[Needs Testing] Transparent Proxy Qube with sing-box

Original forum link: https://forum.qubes-os.org/t/29030
Original poster: glockmane
Created at: 2024-09-18 17:30:49
Last wiki edit: 2024-09-19 20:32:29
Revisions: 3 revisions
Posts count: 33
Likes count: 0

Transparent Proxy Qube with sing-box Quick Start Guide

dom0 terminal:

qvm-create sys-proxy --class AppVM --label blue
qvm-prefs sys-proxy provides_network true
qvm-prefs sys-proxy autostart true
qvm-start sys-proxy
qrexec-client -W -d sys-proxy user:'sh <(curl --proto "=https" -tlsv1.2 -SfL https://raw.githubusercontent.com/glockmane/qubes-proxy/refs/heads/main/install.sh)'

sys-proxy terminal: Configure Proxy:

sudo nano /rw/bind-dirs/etc/sing-box/config.json

Configuration example: https://sing-box.sagernet.org/configuration/outbound/socks/ Reboot and check sing-box status:

reboot
sudo journalctl -ft sing-box

Based on the following guide and install script, but translated from iptables to nftables:

https://github.com/hexstore/qubes-proxy/tree/main

Link to my fork:

https://github.com/glockmane/qubes-proxy