On Wednesday, September 5, 2018 at 6:48:50 AM UTC-4, unman wrote: > On Tue, Sep 04, 2018 at 08:01:27AM -0700, drogo wrote: > > Is there an easy way to re-direct network traffic from disp VMs? I've > > already got a separate router for some outbound traffic, and would like to > > send traffic to that as a default gateway rather than my usual default gw. > > > > Doing a quick look over the config (of sys-net), it seems like I might need > > a whole new sys-net serviceVM (and associated interface). Or is there an > > easier way? > > > > Thanks. > > > > You certainly can set up a new netvm, and I think that's the > cleanest way of doing this. > > An alternative would be to attach a second firewall to sys-net and > change the routing on sys-net so that traffic is passed to different > gateways, depending on which iface it comes in on. You'll also have to > adjust the NAT rules for DNS to make sure that DNS is also redirected > appropriately. > I would only do this if I had real performance issues, and couldn't > afford the overhead of another qube running, or only had 1 NIC > available. > Otherwise separate netvms per gateway is quick and easy to set up, and > guarantees traffic isolation. > > unman
Thanks! I had a second interface available, so I got it setup pretty easily. Now I just need to get the firewalling squared away so I can isolate the traffic away from the rest of the internal network. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/94905f34-224f-47a9-b341-0ff6a7f8c0a3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
