Comment by MasterYoda | Hacker News Reader

Comment by MasterYoda | Hacker News Reader

Parent Full thread

OT: I use Mullvad as VPN and have 2 different Firefox instances, Firefox (standard) and Firefox Dev. Does anyone know if it is possible to run all web surfing thru one of the browsers thru Mullvad VPN thru some extension or similar?

In other words: What I want to do is to use one of the Firefox web browsers to connect to my normal ISP and the others traffic to go thru MULLVAD VPN. I know about "split tunnel", but it does not feel optimal, because every single app must be deselected no to use VPN, to just make one web browser use the VPN. And if you want to run another app thru VPN, you must remember to activate it, not only turn on the VPN tunnel. So is there any way an extension could connect Firefox to Mullvad VPN directly or configure some proxies in Firefox that connects to Mullvad VPN app or similar?

One of the reasons I use Qubes OS is that it makes functionality like this easy, with strong guarantees that there won't be a leak since it is achieved though VMs in the background. With any application you can configure it to use only a certain VPN, or have multiple separate instances of the same application connected to different ones

This is possible with Linux network namespaces too (but doesn't provide protection against kernel exploitation).

mullvad offers a socks proxy. i generally use the wireguard app, and only allow traffic to the socks proxy through the vpn, and configure firefox to use that socks proxy.

if you use their app it depends on your operating system how their whitelisting works, but you can pick apps you don't want to have routed through their vpn (but by default with their app all system traffic will be routed through the vpn except what you explicitly deny).

I do something like this. I run wireguard in a container along with dante-server (a socks proxy daemon). I then configured a Firefox profile to connect to the socks daemon running in the container.

This way I have a single browser profile that is routed through Mullvad while everything else works normally.

If you're on Linux, consider network namespaces. Very cool feature.

Reply on news.ycombinator.com