[tor-talk] Review request: TorVM implementation in Qubes OS

Abel Luck abel at guardianproject.info
Sat Oct 13 17:16:20 UTC 2012

Hey folks,

I've implemented a TorVM service for Qubes OS [1] and I am seeking
feedback from more knowledgeable eyes on the tor+iptables configuration.

Quick background to give this context:

Qubes is an OS based on Xen and Linux that isolates applications to
domains. Each domain is a virtual machine. Even networking takes place
in virtual machines.

My TorVM configuration is essentially an anonymizing middlebox for it's
network client VMs.

For a visual model of what this looks like see this image [2].

The relevant config is here:

I'm using tor-0.2.3 to take advantage of stream isolation.

Please scan the documentation for an idea of the goals of TorVM:

Soon I hope to provide a TorBrowser package (that doesn't use bundled
tor+vidalia to prevent tor-inside-tor scenarios).


[1]: http://qubes-os.org
[2]: http://s15.postimage.org/xrh0rh0s9/qubes_torproxy_config.png
     that image from this blogpost
(NOTE: the configuration in this blog post is not what I've implemented,
see the script above)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 630 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20121013/f0ee2d4d/attachment.pgp>

More information about the tor-talk mailing list