similar to: Is every node being treated equally in tinc?

Hi Guys, Say when tinc is running all good, the "server" contains all the key files of clients. If we remove the key file for client A during run, how long before does server find out the key file is gone? I see a "KeyExpire" option in the conf file, is this the time? In my own experiment, the client will still be able to connect to the tinc network even if the key file is

Thanks Guus for the quick answer, I will give a try now. Рысь, In my case we don't want to restart tinc "server" at all, therefore what might happen is that the client is still connected to server while its public key was already removed from server. I will try the signal approach. Heng On Mon, Jul 25, 2016 at 12:42 PM, <tinc-request at tinc-vpn.org> wrote: > Send tinc

Hi guys, Second question for me today:), really appreciate the help. I have been using tinc in a linux environment, due to our need, I kept it running all the time.(i.e. several months) Recently I found out the system's memory usage is gradually going higher and higher, and eventually triggering oom-killer in the system. After disabling process one by one, I identified tinc is the reason for

On Mon, 25 Jul 2016 12:16:36 -0400 Heng Wang <jason.wangh at gmail.com> wrote: > Hi Guys, > > Say when tinc is running all good, the "server" contains all the key > files of clients. > If we remove the key file for client A during run, how long before > does server find out the key > file is gone? I see a "KeyExpire" option in the conf file, is this

Hi tinc forum, I was setting up tinc server at home and try to use it while traveling. There are two questions for me to acheive this. 1. When I scan available ports my external IP address from outside using nmap, port 655 doesn't show up even though I've enabled on router. I'm using AT&T DSL and not fixed IP. I had to use port like 80 for tinc to work. Is this normal? 2. If I

Something to add. When this happened, it looks like tinc shutdown gracefully(not seg fault ..), because I can tell tinc-down script got implemented. Heng On Wed, Nov 25, 2015 at 6:00 AM, <tinc-request at tinc-vpn.org> wrote: > Send tinc mailing list submissions to > tinc at tinc-vpn.org > > To subscribe or unsubscribe via the World Wide Web, visit >

Thanks for the reply. I am running tinc (1.0.24) in an embedded linux environment, with a pretty old kernel (2.6). I have let tinc run for almost 24 hours with internet and can't reproduce the issue. Heng On Wed, Nov 25, 2015 at 6:00 AM, <tinc-request at tinc-vpn.org> wrote: > Send tinc mailing list submissions to > tinc at tinc-vpn.org > > To subscribe or

Hi Guys, I have been using tinc in a linux environment, which has always been working fine. Recently I encountered an issue that tinc process exits(or crash?) when internet is down. What could be the cause of it? Is there a timeout mechanism inside tinc code that it will exit after failing to bring up tun/tap interface for a long period? The internet has been down for several days. I am trying

Thanks Guus. Appreciate the help. What's the purpose of SUBNET msg? Is it even useful in switch mode? I tweaked the code to disable SUBNET msg, because I thought they weren't useful when it comes to switch mode. Which caused the UDP connection got blocked apparently. If I re-enable SUBNET msg, the udp connection starts to work fine. I don't see any forwarding traffic any more. On

Hi I have not tried systemd-coredump yet but I found something strange in my syslog file. Like this message in the en of the log file: tincd[10322]: segfault at 7fffb3180000 ip 00007ff7937f11c2 sp 00007fffb317dd68 error 4 in libc-2.23.so[7ff7936a3000+1c0000] There is more in the attached syslog file. Any clues? Best Regards, Håvard Rabbe > On 14 Feb 2019, at 02:27, Hamish Moffatt

On Mon, Feb 22, 2016 at 05:41:05PM +0300, Yazeed Fataar wrote: > Ok I have a simple lab setup with three nodes , one acting as the "Central > Node" and the other two as remote nodes which "*ConnectTo*" the central > node in order to be able to communicate with each other. > > What I would like to know is , once the tinc remote nodes establish a > connection

Hi, You mean use the vpn link as active active? What service run for the vpn? If pure tcp load balance, iptables can do these needs. If http service you can use L7 load balancer On 29 Oct 2017 7:04 pm, "Bright Zhao" <startryst at gmail.com> wrote: > Let’s say, tinc A node server LAN-1(single internet circuit), tinc B node > and tinc C node are both serve LAN-2.(two

On Wed, May 03, 2017 at 02:15:36PM +0800, Bright Zhao wrote: > 1. The destination of IPv4 wouldn’t be changed, Yes I agree, that’s the goal and final destination for the communication. But during the path, it may be encapsulated into another packet(tunnel mode), where the outside IP header is the physical address, but the inner destination remain unchanged, and I think Tinc encapsulates into

Hello list, we have been running tinc to connect multiple nodes without problems for quite some time now. Thanks for this great piece of software! Our configuration is as follows: Two "supernodes" A and B running the tinc daemon are publicly reachable from the internet. Node A is running Linux and has a static public IP address. Node B is running Windows with port forwarding

Hi, Guus I don’t quite understand what you describe below, to me, no matter tinc or any other router/PC get an IP packet, it will go to check with its route table, to match the destination IP against the route table for the next hop, if I put "ip route add default via <C’s VPN IP address> dev $INTERFACE", I thought tinc will match the packet’s destination IP to the “default”, and

Hello List, I have this setup: hosta  <--> hostb  <-->  hostc Hosta and hostc are not directly connected via tinc. But both are conncted via hostb (I called my network tincnet). This works fine I can ssh from hosta to hostc and vice versa without any problems. hostc is in a whitelisted iprange at some service provider. I need hosta to talk to a certain ip (lets call it

Hi, Tinc experts There’s a requirement, where A connect to B, B connect to C; where B knows all the subnets from A and C, but A wouldn’t need to know anything about C, and C wouldn’t need to know anything about A. Any tinc configuration can make this happen? You can think of B is not an interconnect/forwarding node, instead, it only connect to A and C separately. I can think of run two tinc

On Tue, May 02, 2017 at 09:16:53AM +0800, Bright Zhao wrote: > In this case, A's traffic route to Internet is go through C to D to internet, but If I add Subnet =0.0.0.0/0 on B, the traffic seems go directly from A to B to internet. [...] > During the whole process, A's default gateway point to C. It might look that way, but it doesn't. I assume you did something like this on

Hi Ok I have a simple lab setup with three nodes , one acting as the "Central Node" and the other two as remote nodes which "*ConnectTo*" the central node in order to be able to communicate with each other. What I would like to know is , once the tinc remote nodes establish a connection to the "Central Node" , my understanding was that if the remote nodes want to

Let’s say, tinc A node server LAN-1(single internet circuit), tinc B node and tinc C node are both serve LAN-2.(two internet circuits) Normally, we can only set tinc A to connect to either B or C, and then the other set as backup. But in some circumstances, we would like to combine the internet pipe of both two circuits, so that the tunnel traffic can have a better bandwidth. If that’s the