similar to: Tinc VPN as Gateway to the Internet

Hi Peter and other Libvirt-Users, Thank you, I greatly appreciate your response. The diagram I provided may be a little misleading, so I have attached a new diagram (also available here: https://i.imgur.com/X3nFMCz.png ). I think I also need to provide some more detail about my scenario here: These physical nodes are provided to me by "bare-metal cloud" providers like Scaleway / OVH /

I use tinc everyday to access a private network at work, and i have three different public IPs to "bootstrap" other vpn clients so that a device like my laptop can always be on vpn wherever i go. As there is will all networks, there are some maintenance costs associated with tinc, one of which is making sure that all certs in the "hosts" folder are the same on all

Hello tinc users! Has anyone been able to get LocalDiscovery to work properly? I'm not quite sure what I need to do other than enable it in tinc.conf, and it doesnt seem to be working. Has anyone else tried it? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160901/5698fc86/attachment.html>

Hello Libvirt Users, I would like to setup a two node bare-metal cluster. I need to guidance on the network configuration. I have attached a small diagram, the same diagram can be seen here: https://i.imgur.com/SOk6a6G.png I would like to configure the following details: - Each node has a DHCP enabled guest network where VMs will run. (eg, *192.168.1.0/24 <http://192.168.1.0/24>* for

Hello, I have 4 VM's running in Microsoft Azure. They all should have similar configurations except from their tinc ip addresses of course. They run tinc 1.0.24. I have a 5th machine, my development machine. I am able to ping all 4 VM's from my computer when I start tinc from the commandline (tincd -n innomeer -D -d 2). 3 of the computers also work ok when running tinc as a service

Hello Libvirt-Users! I have a quick question about the qemu guest agent. Is it possible to use the guest agent from inside the guest in order to query the name of its own domain? For example, I use a base-image.qcow2 with a baked-in hostname. I would like to include a little tool in my guest image to change the hostname to the name of the domain. Is this sort of thing possible? -Cobin

I absolutely love tinc and the features it brings to the table, and also the stability it provides. My one issue with tinc is that managing certs between different nodes seems rather inconvenient. By using "tincd -n vpn -D -d5" I can see when a cert fingerprint is denied. Does tinc have features like that of puppet where you can list the pending certs and accept or deny them? see

Hello. I am using the current 1.0 stable. I have tinc daemons on different dynamic ip connections. They have ports forwarded. They are using switch mode. I have 1 box which has dynamic dns set up. I would like everyone to use that for bootstrapping using ConnectTo. However I do NOT want that host to tunnel all traffic due to downtimes and bandwidth limitations. Can i get tinc to share the ips

First off, I would like to express my appreciation for the tinc software, it has been such a great vpn solution for what i need, its amazing. I am setting up another node on the vpn. "KVM" is my public facing node, "MacbookAir" is my workstation, "NewNode" is my node i have recently configured and the one with the issue presumably. NewNode and MacbookAir are on the

I have to say that I wouldn't do the networking that way - in fact, in the clusters I manage, we haven't done the networking that way :-). Rather than layer 3 routing between VMs, we've chosen to use layer 2 virtual switching (yes, using openvswitch). We have the luxury of multiple 10G NICs between our hosts, so we've separated out the management network from the guest network,

Hi all, I am trying to configure tinc for my network: I have one server with a public /64 IP6 address and one IP4 address, and some other computers with possibly only local addresses (NAT, and router which I don't control) I configured tinc so that all the clients connect by ipv4 to the server with the public address. So I have something like this Ovh (the provider of the server

Hello! I use tincd to interconnect 3 LANs: A, B and C. So long, it works fine: everybody reaches everybody. But I want a different behavior: A and B should be allowed to talk, as should B and C. I tried to simply delete the host-files on the nodes that should not be allowed to talk to eachother: A has a hostfile from B B has a hostfile from A and C C has a hostfile from B But this is no

Hi People, I recently setup a replication service within dovecot between two machines in different datacenters, which has the following configuration; (yes it is hashed out, because I needed to) #service replicator { # unix_listener replicator-doveadm { # mode = 0666 # } # process_min_avail = 1 #} # #service aggregator { # fifo_listener replication-notify-fifo { # mode = 0666 #

I have implemented a small local network. I use pfSense as Firewall and Gateway, I have all my servers inside a DMZ, except the domain controllers that are on the LAN. LAN: 10.10.20.0/24 DMZ: 10.10.30.0/24 DC1: 10.10.20.2 DC2: 10.10.20.3 pfSense: LAN: 10.10.20.1 WAN: x.x.x.x DMZ: 10.10.30.1 In my local network, I have 2 domain controllers with SAMBA4, I would like to find

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I've been trying to get Samba 3.2 to work in the past few days, and I'm running into a few problems which I have been unable to solve myself. My first problem isn't blocking for me, but it seems not consistent with documentation. I can't join my server using a domain admin's kerberos ticket. I need to specify "-U

Hey all, heres my problem/s. I have to write code which upon a message from another component 1. Reserves bandwidth for a voip call between 2 hosts.My code will reside on neither of the hosts but the hosts will have to go through me to talk to eachother. 2. Since i''m reserving bandwidth for these hosts to talk to eachother i have to limit everything else. 3. I need to do this

Hi guys/girls, We are running a TDM04B card with Asterisk in a Linux box that has 15 GrandStream102 extensions and 1 SNOM190 phone which we are using as an operator console. The FXO ports in the TDM04B are plugged directly into our telecoms provider's analogue lines. Something I've picked up with the SNOM is that sometimes when there are two active incoming calls via Zap channels they end

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#ffffff" text="#000000"> <font size="-1"><font face="Verdana">Hi all!<br> <br> Hopefully

Hello Tinc, Hello Guus, I am trying to make my own ikiwiki, and I want to use the Tinc VPN website as a basis so that I can modify it and add my content. I have cloned the wiki like so: *git clone git://tinc-vpn.org/wiki <http://tinc-vpn.org/wiki>* And I have tried to build it, but it looks like the source is missing some templates, which is causing the formatting to look not right, see

Hello ! I have two lans (LAN A & LAN B) connected via freeswan vpn gateways (VPNGW-A & VPNGW-B) over DSL. Logged in at VPNGW-A, I can only connect to the clients *behind* the VPNGW-B but not the VPNGW-B itself. ---- example VPNGW-A# ssh -l remoteuser 172.20.7.1 [IP 80.133.197.130.40523 > 172.20.7.1.ssh: SWE 343226483:343226483(0) win 32440 <mss 16220>] ---- no connection I