I created a minimal Debian template (1vCPU, 700MB RAM) to run the sys-vpn instances. That helps with system performance. Yes, nesting can reduce performance compared to a single VPN tunnel and yes it still far outperforms TOR.

I use different sys-vpn chains for different app qubes depending on performance and privacy needs. I try to create a tree and branch structure so that normie and secure traffic have different in-points, out-points, and mid-points with some common bi-directional trunks to confound traffic fingerprinting attacks on privacy. Working on scripting more dynamic re-assembly of inter sys-vpn pathways. In general, all providers I have used have accepted multiple concurrent connections to many individual servers.

Maybe I’ll write something up for a SN post one of these days.