similar to: Question to Configuration File:

http://www.open-mesh.org/ Idea #1: is BATMAN worth considering using as part of the layer 2 routing in Tinc? Idea #2: would it be possible to embed BATMAN as an option to avoid having to use Quagga for routing v6 subnets? -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi, Guus I referre to the two separate tinc process/network(received same subnet), not Sunbet selection within one tinc process/network. My understanding is if different tinc process comes with exact subnet, as they are not related with each other(they have no idea regarding weights with each other), I guess the routing depends on the host's main routing table, for specific route it depends

Hi, I'm trying to setup tinc tunnel between my work and home linux machines as shown here http://cl.ly/image/1H1R2X2D403X I am able to setup tinc session between A and B and I can ping them. But I can't ping C or D from B, or A respectively. Home network 192.168.1.0 Work network 10.20.50.0 tinc tunnel is 15.0.0.x. Do I need to run tinc on C and D as well? Or Do i need to manually

Hi, I have two tinc nodes which announce default gate to internet. How does tinc select which node is prefered when I route to the tinc device and not a special ip? tinc 1.0.16 ALBI...

TL;DR: a proposal for a new tinc feature that allows nodes to filter ADD_SUBNET messages based on the metaconnection on which they are received, so that nodes can't impersonate each other's VPN Subnets. Similar to StrictSubnets in spirit, but way more flexible. BACKGROUND: THE ISSUE OF TRUST IN A TINC NETWORK In terms of metaconnections (I'm not discussing data tunnels here), one of

Sure, let me reply all here for my finding. @Lars @Guus A’s tinc.conf: Name = bright AddressFamily = ipv4 ConnectTo = aly_hk A’s tinc-up: #!/bin/sh ifconfig $INTERFACE 10.0.0.110 netmask 255.255.255.0 A’s host config: Subnet = 10.0.0.110/32 (VPN address) Subnet = 192.168.31.0/24 (LAN address) IndirectData = yes (enabled for every tinc nodes) The node aly_hk (vpn address 10.0.0.3) connects with

Hello Mads, In case you never saw any mail from me, I'm tinc's co-author. It would be helpful if you'd subscribe to the tinc developpers mailing list. It's not high volume, but it eases communication. There's a problem with tinc's boot scripts (at least the debian one, but that's fixed now). The netmask of the tap devices should be larger than the one specified with

Hello, I already consulted related lists @freebsd.org [1,2] but I have remained unsuccessful to solve the following issue: VPN works for an internal IPv4 subnet, but I doesn't for an internal IPv6 subnet with ULAs. To be honest, I don't have any experience setting up a local IPv6; so I guess that I'm doing something wrong here. For those that know FreeBSD: The main aim is to connect

Hello, I successfully use tinc for one year in a configuration with several subnets (about 5-7 subnets) and one main server. Sometimes tinc dies with the error message: Error while waiting for input: Bad file descriptor If it happens, this happens immediately, when one subnet has disconnected. tinc (on the main server) tries then to disconnect all currently connected subnets and while

Hi, I'm getting this weird error in the logs when starting tinc "Creating metasocket faile: Address family not supported by protocol" I've tried explicitly putting AddressFamily = ipv4 in the tinc.conf file but it doesn't seem to make a difference. The IP's i'm using for the vpn are 10.0.x.x Thanks for your assistance, R. Schwarzenberg -------------- next part

On 30.08.2016 17:37, Guus Sliepen wrote: > On Tue, Aug 30, 2016 at 02:38:16PM +0200, Armin Schindler wrote: > >> we use a meshed VPN with TINC to connect 7 offices. >> Some office are in other countries and use other ISPs. The connection >> between some ISPs (peering partners) are not that good. This means we >> have packet loss between those direct connections.

Hi, Reason behind that is we have some use cases wouldn’t like to make some nodes to become the transit node, but there’re some other nodes in the topology act as the transit nodes. So if the tinc node forward subnet update it learning from one side to the other side, then it possible to become transit node if one side only have route to go through it. That node I would call it “spoke-only”

Hi, I upgraded some of my Tinc nodes from 1.0.8 recently and found something strange. All of a sudden, the vpn would not work as a full-mesh. Certain nodes were not contactable. I re-generated my rsa-keys, and checked my configuration. My vpn uses the following in tinc.conf, as I am routing both ipv4 and v6. === name = node1 mode = switch AddressFamily = any PMTU = 1280 PMTUDiscovery = yes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 06.02.2015 um 21:36 schrieb Guus Sliepen: > On Fri, Feb 06, 2015 at 09:01:21PM +0100, Flynn Marquardt wrote: > >> Analyzing a routing problem in a tinc net I found, that a declaration of >> a class-A subnet (x.0.0.0/8) in a host configuration file is ignored, e.g. >> >> Subnet = x.0.0.0/8 > [...] >> Splitting

We are testing tinc inside Google Compute within a single region and an external region. Two boxes are created as follows: /etc/tinc/test/tinc_test_1 Subnet = 10.240.0.0/16 Subnet = 10.240.0.4/32 Address = 104.154.59.151 /etc/tinc/test/tinc_test_2 Subnet = 10.240.0.0/16 Subnet = 10.240.0.5/32 Address = 104.197.132.141 /etc/tinc/test/tinc.conf Name = $HOST AddressFamily = ipv4 Interface = tun0

hi there ! the current version of tinc crashes with a segfault. it seems, as if has to to with fact, that i don`t have configured any subnets.... if the client tries to start up subnet_update() ist called for myself. the for iteration does not get an entry (because the subnet avl-tree is empty). the later call of net2str causes a segfault, because it gets an empty subnet and tries to access

On 7 December 2015 at 17:20, Florent B <florent at coppint.com> wrote: > I have a cluster of 5 nodes, running Proxmox 4, and Tinc as "virtual > switch" for my nodes : on each node, a bridge "vmbr1" where Tinc is > connected, provides me a secured network for my VMs (connected to that > bridge). > > When I move (hot move) a VM from a host to another, I

Two tinc networks/daemons, and received same subnet from the two daemons, how tinc will choose which one is preferred? And the weight settings in each daemon for subnet will or will not be the judge?

Hi, thanks. Sorry for the mess with my gmail account... This made the route go away. But is this the right way to configure tinc? To give the tinc interface an IP (with 255.255.255.255 subnetmask) from the local (green) network it does route the traffic to? Does it make sense to give the tinc interface an 192.168.0.253 IP, when the net here is 192.168.0.0/24 on eth1 I can not find such a