Jump to: navigation, search

Template:VPN on the host vs on Whonix-Gateway

VPN Installed on the Host VPN Installed on Whonix-Gateway VPN Installed on both the Host and Whonix-Gateway
All Whonix Traffic Routing User -> Host's VPN -> Tor -> Internet User -> Gateway's VPN -> Tor -> Internet User -> Host's VPN -> Gateway's VPN -> Tor -> Internet
All Host Traffic Routing User -> Host's VPN -> Internet User -> Internet User -> Host's VPN -> Internet
Whonix-Gateway Compromise Host's VPN Affords Protection Nil Protection Host's VPN Affords Protection

To decide the best configuration in your circumstances, consider:

  • Is it necessary to hide all traffic from the ISP? [1] Then install the VPN on the host.
  • Should the VPN provider be able to see all traffic? [1] Then install the VPN on the host.
  • Should the VPN provider be limited to seeing Tor traffic, but not clearnet traffic? Then install the VPN on Whonix-Gateway.
  • 1.0 1.1 All traffic generated by the host and all applications running on the host. For example, Firefox, NTP, and anything else. This also includes traffic generated by Whonix.