search

tasket / Qubes-vpn-support

VPN configuration in Qubes OS
GNU General Public License v3.0
126 stars 28 forks source link

Difference between this config and official documentation #21

Closed loadcorp closed 6 years ago

loadcorp commented 6 years ago

Tell me please what is the difference between this config and official documentation from here https://www.qubes-os.org/doc/vpn/ ?

tasket commented 6 years ago

@loadcorp Sorry I didn't see your query sooner. The official Qubes doc has scripts I wrote back in 2016 and has a few downsides: The cut-paste-edit instructions are tedious and a bit confusing, and the way it runs openvpn is more difficult to manage (can't control it like a service). It also doesn't account for IPv6 in the firewall, and doesn't recover gracefully from some disconnection scenarios, resulting in a blocked connection. OTOH its still pretty secure (at least for IPv4).

I started this project so I could make a solution that wasn't bound by the constraints of listing code in a doc - a Qubes requirement at that time. Since then Qubes devs have expressed interest in shipping this code with Qubes to offer a simpler and more robust setup for users.

Hope this answers your question and that you're still using Qubes!