Odd behavior wile running two separate Whonix gateways

3 views
Skip to first unread message

tiesta_s...@dodg.email

unread,
Mar 24, 2023, 3:55:41 AM3/24/23
to qubes...@googlegroups.com
I have two Whonix gateways, the default sys-whonix and a sys-whonix-clone.
Both are attached to different net vm's.

The problem is that all qubes that have sys-whonix-clone as its net vm
show up under sys-whonix's tray icon, not sys-whonix-clone's. I'm pretty
sure the actual traffic is being routed through the correct gateways, but
my only metric for knowing that is looking at CPU usage while stressing
the connection and making sure the correct chain of net vm's light up.

Is this just a GUI quirk, or should I worry about actual risk of traffic
getting mixed between the two gateway qubes?

unman

unread,
Mar 24, 2023, 8:49:28 AM3/24/23
to tiesta_s...@dodg.email, qubes...@googlegroups.com
On Fri, Mar 24, 2023 at 04:23:48AM +0000, tiesta_symonne61 via qubes-users wrote:
> I have two Whonix gateways, the default sys-whonix and a sys-whonix-clone.
> Both are attached to different net vm's.
>
> The problem is that all qubes that have sys-whonix-clone as its net vm
> show up under sys-whonix's tray icon, not sys-whonix-clone's. I'm pretty
> sure the actual traffic is being routed through the correct gateways, but
> my only metric for knowing that is looking at CPU usage while stressing
> the connection and making sure the correct chain of net vm's light up.
>
[quote]
Is this just a GUI quirk, or should I worry about actual risk of traffic
getting mixed between the two gateway qubes?
[/quote]
It sounds like a GUI bug - you could check what is happening by running
a sniffer on sys-whonix, or by examining counters on the firewall rules.
I don't have whonix installed to e able to tell you if the tools for this
are installed.
(You could try running `iptables -L -nv -t nat` and seeing if the counts
for one of the errant qubes increments. Report back.)

Andrew David Wong

unread,
Mar 24, 2023, 10:18:30 AM3/24/23
to tiesta_s...@dodg.email, qubes...@googlegroups.com
On 3/23/23 9:23 PM, tiesta_symonne61 via qubes-users wrote:
> I'm pretty
> sure the actual traffic is being routed through the correct gateways, but
> my only metric for knowing that is looking at CPU usage while stressing
> the connection and making sure the correct chain of net vm's light up.
>

Why not use the preinstalled "Nyx - Status Monitor for Tor" tool? It creates a nice traffic graph for you and shows you upload and download usage in real time. There's even a menu entry for it by default, so it's easy to open.
OpenPGP_signature
Reply all
Reply to author
Forward
0 new messages