Actions

Template

VPN on the host vs on Whonix-Gateway

From Whonix

VPN Installed on the Host VPN Installed on Whonix-Gateway ™ VPN Installed on both the Host and Whonix-Gateway ™
All Whonix Traffic Routing User → Host's VPN → Tor → Internet User → Gateway's VPN → Tor → Internet User → Host's VPN → Gateway's VPN → Tor → Internet
All Host Traffic Routing User → Host's VPN → Internet User → Internet User → Host's VPN → Internet
Whonix-Gateway ™ Compromise Host's VPN Affords Protection Nil Protection Host's VPN Affords Protection

To decide the best configuration in your circumstances, consider:

  • Is it necessary to hide all traffic from the ISP? [1] Then install the VPN on the host.
  • Should the VPN provider be able to see all traffic? [1] Then install the VPN on the host.
  • Should the VPN provider be limited to seeing Tor traffic, but not clearnet traffic? Then install the VPN on Whonix-Gateway ™.
  • 1.0 1.1 All traffic generated by the host and all applications running on the host. For example, Firefox, NTP, and anything else. This also includes traffic generated by Whonix ™.