5fxfc1+2ch7pcmy34te01rpv5qj0zj3h115fu90fwr3h7yl5u via qubes-users: > Hi everyone! > > I wanted to ask: What is the best way to use i2p in Qubes? Should I > setup a NetVM or install i2p in a TemplateVM?
This was my reply to the related Github issue[1] before I saw this post (clearly, this was the more appropriate venue for my reply). And with your main use case being torrenting, you might not want your traffic flowing over Tor (depending on what you're torrenting). 1. I2P in ProxyVM: As you found, this is challenging because you need routing and firewall rules to send the traffic to the right places. You can get an idea of how things work by following Qubes VPN guide[2] and watching Qubes SOCKS proxy issue[3]. 2. I2P in AppVM: Easy (set it up like you would normally) but less secure (misbehaving apps might be able to bypass). 3. I2P in Whonix-Workstation AppVM: Slower (traffic flows through Tor, then I2P: user -> tor -> i2p -> internet) but secure in that any leakage goes through Tor. Also fully documented[4] and somewhat supported[5]. > Also since Java is not > the most secure environment, I'm planning on using i2pd which is > based on C++. 1. "Why do I hear about so many Java insecurities? Are other languages more secure?"[6] 2. I2P Devs are no slouches to intentionally use flawed language. 3. i2pd official wiki[7] claims many advantages but security is not one of them. (flexibility, speed, efficiency, footprint) ----- 1 https://github.com/QubesOS/qubes-issues/issues/2503 2 https://www.qubes-os.org/doc/vpn/ 3 https://github.com/QubesOS/qubes-issues/issues/1536#issuecomment-265714285 4 https://www.whonix.org/wiki/I2P 5 https://forums.whonix.org/search?q=i2p 6 https://security.stackexchange.com/questions/57646/why-do-i-hear-about-so-many-java-insecurities-are-other-languages-more-secure 7 https://github.com/PurpleI2P/i2pd/wiki/Differences-between-i2pd-and-Java-I2P-router -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/15481a46-5974-4ad3-a13b-eef7a867ab3e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
