similar to: Define which host to use when direct link not possible?

On 30.08.2016 17:37, Guus Sliepen wrote: > On Tue, Aug 30, 2016 at 02:38:16PM +0200, Armin Schindler wrote: > >> we use a meshed VPN with TINC to connect 7 offices. >> Some office are in other countries and use other ISPs. The connection >> between some ISPs (peering partners) are not that good. This means we >> have packet loss between those direct connections.

On Tue, Aug 30, 2016 at 02:38:16PM +0200, Armin Schindler wrote: > we use a meshed VPN with TINC to connect 7 offices. > Some office are in other countries and use other ISPs. The connection > between some ISPs (peering partners) are not that good. This means we > have packet loss between those direct connections. > > To avoid this direct connection, I would like to tell TINC

Le 31/08/2016 à 10:47, Armin a écrit : > On 30.08.2016 17:37, Guus Sliepen wrote: >> On Tue, Aug 30, 2016 at 02:38:16PM +0200, Armin Schindler wrote: >> >>> we use a meshed VPN with TINC to connect 7 offices. >>> Some office are in other countries and use other ISPs. The connection >>> between some ISPs (peering partners) are not that good. This means we

Hello all, we are using tinc 1.0.24 with 6 hosts (endpoints). Quality of service is used with prio qdisc on all network interfaces. This means depending on the TOS value of the IP header IP-packets will get a priority queue on the network interface. Packets from TINC (UDP 655) maybe reordered using these queues to send out high-prio (VoIP) packets first. Could this create a problem on the

Hi, I´m using Tinc for several years, but I didn´t fix a performance problem. There a about 20 nodes in this network. Master: 10.0.0.12 (dedicated host in a datacenter, debian, 100mBit port) tinc.conf: Name = TincKnoten12 AddressFamily = ipv4 Interface = tun ProcessPriority=high mode = router #DirectOnly = no Compression=0 PMTUDiscovery = yes #IndirectData = yes #ReplayWindow = 64 #ConnectTo

Hi all, I would like to announce the first release of the chan_capi channel driver on sourceforge.net The package is available for download with name chan_capi-cm-0.5 and is the current CVS HEAD. It is derived from the chan_capi-0.4.0PRE1 of kapejod. The main changes are: - complete rework - fix race-conditions - fix call state handling - rework of debug/verbose messages - added capiFax

Hello, I have two servers (A and B) in separate locations. Both are connected together via two tinc switches to provide two subnets on both servers. This works pretty good. I can start my VMs on any server connected to one of those bridges without changing any routes. The subnets hosted on both servers (each in a bridge) are 172.16.10.0/24 (mainly on A) and 172.16.11.0/24 (mainly on B) Now I

On 09/03/2016 10:56 AM, Etienne Dechamps wrote: > C will still need keys in order to establish metaconnections with A and B (as > well as a few other things). However there is no need for C to own any > "Subnets" at all. If somebody breaks into C, he could get access to the vpn network, right? Because the keys are there, it will be possible to use them to get access. Even if

On 2/14/20 2:23 PM, Tobias Kirchhofer wrote: > On 14 Feb 2020, at 14:05, Armin Schindler wrote: > >> On 2/14/20 11:44 AM, Tobias Kirchhofer wrote: >>> On 14 Feb 2020, at 11:06, Armin Schindler wrote: >>> >>> ??? Hello! > > [?] > >>> For our new setup (planned with CentOS 8, waiting for the official repo for the latest dovecot >>>

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Guus, On 04/30/2015 03:42 PM, Guus Sliepen wrote: > On Thu, Apr 30, 2015 at 02:55:59PM +0200, Armin Schindler wrote: > >> we are using tinc 1.0.24 with 6 hosts (endpoints). Quality of service >> is used with prio qdisc on all network interfaces. This means depending >> on the TOS value of the IP header IP-packets will

Hi, Etienne I took a look for the below host configuration parameter (IndirectData), the default is no. For the below example: A ConnectTo B, B ConnectTo C: If IndirectData = no (default), then A wouldn’t establish direct connection with C, but will be forwarded by B. If IndirectData = yes, then A will try to establish direct connection with C, even though A don’t have the statement of

Hi I'm trying to implement a scheme in which the nodes will have a direct UDP tunnel to each other. First, all nodes make connection with one public node, and then make connections with each other. And I came across the following problem: Remotely located nodes can establish a direct UDP connection, but the nodes that are in the same local network can not, and all traffic goes through the

Hi, we are using Tinc in our Freifunk Network in Oldenburg for internode connections over the internet. So Tinc is running on OpenWrt 10.03 on Dlink Dir-300 Routers. We all have enough internet bandwith (1,6 MB/sec and more) but we only get a maximum speed of ~350KB/sec between two tinc nodes because then tinc uses 99% of the cpu. Is it possible to get more Speed with tinc on this machines?

*You should repeat this for all nodes you ConnectTo, or which ConnectTo you. However, remember that you do not need to ConnectTo all nodes in the VPN; it is only necessary to create one or a few meta-connections, after the connections are made tinc will learn about all the other nodes in the VPN, and will automatically make other connections as necessary. * The above is from the docs. Assuming

Hello, sorry for beeing off-topic here. But can anyone confirm that there is a problem reverse resolving lists.digium.com (216.207.245.17) ? Because of this problem, my mail server will not accept mails from lists.digium.com (it is configured to accept valid DNS only). Armin

On Tue, Apr 10, 2018 at 03:36:08PM +0200, Hans de Groot wrote: > hosta  <--> hostb  <-->  hostc > > Hosta and hostc are not directly connected via tinc. But both are conncted > via hostb (I called my network tincnet). This works fine I can ssh from > hosta to hostc and vice versa without any problems. > > hostc is in a whitelisted iprange at some service

Hi all, it took a while, but on sourceforge.net I added the new release 0.6 of chan_capi-cm driver. Note: dial string and capi.conf has changed. The main changes are: - added 'relaxdtmf'. - more BSD compatibility - correct PROGRESS handling - added verbose text for capi info/reason error messages. - use correct facility-selector for echo-cancel - added application capicommand() for CAPI

Hi there, I am using tinc since some monthes. I think the basic idea of extending vpn to a mesh of systems via tun/tap is great. And I think it is one of the useable developments compared to the much more complex vpn solutions I had used in the past. Great work. Setting up tinc I have fought with the configuration (and with the concepts) for a while as I have found no example that covers my

Hi, Etienne In addition, is there any option or switch can turn of the automatic direct connection? For the example below, even A has the route to C and can establish UDP connection directly, but I need the traffic to go through B, how can I achieve that easily? (instead of remove something from A’s routing table, or manually block the connection between A and C) > On 1 May 2017, at 6:28 PM,

On Wed, Nov 18, 2015 at 08:25:28AM +0100, Armin Schindler wrote: > But I have a question regarding "Subnet=" possibilities. When I have more than > one Server acting as host for VMs and need to have automatic routing to > all VMs on these servers, can I use tinc to create this routing automatically? > > My idea is to have a script which is started when a VM is