similar to: Dynamic addition of nodes

I'm sure this is a topic that's come up plenty of times before, but is it possible to implement native parallelization in rsync? ?There are several blog posts listing workarounds, but they are largely unideal. My initial thought would be that rsync could split up the file list across N workers; the incremental file list would still be generated as it does today, but can then be divided

> The goal is to create a working setup as easily as possible. > This is going fairly well with 1.1 ;-) thank you. > - if people are able to read it, you can just as well leave it to a > warning > > and suggest running again with a --autoport flag to enable automatic port > > generation > > I'm sure I will get some emails from people complaining that if tinc

I like the config generator of tinc 1.1! An issue to consider on the default behavior: It turns out 'tinc -n mynet init mynodename' makes up a default Port=... when the standard port is taken: "Warning: could not bind to port 655. Tinc will instead listen on port 22911". It is nice that this is autodetected and warned, but I wonder whether it is nice to let this

Suppose tinc is installed on 100 routers in 100 sites. How to automate site-site vpn management across 100 sites? Some kind of vpn management solution? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20180329/90f0198d/attachment.html>

Just search online why in general that is insecure via CLI vs programmatic for first class automation.. there is a reason why snmp, rest, ... exist. On Thu, Mar 29, 2018 at 3:50 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > You've mentioned security issues in your previous email, but now you're > hopping to management issues. > > Have you tried Ansible, Chef or

Hi, I'm new to Tinc, so a "Hello" to all! :-) In my setup one master node has a static public IP. All other nodes have dynamic public IPs changing every 24 hours (and yes, in Germany even Global IPv6 Unicast Prefixes are dynamic on DSL/Cable sockets :-( ). To distribute the dynamic node-IPs to all other nodes, the following "host-up" script is used:

I'd like to hear from anyone using coreos to run a container with tinc for purpose of connecting containers. Sounds almost like a chicken/egg problem:-) I'm thinking of running a container with alpine linux and tinc installed there. John Griessen

Al like any open-source or free sofware you need to put the leg work into what you want it to be. My company is actually creating something using TINC and we believe in it. If successful we'll be giving back to TINC monetarily in a big way to make TINC even better so if TINC isn't for you keep an eye on further developments in the future. Thanks, Rafael On Thu, Mar 29, 2018 at 12:03

Programmatic management with first class APIs is preferred for larger deployments.. On Mon, Mar 26, 2018 at 12:28 PM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > Could you elaborate on why CLI (SSH) managing is insecure? > > > Tomasz Chmielewski > https://lxadm.com > > > On 2018-03-27 04:23, al so wrote: > >> So, for remote manageability of Tinc, we

Thanks Guus for answering all of these many emails. I now had a question as to if it is possible for something like this. Suppose that you have a Tinc VPN network made up of 4 nodes (A, B, C, D) and you want to dynamically add new nodes (E, F). How can this be done without having to re-start all of the nodes A-D? Based upon what I can see, each node condifuration files need to be modified

Thanks Guus for answering all of these many emails. I now had a question as to if it is possible for something like this. Suppose that you have a Tinc VPN network made up of 4 nodes (A, B, C, D) and you want to dynamically add new nodes (E, F). How can this be done without having to re-start all of the nodes A-D? Based upon what I can see, each node condifuration files need to be modified

This part I have to answer on-list: > On 29 Mar 2018, at 17:50 , al so <volkswak at gmail.com> wrote: > > automation refers to day to day vpn management from non-IT layman... not a geek running shell/ansible scrpits. Dear Also / Volk Swak TINC have it’s uses and place in the VPN environment. Perhaps you could/should consider https://pritunl.com/ <https://pritunl.com/> or

I see what you want me to do. But it does incur an extra MAC layer header to each VPN packet, more fragmentation. And broadcasts leak to all peers. It sure saves you from doing any improvements, but there are side effects that are undesirable to many customers. This is specially a problem if I want two VPN connections between two sites using redundant connections, we get an instant L2 loop. With

There is a reason most NMS systems used SNMP in the past and REST apis past 7+ years. They don't use CLIs except toy Expect type scripts.. Not just security but better error handling and more. Good luck learning! On Thu, Mar 29, 2018 at 9:03 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > SNMP is mainly used for monitoring, not _server_ automation. > > Also, it's

No, this would in fact operate as a routing mode instead of bridging. TAP would be used as a means to push routing to where it belongs, the linux/bsd/... kernel. Consider the challenge of having completely dynamic routing between vpn peers. In one minute I might have 10000 routes towards one specific peer, and hour latter I might have NONE. And I need to diferentiate each peer at the kernel

>> The setup looks like this: >> web <- tinc "tiosp" -> gateway <- tinc "tiutl" -> backup Which lan ips do all your computers have? network addess will be fine. ALBI...

Hi all, I am currently deploying tinc as an alternative to OpenVPN. My setup includes a lot of nodes and some of them are sitting together behind the same router on the same network segment. (E.g. connected to the same switch.) I noticed, that those nodes do never talk directly to each other via their private ip-addresses, but instead use the NATed address they got from the router.

Hello everyone, I am running multiple nodes each having multiple LXC containers. On those nodes I am using Tinc to share the subnet 10.20.0.0. The LXC containers may migrate between nodes and should keep the same configuration. On all nodes traffic from the external interfaces (connected to the internet) is forwarded to the bridge interfaces and masqueraded. The LXC containers are using 10.20.0.1

Hello Guus, is there a .deb somewhere for tinc 1.1 and ubuntu 15.10 available / instruction on howto build .deb files for ubuntu ? Then I could put something together with python or the shell, inotify of the tinc graph file and tinc info. Thanks+ BR Max. > On Fri, Jan 22, 2016 at 02:12:20PM +0100, Maximilian H. wrote: > >> I am using tinc's feature to dump a graph of the

Hi I have a Tinc cluster of about 100 nodes, and they are all running tinc 1.1pre14. I'd like to upgrade to tinc 1.1pre15. Is there a suggested mechanism to do this while keeping the cluster up? For instance can I simply automate the installation of tinc 1.1pre15 on each node and reload the existing configuration using 'tinc reload' Will the temporary state of having a mix set of