-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, On Wed, 7 Oct 2020, Hamish Moffatt wrote:> On 22/9/20 4:44 pm, Hamish Moffatt wrote: >> Is it possible to a configure a tinc (1.0.35) node to only send outbound >> through specific nodes, rather than trying to establish direct connections? >> >> I have a node which can connect to all the others directly, but some routes >> have terrible packet loss, so I'd like to configure it not to try. > > > Anyone?It looks to me, like "IndirectData" is what you're looking for. Although, you have to configure it on every *other* node.> > Should I just block the traffic outbound at the firewall?This might work, too.> > > Thanks > > Hamishregards, Erich -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE3p92iMrPBP64GmxZCu7JB1Xae1oFAl99OegACgkQCu7JB1Xa e1o7CA/8D7PRWLLvlvemJuLI3kaNDGNWC9OTc8j8mD6UwduGFrcsHhBQENBewPLs rct7o5gQbO6dshe8QQUQxI/9BOAVveiaHWprmEJmdjxUs8oSHyXX6HiyA0hjNcAB M/zhX/tzzYtRSj3WCvSU9l92PmG2lxVbliYRuEaaXiQyMypw1p0F4BBC7DzUbQQM UiwH70T1POV1szvEZtTNGTu2LtCdsx9x/022ywcfDBbpbHosRJBkin5XaV1eShLS cnvUdilJ/8JVPg4o1Um6zpS/vFUf+0UxH1V1OIcvjyccKkItuV2dlj1h3kLOtUqM Ox65FW1ZgZeLOrtJkpM9TZEbHDlmJbJSd3+VPKyCBsGXwyWbOlGUhNlmBsO5HqrT NkkBOr2Bcwkch6Gc0VdAP7VolWNJWqOoTyuq3VTwSSmhQNSJHRy/YSrdgnU+jR1Y Bp/rcqmpxFoPf2MsbHHeK6T3oXVayNmile2uc+4Fzksm2ir4Bn1TPXbh0zZLBlz8 sKf6V3HRBIiJ9GYe9KrOLN2Zr83r77tAh4HVUoXpfSaVN/WYM+6wyrvJU0NUeVZN xpjBJthtejWqYYPk2qZEshzGn72+oOoEi7urEABAR8Thg66ByWHJvWNIH5z9w3dq TCZpPh8QF5y9cTEPGbgtGeXQSbB4DhH4JpyEzpXsHDdEm7dbOgg=KjhN -----END PGP SIGNATURE-----
On 7/10/20 2:45 pm, Erich Eckner wrote:> Hi, > > On Wed, 7 Oct 2020, Hamish Moffatt wrote: > > > On 22/9/20 4:44 pm, Hamish Moffatt wrote: > >> Is it possible to a configure a tinc (1.0.35) node to only send > outbound through specific nodes, rather than trying to establish > direct connections? > >> > >> I have a node which can connect to all the others directly, but > some routes have terrible packet loss, so I'd like to configure it not > to try. > > > > Anyone? > > It looks to me, like "IndirectData" is what you're looking for. > Although, you have to configure it on every *other* node. >That sounds like it would work - but do I need to add it to that host's file on every other node? Or is it something that node advertises on the network? I've got one path in particular I want to block so I guess I could start by adding it to one end, for the other end... Hamish
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, 7 Oct 2020, Hamish Moffatt wrote:> On 7/10/20 2:45 pm, Erich Eckner wrote: >> Hi, >> >> On Wed, 7 Oct 2020, Hamish Moffatt wrote: >> >> > On 22/9/20 4:44 pm, Hamish Moffatt wrote: >> >> Is it possible to a configure a tinc (1.0.35) node to only send outbound >> through specific nodes, rather than trying to establish direct connections? >> >> >> >> I have a node which can connect to all the others directly, but some >> routes have terrible packet loss, so I'd like to configure it not to try. >> >> >> > Anyone? >> >> It looks to me, like "IndirectData" is what you're looking for. Although, >> you have to configure it on every *other* node. >> > That sounds like it would work - but do I need to add it to that host's file > on every other node? Or is it something that node advertises on the network? > > I've got one path in particular I want to block so I guess I could start by > adding it to one end, for the other end...Yes, if it's only one path you want to block, I think, adding it to both ends should suffice. Note, however, that I'm not a tinc dev, just a user (and manual reader ;-P), so I cannot really comment on whether this option propagates via some advertisment.> > > Hamishregards, Erich -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE3p92iMrPBP64GmxZCu7JB1Xae1oFAl99o90ACgkQCu7JB1Xa e1rIOhAAgu1Fx831QKfA1eqjljF54CbyN9LDfdI9v8RF2AhaPRvIilfyEBTSA+G6 bC/k9OTKAi+8QO4qJVpDINUGJKhS/KrZGPjHnrQXKzn/0DVVqH2S53KTIfvYLITh /RGatBJ8Yc04pc0OJ4/mauQORczV9EHGBdITdWrgkO0cOxUewhfZbAZOZAdXCiF/ C23vMYfbAKKSIaOrvWwmMsfTNn7xYYxgO2BXBquEEy3pl956CvHIzriRKTD7ypqu PYrzxaacK4kYaCFy3xCTJgd+8H+Yxp9TxCTKUHnpvQZnW/g0RDsksyMlTlRIfaB6 JvB7lP1X5ZzG9kgMI2ISbwBb2cSy8T13SweyY2d1uclNvJN+0c5vFo3xcz9jh5/B xaQ1Lvc9yIsbGe/k6G4JUTkbVK0vv9GBGY88OTfwRYbZCZ0GPSMojCPhQXlWQjwY Vd4ZlOXNPUyVQ/LV0ztPxQ6hzB1Vmd/M+QfKBVf54WKJ59rxfS524oy+ABHbgZ6m L8zdEHrHkGt8dCkqA3fthyJsWYqgN3NQGALgbL9Yavh+VUpdWhoD0C2Lq2cASG2f MFlc320PHw2PIsYWpmOsnzdroZqJX+2YYSiPwl7RHTfpczhH49xK/RGDhwaEbcFL Nchuhgz+I/sd2MIQF9UGJyvyB2ds8GegUCCoUp+m7olfS3TA9E0=4YUC -----END PGP SIGNATURE-----