Qubes/gsoc
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Cosmetic fixes

Browse Source
This commit is contained in:
Giulio 2021-06-25 16:17:12 +02:00
parent aa3473e71f
commit ddc3247db9
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Readme.md
View File

@ -132,14 +132,15 @@ Of course `expire=` and `comment=` are optional fields.
### Proposal chart
###### The main distinction between internal and external port forwarding is:
* _Internal_ resolves only <appvm>'s <ntvm>
* _Internal_ resolves only '&lt;appvm>'s '&lt;ntvm>
* _External_ recursively resolves all upstream networking vm and sets forwarding rules on all of them
###### This should cover multiple scenarios:
* _Standard external forwarding_ when <appvm> service needs to be exposed on a physical interface
* _Standard internal forwarding_ when <appvm> service needs to be exposed to other <appvm2/3/4> connected to the same <netvm>
* _VPN internal port forwarding_ when <appvm> service needs to be exposed through a VPN
* _Standard external forwarding_ when '&lt;appvm&gt; service needs to be exposed on a physical interface
* _Standard internal forwarding_ when '&lt;appvm&gt; service needs to be exposed to other '&lt;appvm2/3/4&gt; connected to the same '&lt;netvm&gt;
* _VPN internal port forwarding_ when '&lt;appvm&gt; service needs to be exposed through a VPN
It is important to note that in the last case, it is just a standard case of internal forwarding.
@ -203,11 +204,12 @@ iptables -w -I INPUT 5 -d <appvm_ip> -p tcp --dport <target_port> -m conntrack -
## Extra
### Useful Commands
```
#
#
```
```
### Dev Environment
Currently developing on VMWare Workstation on Windows due to issues in virtualizing on linux on my home hardware.
QubesOS is virtualized behind NAT and can reach Windows Host via SSH.