On 05/27/2017 06:09 PM, rob_66 wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hello all.
What do you think would produce the best balance between security and
speed?
1. Running AirVPN's client 'Eddie' in sys-netVM.
2. Putting AirVPN's OpenVPN config into Turris Omnia 2 GB router.
3. Setting up a VPN gateway in Qubes as described in Qubes' docs.
Hardware: Asus »Zenbook«, Intel i5-5200U, 2.20 GHz, 12 GB RAM.
Any hint is very much appreciated.
Best regards,
rob
Best overall approach is to download your service's openvpn config files
and continue with the doc instructions or the slightly fancier setup here:
https://github.com/tasket/Qubes-vpn-support
The one at the link (my own project) configures the link as a systemd
service... gives you more control. The anti-leak measures are the same.
I haven't looked at 'Eddie' but usually these proprietary tools assume
you are configuring a traditional PC. OTOH, Qubes proxyVMs are akin to
_routers_ so protection features in Eddie et al might not work. (Anyway
it would go in a proxyVM, not sys-net.) There was some discussion here I
think about Mullvad and that service's special tool, and ultimately it
was better to download the config files and use the Qubes-specific
instructions.
As for Turris Omnia router setup, it depends on how much you trust the
security of that router -- generally, openvpn is safer in Qubes than in
router hardware (even the 'impressive' ones).
--
Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/86a16253-319b-d2ac-ac68-a025054e9c01%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.
