gluetun

yes but with a VPN to my seedbox, all the egress from the docker containers its running in goes through this: https://github.com/passteque/gluetun the seedbox is through https://www.feralhosting.com used them for over 10 years now and they've been great (shared hosting so I have linuxbrew setup there, but no docker sadly)

I strongly suggest that you use something like Network Namespaces through Vopono[0] or Gluetun[1] if you use a commercial VPN for "privacy" or "security" aka torrenting and shitposting. Relying on these clients is always a gamble and if your software (Browser, Torrentclient, etc.) cannot know you public IP only the internal IP of the VPN you are also safe against some exploits and misconfigurations a desktop client won't protect you against. [0] https://github.com/jamesmcm/vopono [1] https://github.com/qdm12/gluetun

I have one of these. However it is connected to a VPN 24/7 in my own home. It can't access the net without the VPN being connected and I've checked for IP leaks. https://github.com/qdm12/gluetun However at some point I will have a machine setup in a foreign country as a jump box.

I've been using the LSIO Webtop images for a few years. They're awesome for composable desktops that I run behind a VPN for a quick and easy dirty connection at home. Combine the Webtop images by forcing it's traffic through the Gluetun [0] container and you're up and running. These Webtop containers are nice and snappy as well thanks to Kasm. Awesome OSS. [0] https://github.com/qdm12/gluetun

There is gluetun, https://github.com/qdm12/gluetun, which servers a similar purpose whole supporting ovpn and wireguard (including prepared configs for various commercial VPN providers). It's usable with, e. g., Docker to have namespace-based proxying of traffic for a container.

There is the open source software project gluetun, that allows setting up a containers that are only able to communicate through a vpn network interface in an easy way. https://github.com/qdm12/gluetun With this it is not much effort to set up qbittorrent in a privacy secure way.

qbittorrent + gluetun works like magic (if you’re running containers). https://github.com/qdm12/gluetun

The purpose of Gluetun is to isolate your VPN into a container that you can then bind as the network provider of other containers. However, it's a documented problem [0] that performance isn't anywhere near as good as running the VPN natively, especially for Wireguard. At the minimum this can be related on some systems to the container being unable to load the kernel-space driver and having to rely on lower performing user-space driver, but even with a pre-loaded kernel-space driver performance testing is reporting significant lower values than the host. Presumably this project is to try and resolve that issue. [0] https://github.com/qdm12/gluetun/wiki/Wireguard#performance

Question: what does this do better than the (relatively) well-established Gluetun [0]? [0] https://github.com/qdm12/gluetun

I'd never heard of Technitium, but was intrigued looking at. Was thinking "hmmm what could I do with this" and then had to refrain from creating another project just because. TBH I find Docker networking a struggle and usually disable the `iptables` stuff and end up configuring my own rules. Painful, but at least less intrusive. On the note of Tailscale+Docker networking, gluetun[0] is pretty awesome. It runs a Wireguard (not tailscale compatible, yet) instance within a Docker container and then you share that networking namespace with the other containers effectively confining them to the VPN. Comes with basic container namespace firewall configuration and DNS over TLS configuration. [0] https://github.com/qdm12/gluetun

Gluetun has an integrated killswitch: https://github.com/qdm12/gluetun I used to use https://github.com/dperson/openvpn-client which has a killswitch option as well. By kill-switch I mean iptables rules that don't let anything out if there's no VPN interface up. So you don't run the risk of leaking torrent stuff through your plain-text connection if the VPN goes down.