Jump to: navigation, search

Template:VPN on the host vs on Whonix-Gateway

If the VPN is installed on the host If the VPN is installed on Whonix-Gateway If a VPN is installed on the host and another VPN on Whonix-Gateway
all Whonix traffic goes user -> host's VPN -> Tor -> Internet user -> gateway's VPN -> Tor -> Internet user -> host's VPN -> gateway's VPN -> Tor -> Internet
all host traffic goes user -> host's VPN -> Internet user -> Internet user -> host's VPN -> Internet
When Whonix-Gateway ever gets compromised left with protections by the host's VPN left without any protections left with protections by the host's VPN

When making the decision, you must ask yourself...

What do you want to hide from your ISP? All traffic[1]? Then install the VPN on the host.

What should your VPN provider be able to see? All traffic[1]? Then install the VPN on the host.

Should your VPN provider only be able to see Tor traffic but not your clearnet traffic? Then install the VPN on Whonix-Gateway.
  1. 1.0 1.1 All traffic generated by the host. All applications running on the host. Firefox, NTP, anything. This also includes traffic generated by Whonix.