similar to: PMTUDiscovery and ClampMSS with mixed tincd versions

Currently, i have nodes with PMTUDiscovery =yes and ClampMSS = yes. When the server does not receive a PMTU request back from one of the clients even when the packet size is very small (say 164), then it reverts to TCP. Should i turn off PMTUDiscovery or should it be ok to leave on? It takes a very long time to do simple pings (1 second or so), so i wonder what else i can do?

Hi, we are using Tinc in our Freifunk Network in Oldenburg for internode connections over the internet. So Tinc is running on OpenWrt 10.03 on Dlink Dir-300 Routers. We all have enough internet bandwith (1,6 MB/sec and more) but we only get a maximum speed of ~350KB/sec between two tinc nodes because then tinc uses 99% of the cpu. Is it possible to get more Speed with tinc on this machines?

Hi, I upgraded some of my Tinc nodes from 1.0.8 recently and found something strange. All of a sudden, the vpn would not work as a full-mesh. Certain nodes were not contactable. I re-generated my rsa-keys, and checked my configuration. My vpn uses the following in tinc.conf, as I am routing both ipv4 and v6. === name = node1 mode = switch AddressFamily = any PMTU = 1280 PMTUDiscovery = yes

Hello, today I was trying to do something easy I did with openvpn before. I have a server, and a few clients will connect to the server and route their internet traffic into the tunnel. The server then makes NAT. To configure clients in OpenVPN there was this directive called: --redirect-gateway that basically (copy and paste from OpenVPN man): 1) Create a static route for the --remote address

Hello, I'm upgrading to 1.0.14 I did some manual tricks in my Gentoo Portage because seems that upstream Gentoo did not update the portage yet, does anybody know how to Contact Gentoo Linux to have the package updated ? Question 1: I notice in my log file I had many entries like this with 1.0.13: 1307284053 tinc.ninux[15152]: Lost 251 packets from GREG1 (151.28.100.141 port 655)

For tinc users on OpenWRT: https://dev.openwrt.org/changeset/29137 ciao :) Saverio

Hello Maxim, did you send the pull request ? Please send an email to the list when you do thank you Saverio 2016-11-05 10:09 GMT+01:00 Saverio Proto <zioproto at gmail.com>: > Hello Maxim, > thanks for stepping in ! > > so, I am not even sure how it works for commit rights, because the > people I was in touch with now forked the project to LEDE. > > Also, I always

Let me start with what I'm trying to accomplish. I use tinc mainly to get to subnets behind the daemons and I don't control those subnets and can't guarantee overlap. I was using routing mode and reconfiguring tinc every time i needed to get to a subnet behind a specific daemon. Then I came across switch mode that allowed me to simply add routes based on the IP address of the tinc

On my Gentoo box I updated openssl to openssl-1.0.0a-r3 I'm not able to compile with openssl-1.0.0a-r3 if I want a static binary ./configure LDFLAGS=-static the configure scripts complains like this: checking for RAND_pseudo_bytes... no configure: error: Missing OpenSSL functionality, make sure you have installed the latest version. this was working with previous version of OpenSSL.

Saverio, it looks I'm using tinc on OpenWRT packaged by you) Thank you for it Is something there in that task, what is harder than https://wiki.openwrt.org/doc/devel/packages ? Anyway, I want to try On Thu, Nov 3, 2016 at 5:57 PM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Thu, Nov 03, 2016 at 03:43:42PM +0100, Saverio Proto wrote: > > > I am not using OpenWrt a

Hi, Here is my goal. Can I do this with tinc? I have a mobile broadband card, and my machine runs a webserver, email server, and a public vcs. But I have four problems: 1. Port 25 is blocked so I have to use an elaborate convulsion to allow me to send mails. 2. It has a dynamic IP address so I have to use dynamic DNS. 3. There's no way for me to set up reverse DNS (that I know of). 4. They

Aloha! I am new to tinc and I like to figure out my own issues before asking but I am not sure of my next step here. I am not sure if the problem is the VPN configuration or in my network. I will try to be as through as possible. I have two computers that are CentOS with the latest tinc from their respective repositories. Server A is behind a Sophos XG and Server B is behind a Ubiquiti Edge

Hi, I´m using Tinc for several years, but I didn´t fix a performance problem. There a about 20 nodes in this network. Master: 10.0.0.12 (dedicated host in a datacenter, debian, 100mBit port) tinc.conf: Name = TincKnoten12 AddressFamily = ipv4 Interface = tun ProcessPriority=high mode = router #DirectOnly = no Compression=0 PMTUDiscovery = yes #IndirectData = yes #ReplayWindow = 64 #ConnectTo

I received this PR for the tinc package on OpenWrt. https://github.com/openwrt/packages/pull/7646/files Not sure if this is something that is better going upstream instead. Moreover, from a security point of view, is it okay to merge this patch ? thank you Saverio

Hi, My CentOS has upgrade the openssl to 1.1.1a, and I thought my tinc(1.0.35) installed by yum will use the new openssl, but it looks not the fact. So is tinc(1.0.35) support openssl 1.1.1a? If so, how can I make it running in this version of openssl?

Hello, to start could you tell us what version of OpenWrt are you using ? Is it a stable release ? and what version of tinc you are trying to install ? if it is just a problem with the tun/tap module, on OpenWrt you have not modprobe, so you should use insmod insmod tun Saverio

We run tinc in a linux environment in which it sits there waiting for connections from the clients. All clients are configured to only have one ConnectTo which points to this server. We're seeing in the server log that as soon as a client's connection is activated, a whole bunch of "Flushing x bytes to that host would block" is logged and the whole vpn is bogged down and has

Hello, Anyone on this list had successfully used tinc on planet lab [0] ? I'm trying to do it but I get some problems using the tap device tincd just keeps printing this error: Error while reading from Linux ethertap device /dev/net/tun: File descriptor in bad state I guess the problem is I cannot manage tun/tap devices on the planet lab nodes even if I am root :( Look at this: bash-3.2#

During Brandon Black presentation I heard that was developed a patch to prevent loss of UDP packets when tinc detects a replay attack. Is possible to have a look at that patch ? :) Saverio

Hello, I received this pull request. https://github.com/openwrt/packages/pull/2757/files As I wrote in the comments I am not sure that is the way to go. Packaging a software for a distribution is not just about software development. There are operational issues to be addressed. A lot of people use the tinc package and they expect they configs to survive a package update. Also they expect the