search for: sumpfralle

Lars, interesting - do you have an example of what that might look like in the config file? Thanks! On Sun, May 5, 2019 at 6:00 PM Lars Kruse <lists at sumpfralle.de> wrote: > Hello Christoph, > > I am glad, that you discovered the source of the problem! > > > Am Sat, 4 May 2019 08:30:28 +0200 > schrieb "Christopher Klinge" <Christ.Klinge at web.de>: > > > The goal was that all connections between my nodes, r...

Thank you Lars for the reply. Your instructions were dead on. Yes I have considered the security risks; however, I think scaleability and rapid deployment out weigh the security risks for me. On Aug 18, 2015, at 6:31 AM, Lars Kruse <lists at sumpfralle.de> wrote: > Hi, > >> Is it possible to generate one key pair? > > Maybe this is all you want to know? > openssl genrsa -out private.key 4096 > openssl rsa -pubout -in private.key -out public.key > > I assume that you analyzed the risks and benefits of a single...

...load > (Maximilian Stein) > 3. Re: High tinc traffic on ethernet without tinc load (Lars Kruse) > 4. Re: High tinc traffic on ethernet without tinc load > (Maximilian Stein) > > > > ---------- Forwarded message ---------- > From: Lars Kruse <lists at sumpfralle.de> > To: tinc at tinc-vpn.org > Cc: > Bcc: > Date: Fri, 20 Mar 2020 15:43:13 +0100 > Subject: Re: High tinc traffic on ethernet without tinc load > Hallo Maximilian, > > Am Thu, 19 Mar 2020 16:31:57 +0100 > schrieb Maximilian Stein <m at steiny.biz>: > > &...

Is it possible to connect networks with different masks together? For example a 10.26.0.0/16 subnet with a 192.168.117.0/24 subnet. See this thread for more details... https://forum.netgate.com/topic/134218/tinc-initial-setup

...why A chose B instead of D's default route? At this moment, if I shutdown B's tinc daemon, the traffic path for A to Internet return back to: to C and the to D During the whole process, A's default gateway point to C. Sent from iPhone > 在 2017年5月2日，上午4:37，Lars Kruse <lists at sumpfralle.de> 写道： > > Hello, > > > Am Mon, 1 May 2017 23:35:53 +0800 > schrieb Bright Zhao <startryst at gmail.com>: > >> If there’re multiple tinc nodes announce default route in their host >> configuration of Subnet = 0.0.0.0/0, how for the remaining nodes to s...

...ffic can pass through that. But I think it is not a good practice to change the FORWARD rule to ACCEPT. Any idea to check and just allow the tinc VPN traffic only? Instead of allow everything pass through the FORWARD rule. Regards, Eric -----Original Message----- From: Lars Kruse [mailto:lists at sumpfralle.de] Sent: Sunday, February 14, 2016 8:59 PM To: tinc at tinc-vpn.org Subject: Re: Tinc Router Mode - PING RESULT is destination host unreachable Hi Eric, Am Sun, 14 Feb 2016 01:26:22 +0800 schrieb Eric Yau <ericyaukhy at hotmail.com>: > I have no experience to use tcpdump, here is the...

Hi, Am Wed, 22 Mar 2017 07:51:23 +0100 schrieb Guus Sliepen <guus at tinc-vpn.org>: > [..] > 1. Use different weights for the otherwise identical Subnets, and ensure > you pass that along to the route up/down commands so the kernel can also > distinguish them. in linux the following command within "subnet-up" accomplishes that behaviour: ip route add

We have a tinc fan here! Although didn't address any questions. On Thu, Mar 29, 2018 at 3:10 PM, Lars Kruse <lists at sumpfralle.de> wrote: > Hello al, > > just a personal note (not via the mailinglist): > > > Is this the reason Tinc is slow on multicore platform? Almost every blog > > claims performance sucks. > > I am not sure, what your intention with this remark was, but if you are >...

Hello Ramses, Am Sat, 31 Mar 2018 17:21:52 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > Can tell me someone if there is any repository to Raspbian that has Tinc v1.1 > to update a installed Tinc v1.0 from command apt-get? thankfully the Debian package maintainer for tinc (Guus) prepared a package and uploaded it to the "experimental" suite:

El 31 de marzo de 2018 21:13:48 CEST, Lars Kruse <lists at sumpfralle.de> escribió: >Hello Ramses, > > >Am Sat, 31 Mar 2018 17:21:52 +0200 >schrieb Ramses <ramses.sevilla at gmail.com>: > >> Can tell me someone if there is any repository to Raspbian that has >Tinc v1.1 >> to update a installed Tinc v1.0 from command apt-get?...

El 31 de marzo de 2018 22:17:10 CEST, Lars Kruse <lists at sumpfralle.de> escribió: >Hello Ramses, > > >Am Sat, 31 Mar 2018 22:03:25 +0200 >schrieb Ramses <ramses.sevilla at gmail.com>: > >> But what repository I need to add to the sources.list file? > >the internet out there would have told you :) > >https://wiki.debian.o...

El 1 de abril de 2018 3:34:46 CEST, Lars Kruse <lists at sumpfralle.de> escribió: >Hello Ramses, > > >Am Sun, 01 Apr 2018 01:44:01 +0200 >schrieb Ramses <ramses.sevilla at gmail.com>: > >> [..] >> >> Correct? > >in general, this is exactly the right procedure. > > >> I have installed Raspbian 7 (Wheezy...

...84) bytes of data. >From 192.168.1.1 icmp_seq=2 Redirect Host (New nexthop: 192.168.1.3) >From 192.168.1.1: icmp_seq=2 Redirect Host (New nexthop: 192.168.1.3) ... This is the result of the traffic redirection rule I put in the router. Le lun. 14 janv. 2019 à 19:43, Lars Kruse <lists at sumpfralle.de> a écrit : > Hi Julien, > > > Am Mon, 14 Jan 2019 18:04:40 +0100 > schrieb Julien dupont <marcelvierzon at gmail.com>: > > > Investigating with tcpdump withoug guidelines is beyond my skills I'm > > afraid. > > Try this on your VPN_office host: &...

...understand why it was on in first place as I did not enable it. Thanks you very much Lars for your kind help. Although I browsed a lot of help pages and howto, I did not find any that was actually telling the *full* right set of instructions. Le mar. 15 janv. 2019 à 21:09, Lars Kruse <lists at sumpfralle.de> a écrit : > Hello Julien, > > > Am Tue, 15 Jan 2019 16:33:26 +0100 > schrieb Julien dupont <marcelvierzon at gmail.com>: > > > ip_forward was not enabled, now it is. > > a good step forward :) > > (you should do this permanently via /etc/sysctl.d/)...

...et up directly to the > machines. Does tinc provide a way for differentiating between between meta > and payload traffic? > > Kind regards and thanks for your time, > Christopher > > *Gesendet:* Mittwoch, 01. Mai 2019 um 23:29 Uhr > *Von:* "Lars Kruse" <lists at sumpfralle.de> > *An:* tinc at tinc-vpn.org > *Betreff:* Re: very high traffic without any load > Hello Christopher, > > > Am Wed, 1 May 2019 12:37:33 +0200 > schrieb "Christopher Klinge" <Christ.Klinge at web.de>: > > > There is however a large amount of manag...

Yes, exactly. There are lots of packages exchanged between tinc processes on port 655, accounting to 99 % of the Ethernet traffic, while the virtual interface stays almost idle. Best, Maximilian Am 20. März 2020 21:09:18 MEZ schrieb Lars Kruse <lists at sumpfralle.de>: >Hello Maximilian, > >Am Fri, 20 Mar 2020 19:43:35 +0100 >schrieb Maximilian Stein <m at steiny.biz>: > >> My current mitigation is to stop some tinc peers for ten seconds and >to >> start them again afterwards, that usually causes the excessive >traff...