-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 rob_66: >> What do you think would produce the best balance between security >> and speed? >> >> 1. Running AirVPN's client 'Eddie' in sys-netVM. >> >> 2. Putting AirVPN's OpenVPN config into Turris Omnia 2 GB >> router. >> >> 3. Setting up a VPN gateway in Qubes as described in Qubes' >> docs. >> >> Hardware: Asus »Zenbook«, Intel i5-5200U, 2.20 GHz, 12 GB RAM.
Chris Laprise: > Best overall approach is to download your service's openvpn config > files and continue with the doc instructions or the slightly > fancier setup here: > > https://github.com/tasket/Qubes-vpn-support > > The one at the link (my own project) configures the link as a > systemd service... gives you more control. The anti-leak measures > are the same. > > I haven't looked at 'Eddie' but usually these proprietary tools > assume you are configuring a traditional PC. OTOH, Qubes proxyVMs > are akin to _routers_ so protection features in Eddie et al might > not work. (Anyway it would go in a proxyVM, not sys-net.) There was > some discussion here I think about Mullvad and that service's > special tool, and ultimately it was better to download the config > files and use the Qubes-specific instructions. > > As for Turris Omnia router setup, it depends on how much you trust > the security of that router -- generally, openvpn is safer in Qubes > than in router hardware (even the 'impressive' ones). Hello again. Even as a medium talented/experienced Qubes and Linux user I managed to run your »slightly fancier« setup successfully in less than an hour, following the instructions slowly, step by step. Speeds are impressive also, > 60 MBit/s (100 MBit max. according to the ISP) – I never reached this with my VPN before, neither with the »impressive« Turris Omnia. AirVPN's 'Eddie' client seems to work fine, too, but I'm not sure if the protection features are working correctly. Maybe more advanced users would get a grip on 'Eddies' numerous settings. Thank you so much, Chris! Best regards, rob -----BEGIN PGP SIGNATURE----- iQIwBAEBCgAaBQJZKrlRExxyb2JvdGljb0Bwb3N0ZW8uZXMACgkQxPzEC1AWVIXX OQ//UqX2moA7iIYJRC4+JqZotFtV/AyqLg6Iiw4w684y6paQRUTvR9T/NfBNSrv9 H7OrEndjGpMlzklRRlXmHEYnSsZyOHWc0dlPnrqfd/8uuaNDjqCNR2XhrjxSBTrs Szdn4StKqg8McKkAurli6r1mhQNT0hcyC5KU/mnu0tW2f3HNk4giK4Rv9zIQdjbi u8XfWxAlApgbYgMaTFNtUASBCJYVc8SFdTwRy1i+Jl24ga8B/uBmM0mZEXEZ5NOa OpF6PRbs89I8UiQE0PhtsrPuIupX+8BpZpOuNFbpXNc0gKJWIMOMtOYgbNZpouFu 7JlJe+UwuNS6EZbgKLqw7f6eQz0zGf3YMZHbx61TmAYRDzcJiKzwApZ6eHRr9WL5 wYKBTdSDdobC5VxsfDYOXN6HEc2DvRiajBPSpUgPPNDIfh1Qx+Yz308koYCBW5CS o8iRaH76q/bwQByHc/4QfLfAZqwTlgLmV9HsJb7pPe0LhUADh9HUL7Zae/VOygEz puIA97EUqn3GgyXuKANfT6mfMqZPtcQQSvfz/+dRjxMPJP+4xsJ6couYdEtPJCxj q0mTztLotME064ica9aECONRHERqQairezVgsy2wpPkqcSqZbYCMIAy4olkFGw7N 1/DL9B0BvA9j8/BqnMtwaBm6ZoeRJwVTCBAcDH7SYNaO83g= =Y/Xw -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d991e9f3-9435-8fe7-2853-9b6a97dc786e%40posteo.es. For more options, visit https://groups.google.com/d/optout.
