
You certainly can set up a new netvm, and I think that's the cleanest way of doing this. An alternative would be to attach a second firewall to sys-net and change the routing on sys-net so that traffic is passed to different gateways, depending on which iface it comes in on. You'll also have to adjust the NAT rules for DNS to make sure that DNS is also redirected appropriately. I would only do this if I had real performance issues, and couldn't afford the overhead of another qube running, or only had 1 NIC available. Otherwise separate netvms per gateway is quick and easy to set up, and guarantees traffic isolation. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180905104846.khii6thknn4wmuob%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
