similar to: switch mode, how to give a public IP behing a NAT

Hi I have built a few networks with tinc and feel quite familiar with it. But now I have got a scenario where I can't clearly figure out how things work with tinc: I have two nodes, both of them are in different private networks and visible only to different servers, which have got an internal and an external IP. So my topology looks like this: [n1]->[host1]<-->[host2]<-[n2]

Hello, I am experiencing system hangs when running NFSv4 over a tinc VPN. I don't know if the problem is with NFS or tinc and would appreciate any suggestions on how to narrow down the culprit. Unfortunately I cannot simply run NFS directly over TCP -- the participating systems are connected only over an open network. The configuration is as follows: I have a master server

With pleasure we announce the release of tinc version 1.1pre12. Here is a summary of the changes: * Added a "--syslog" option to force logging to syslog even if running in the foreground. * Fixes and improvements to the DecrementTTL function. * Improved PMTU discovery and UDP keepalive probes. * More efficient relaying of UDP packets through intermediate nodes. * Improved

With pleasure we announce the release of tinc version 1.1pre12. Here is a summary of the changes: * Added a "--syslog" option to force logging to syslog even if running in the foreground. * Fixes and improvements to the DecrementTTL function. * Improved PMTU discovery and UDP keepalive probes. * More efficient relaying of UDP packets through intermediate nodes. * Improved

With pleasure we announce the release of version 1.0.18. Here is a summary of the changes: * Fixed IPv6 in switch mode by turning off DecrementTTL by default. * Allow a port number to be specified in BindToAddress, which also allows tinc to listen on multiple ports. * Add support for multicast communication with UML/QEMU/KVM. This version of tinc is compatible with 1.0pre8, 1.0 and

With pleasure we announce the release of version 1.0.18. Here is a summary of the changes: * Fixed IPv6 in switch mode by turning off DecrementTTL by default. * Allow a port number to be specified in BindToAddress, which also allows tinc to listen on multiple ports. * Add support for multicast communication with UML/QEMU/KVM. This version of tinc is compatible with 1.0pre8, 1.0 and

Hi, I have two tinc nodes which announce default gate to internet. How does tinc select which node is prefered when I route to the tinc device and not a special ip? tinc 1.0.16 ALBI...

Hello, I am a happy user of tinc in multiple environments. It is beautiful - thank you! Today I noticed that a network of around 20 nodes suffered from a flood of packages like the following: IP6 fe80::e4eb:74b6:57e0:c3e1 > ff02::2: ICMP6, router solicitation, length 8 For the first ten hours these nodes (even the usually completely idle ones) have seen incoming traffic of around 1 MBit/s

With pleasure we announce the release of version 1.0.17. Here is a summary of the changes: * The DeviceType option can now be used to select dummy, raw socket, UML and VDE devices without needing to recompile tinc. * Allow multiple BindToAddress statements. * Decrement TTL value of IPv4 and IPv6 packets. * Add LocalDiscovery option allowing tinc to detect peers that are behind the

With pleasure we announce the release of version 1.0.17. Here is a summary of the changes: * The DeviceType option can now be used to select dummy, raw socket, UML and VDE devices without needing to recompile tinc. * Allow multiple BindToAddress statements. * Decrement TTL value of IPv4 and IPv6 packets. * Add LocalDiscovery option allowing tinc to detect peers that are behind the

Hello everyone, I am running multiple nodes each having multiple LXC containers. On those nodes I am using Tinc to share the subnet 10.20.0.0. The LXC containers may migrate between nodes and should keep the same configuration. On all nodes traffic from the external interfaces (connected to the internet) is forwarded to the bridge interfaces and masqueraded. The LXC containers are using 10.20.0.1

Hi, I am trying to set up a VPN that allows mobile users to access multcast information from an information vendor. Hence Tinc is configured as a switch. Internet --[ router1 ]------[eth0 VPN eth1]--------------[ router2 ]--------- mobile users VPN server is running Ubuntu 10.04 and is also configured as a dhcp server that hands out IP address to connecting mobile users. A bridge (br0) is

Hello Tinc list! I'm trying to set up a Tinc VPN between two KVM host machines so that a VM on one host can communicate with a VM on the other host. While I do have a good bit of experience with virtualization, I'm not a particularly savvy network guy, so this is proving to be a pretty big challenge. Requirements: * ALL VM network traffic must be secure. * VMs on one host must be

Hi all, So, I've deployed Tinc in a non normal manor to which has been working just fine for days up until recent. Here is a description of the network. There are two VPN host controllers, A and B. All nodes have a separate connection to A and B. Tinc has been configured to be in 'switch' mode for both the A cloud and B cloud. On the back end, I have OSPF running on all nodes and

I have two internal networks 192.168.9.0/24 and 192.168.0.0/24 each connected to the internet and each connected as a VPN via tinc (device vpn). The gateways are 192.168.9.1 and 192.168.0.1 Attached to the 192.168.9.0/24 network is another network 172.16.1.0/24 via a gateway 192.168.0.1 <==> 172.16.1.1. On 192.168.0.1 gateway I have routes (route -n) like this: Kernel IP routing table

No, this would in fact operate as a routing mode instead of bridging. TAP would be used as a means to push routing to where it belongs, the linux/bsd/... kernel. Consider the challenge of having completely dynamic routing between vpn peers. In one minute I might have 10000 routes towards one specific peer, and hour latter I might have NONE. And I need to diferentiate each peer at the kernel

Estimados Usuarios-R: Estoy convirtiendo un programa en Matlab a R. El original lo saqu de: Lai, M., & Poltera, Y. (2009). Lecture with computer exercises: Modelling and simulating social systems with matlab. Tech. rep., Swiss Federal Institute of Technology (December 2009). 27. Ahora estoy convirtiendo la siguiente funcin: function sizes = gridsizes(N,varargin) % gridsizes(N) calculates

I see what you want me to do. But it does incur an extra MAC layer header to each VPN packet, more fragmentation. And broadcasts leak to all peers. It sure saves you from doing any improvements, but there are side effects that are undesirable to many customers. This is specially a problem if I want two VPN connections between two sites using redundant connections, we get an instant L2 loop. With

Hello. I apologize in advance for my question -- it's seemingly trivial, but I've spent countless hours on its solution to no avail. Basically, I have two tinc servers: Home: Ethernet adapter LAN: IP Address. . . . . . . . . . . . : 192.168.0.2 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.0.1 Ethernet adapter

I have a Debian 8 64-bit machine set up as a server and apt-got the tinc package. I configured tinc as a bridge and everything seems normal except that the tunnel does not forward multicast traffic. I used tcpdump to examine the br0, eth0 and tap interfaces. I could see multicast packets on both br0 and eth0, but there is no such packet present on the tap interface. I don't quite know why