Interesting! So if I have 5 nodes; A B C D E F... I can just configure each node with A's public key (and A with theirs), and that will allow all of them to communicate directly?
On Fri, Aug 31, 2018 at 8:14 PM, Corey Boyle <coreybrett at gmail.com> wrote:> I can just configure each node with A's public key (and A with > theirs), and that will allow all of them to communicate directly?Yes. If you configure a hub with spokes, then Tinc will create a full mesh, on demand as needed. Assuming, of course, that any relevant firewalls can be connected-through. Even with firewalls, Tinc will still relay traffic. Cheers, Parke
Thanks for all your help. I've been reading thru the tinc manual, but was having a hard time finding an explanation of the security/trust model. I'm interested in using tinc in a business production environment, so I just want to make sure I have it secured properly. Would spokes loose their connection we each other if the hub went offline? Also, what's the minimum required exchange for a node to connect to another? Do both nodes need to exchange public keys, or just one with the other?