Redirection of DISP network traffic

25 views
Skip to first unread message

drogo

unread,
Sep 4, 2018, 11:01:27 AM9/4/18
to qubes-users
Is there an easy way to re-direct network traffic from disp VMs? I've already got a separate router for some outbound traffic, and would like to send traffic to that as a default gateway rather than my usual default gw.

Doing a quick look over the config (of sys-net), it seems like I might need a whole new sys-net serviceVM (and associated interface). Or is there an easier way?

Thanks.

unman

unread,
Sep 5, 2018, 6:48:50 AM9/5/18
to qubes-users
You certainly can set up a new netvm, and I think that's the
cleanest way of doing this.

An alternative would be to attach a second firewall to sys-net and
change the routing on sys-net so that traffic is passed to different
gateways, depending on which iface it comes in on. You'll also have to
adjust the NAT rules for DNS to make sure that DNS is also redirected
appropriately.
I would only do this if I had real performance issues, and couldn't
afford the overhead of another qube running, or only had 1 NIC
available.
Otherwise separate netvms per gateway is quick and easy to set up, and
guarantees traffic isolation.

unman

drogo

unread,
Sep 5, 2018, 10:20:03 PM9/5/18
to qubes-users

Thanks!

I had a second interface available, so I got it setup pretty easily. Now I just need to get the firewalling squared away so I can isolate the traffic away from the rest of the internal network.

Reply all
Reply to author
Forward
0 new messages