similar to: How to set up an extensible VPN with VirtualBox VMs as nodes

Thank you for quick and detailed response! On Mon, 2018-03-12 at 22:41 +0100, Guus Sliepen wrote: > On Mon, Mar 12, 2018 at 06:46:24PM +0200, ST wrote: > > > We have not so tech-savvy colleagues in different locations around the > > world who now use Windows 10 and need access to Linux (Debian 9). Linux > > will be provided in form of VirtualBox VMs. We, the technical

On Wed, 2018-03-14 at 09:47 +0100, Guus Sliepen wrote: > On Tue, Mar 13, 2018 at 11:09:05PM +0200, ST wrote: > > > > > 1. What open-source VPN software would you recommend for such a case? We > > > > are considering [Tinc](https://www.tinc-vpn.org) as it seems to be > > > > rather flexible and provides an easy way to add new nodes thus helping > >

On Mon, Mar 12, 2018 at 06:46:24PM +0200, ST wrote: > We have not so tech-savvy colleagues in different locations around the > world who now use Windows 10 and need access to Linux (Debian 9). Linux > will be provided in form of VirtualBox VMs. We, the technical support > team, need to have access to the guest VMs (via SSH and occasionally as > remote desktop) and to the host

On Tue, Mar 13, 2018 at 11:09:05PM +0200, ST wrote: > > > 1. What open-source VPN software would you recommend for such a case? We > > > are considering [Tinc](https://www.tinc-vpn.org) as it seems to be > > > rather flexible and provides an easy way to add new nodes thus helping > > > us to achieve the above mentioned goal A. > > > > Tinc should

Hello Tinc list! I'm trying to set up a Tinc VPN between two KVM host machines so that a VM on one host can communicate with a VM on the other host. While I do have a good bit of experience with virtualization, I'm not a particularly savvy network guy, so this is proving to be a pretty big challenge. Requirements: * ALL VM network traffic must be secure. * VMs on one host must be

Hello tinc folks, I?m new at Tinc networking, so if you only show me a link to a solution of my problem, I?ll be very happy. My problem is, I use a Tinc bridged network with 5 Fritz!Boxes routers to connect my whole family together. But I can?t use a DHCP service in the Tinc VPN, because if someone use DHCP request on a fare away location, he probability get my gateway for internet traffic,

Hello, I am having troubles with the following configuration in that it produces the following errors: *Masterserver:* On the server (yea, I know) side is a Linux machine called "*masterserver*". It should have a VPN IP of 192.168.2.1 and it sits behind a pretty generic ADSL Router (with port 655 forwarded) which can be found via a dynamic host address. A small snippet of errors this

I have 2 firewall in HA with keepalived. Can I use active the same tinc configuration on 2 firewalls ? using tun Interface with same ip on all 2 nodes is a problem ? tun device advertise itself on the network having an IP/MAC pairs (ARP) or the IP is only used by the system internally for routing so using the same configuration is right ? so one firewall be active, the other is passive. With this

No, this would in fact operate as a routing mode instead of bridging. TAP would be used as a means to push routing to where it belongs, the linux/bsd/... kernel. Consider the challenge of having completely dynamic routing between vpn peers. In one minute I might have 10000 routes towards one specific peer, and hour latter I might have NONE. And I need to diferentiate each peer at the kernel

Hello Tinc users & Guss: I was sleeping last night and I figured out how to accomplish everything I ranted about below with no source code changes to TINC. The first thing to do is create TEMPLATES for tinc.conf, tinc-up, and the NODE files. Then during the startup script, use the linux cp command and sed to copy the template to the correct name and sed to text replace

Hi I am testing running tinc in switch mode. , my topology is as follows Site 1 (tinc-srv01) -> Site 2 (tinc-srv02) I have configured the bridge interfaces with ip addresses and able to ping between bridges. I then setup a server on each site and tested layer 2 connectivity between the two servers. Topology as follows. Server 1 - *Site 1* (tinc-srv01) -> *Site 2* (tinc-srv02) - Server 2

Hi all, I use tinc since 2 years between my MPLS sites in router mode, works like a charm. Today i am trying to make an ethernet bridge beetween 2 sites for video conference needs, the raison is that 1 side is behind nat, and i dont have access on the gate, other side is on public range. Because off H323 that doesn't handle unconfigured NAT, i would like to give a public IP to the video

Hi all, I have been using tinc successfully for a while now. However, I need to do something different from my normal setup, and i am getting the feeling I am doing something obvious wrong. What I want to do is hookup 5 distant linux routers into one bigger network, Since I need to transmit both unicast and multicast traffic, the VPN network has to be in "Mode = switch" [Assumption

I see what you want me to do. But it does incur an extra MAC layer header to each VPN packet, more fragmentation. And broadcasts leak to all peers. It sure saves you from doing any improvements, but there are side effects that are undesirable to many customers. This is specially a problem if I want two VPN connections between two sites using redundant connections, we get an instant L2 loop. With

Folks, We have a setup where each mobile node connects with 1 or more tinc instances (over different links) to a central node. tinc is running in switch mode. The link is chosen by setting the IP address on the active link's interface, and the central node sees this after the first packet on the link, and moves the MAC address to a different 'ethernet port' (link). This works really

*Problem I want to solve:* We have 3 sites: A, B, and C. Network admins should have access to all three. (this works as-is). Desktop support should only have access to their site. (Tech A to site A, Tech B to site B, Tech C to site C). *How I think I can do it:* Working with keys? Admin's public key will be on all the client machines, and thus, the client machines will always

What challenge this would solve ? VPN software in general tries to be another router when running in server mode with multiple clients. This restricts VPN customers from having complex topology. For instance, I'd like to have two tunnels between each client network and each server (with two broadband connections on each end), with some OSPF running and automatically switching from one to

Hello, I am using tinc's feature to dump a graph of the vpn extensively to view the machines which are currently part of the vpn. In my tinc.conf I have this: GraphDumpFile = /tmp/tinc-graph Then I have a desktop starter that executes /usr/bin/xdot /tmp/tinc-graph to open the graph. I would love to have the ip addresses of the vpn ips of the tinc nodes in that graph, e.g. if one tinc node

Hello, I am experiencing system hangs when running NFSv4 over a tinc VPN. I don't know if the problem is with NFS or tinc and would appreciate any suggestions on how to narrow down the culprit. Unfortunately I cannot simply run NFS directly over TCP -- the participating systems are connected only over an open network. The configuration is as follows: I have a master server

Hello everyone, I am running multiple nodes each having multiple LXC containers. On those nodes I am using Tinc to share the subnet 10.20.0.0. The LXC containers may migrate between nodes and should keep the same configuration. On all nodes traffic from the external interfaces (connected to the internet) is forwarded to the bridge interfaces and masqueraded. The LXC containers are using 10.20.0.1