similar to: FW: VPN stablility problems

Hello, I am using tinc's feature to dump a graph of the vpn extensively to view the machines which are currently part of the vpn. In my tinc.conf I have this: GraphDumpFile = /tmp/tinc-graph Then I have a desktop starter that executes /usr/bin/xdot /tmp/tinc-graph to open the graph. I would love to have the ip addresses of the vpn ips of the tinc nodes in that graph, e.g. if one tinc node

Hi all, I tried Tinc 1.1 from git on 4 nodes, each one in a datacenter. They were able to ping each other, etc... but I had problem with multicast, nothing seemed to pass (all is OK with Tinc 1.0.23). I checked logs and on every nodes I have a lot of: Failed to decrypt and verify packet And Error while decrypting: error:00000000:lib(0):func(0):reason(0) So I get back to 1.0.23 which works

With pleasure we announce the release of tinc version 1.0.23. Here is a summary of the changes: * Start authentication immediately on outgoing connections (useful for sslh). * Fixed segfault when Name = $HOST but $HOST is not set. * Updated the build system and the documentation. * Clean up child processes left over from Proxy = exec. This version of tinc is compatible with 1.0pre8, 1.0

With pleasure we announce the release of tinc version 1.0.23. Here is a summary of the changes: * Start authentication immediately on outgoing connections (useful for sslh). * Fixed segfault when Name = $HOST but $HOST is not set. * Updated the build system and the documentation. * Clean up child processes left over from Proxy = exec. This version of tinc is compatible with 1.0pre8, 1.0

Thanks for the quick reply, Guus. Well the debug helped a little bit. So did re-reading the manual again. I think I got further ahead, but unfortunately I still cannot quite get to complete the connection between the two nodes. It looks like the two nodes are communicating - they seem to be able to exchange RSA keys & MetaKeys, but for some reason, they start trying to exchange data on

I am looking to connect edge-routers in a VPN over the Internet, with requirement: - Mesh - NAT-traversing - 500 mbit throughput. I'm using Tinc 1.0.23 and it does this very nicely (I think I could also use 1.1, once it's considered stable) except for the througphut: the edgerouters cannot encrypt this fast. So I want to relieve the edge routers from this responsibility. If the end hosts

Hi, I'm doing some perf profiling, and I can see that BF_encrypt & BF_decrypt of libcrypto.so.1.0.0 (used in tincd) are consuming CPU time. I'm using Tinc 1.0.23 and Cipher = aes-128-cbc BF_encrypt & BF_decrypt seems related to Blowfish (https://www.openssl.org/docs/crypto/blowfish.html). Is it normal that BF functions are used even if AES is used ? I do not know anything about

Dear tinc community, I am using tinc in switch mode. I have three nodes. Two nodes reside on routers, vpn-eth is bridged with internal lan, each router has several machines connected to it's internal lan. Third node is the roadwarrior - "endpoint" linux PC. When the roadwarrior is off - everything works perfectly, machines on both sides can communicate without a problem in any

Hi there, I'm seeing quite frequent segfaults around check_dead_connections() and terminate_connection() when the tcp meta connection to a node times out (or is e.g. firewalled), usually it happens when there's heavy packet loss: Program terminated with signal 11, Segmentation fault. #0 edge_del (e=0x1b71ba0) at edge.c:96 96 avl_delete(e->from->edge_tree, e); (gdb)

Hi everyone, I need know if there is any command that show the hosts connected, networks, etc... in a Tinc-VPN v1.0 how in Tinc-VPN v1.1 Regards, Ramses

Can you just compile the latest from the git repo on to raspian os? On Sat, Mar 31, 2018, 11:21 AM Ramses <ramses.sevilla at gmail.com> wrote: > El 29 de marzo de 2018 23:41:24 CEST, Ramses <ramses.sevilla at gmail.com> > escribió: > >Hi everyone, > > > >I have installed Tinc-VPN v1.0.19-3, that is the last version that > >there is in Raspbian 7,

Hi everyone, I have installed Tinc-VPN v1.0.19-3 that is the last, versión that there is in Raspbian 7, installed with the apt-get command. I will like know what will be the best way to migrate this version to Tinc-VPN v1.1 Regards, Ramses

Hi, has anybody a running setup with 2 or more tinc daemons in switch mode which transport 8021q tagged traffic? I am trying to connect two segments with about 4 x 1000 mac addresses (distributed on different vlans). I am always running out of memory on one side. This happens only on the side where the arp requests come from. Currently there is no unicast traffic between the sides; only

Hello Ramses, Am Sun, 01 Apr 2018 01:44:01 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > [..] > > Correct? in general, this is exactly the right procedure. > I have installed Raspbian 7 (Wheezy). I will have problems doing this > proccess un Raspbian? Raspbian (being derived from Debian) is not a problem. The old base distribution (wheezy) is a problem. In the

Hello Ramses, Am Sat, 31 Mar 2018 22:03:25 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > But what repository I need to add to the sources.list file? the internet out there would have told you :) https://wiki.debian.org/DebianExperimental Be sure to understand, that this suite contains packages of undefined quality (this is the purpose of this suite). Do not dare to install

Hello Ramses, Am Sat, 31 Mar 2018 17:21:52 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > Can tell me someone if there is any repository to Raspbian that has Tinc v1.1 > to update a installed Tinc v1.0 from command apt-get? thankfully the Debian package maintainer for tinc (Guus) prepared a package and uploaded it to the "experimental" suite:

Hi, Is there any existing solution to install iOS9 on unjailbroken iOS devices ? If there is none, I'm thinking of porting tinc to iOS, I haven't looked at the source code much but I should be able to create a NetworkExtension for tinc. Thank you, Paul. -------------- next part -------------- An HTML attachment was scrubbed... URL:

> > > Is there any quickstart guide to setup site-to-site VPN using Tinc 1.1 > pre-rel? > > Assuming I have two routers at two sites running tinc vpn along with > routing feature. > > Once I setup manually and validate the connection, I want to automate > using REST APIs. > > -------------- next part -------------- An HTML attachment was scrubbed... URL:

I have looked into this and it would definitely be possible, NETunnelProvider. It was not looking like a simple port though, a lot of glue required to get it to a state Apple would approve. This had been on my list of projects to attempt if I could find the time and energy to commit to it. If you do port it I would be very interested! Regards, Ryan Mounce On 26 July 2017 at 20:54, Bright Zhao

I am a university student from Malaysia.This is my final year and i need to do final year project.I would like to try by applying the VPN in a IPV6 enviroment.Can sir give me some comments and idea on this topic?Thanks. --------------------------------- Try the all-new Yahoo! Mail . "The New Version is radically easier to use" ? The Wall Street Journal -------------- next part