wiki:Tinc

Version 17 (modified by welterde, 7 months ago) (diff)

--

Tinc

We have opened a tinc cloud in the dn42 for peering, the subnet is 172.22.255.176/28

Participants:

IP User Host ASN
172.22.255.177 downhill geekhabitat 64655
172.22.255.178 leon einstein 64703
172.22.255.179 welterde hex 64738
172.22.255.180 welterde hex
172.22.255.181
172.22.255.182
172.22.255.183
172.22.255.184
172.22.255.185
172.22.255.186
172.22.255.187
172.22.255.188
172.22.255.189
172.22.255.190

If you are interested in joining us there or just interested in peering with tinc, talk to us in the jabber-muc or IRC.

How to peer

  • Install tincd ;)
  • In /etc/tinc, create a directory for the net (example: dn42) and a subdirectory hosts in it, so that you have /etc/tinc/dn42/ and /etc/tinc/dn42/hosts
  • Now create a configfile named 'tinc.conf' in /etc/tinc/dn42/
BindToAddress=$your_public_IP   -- port 655 tcp/udp is used 
Device=/dev/net/tun
Mode=Switch
Name=$your_hostname_without_tld
PrivateKeyFile=/etc/tinc/dn42/rsa_key.priv
ConnectTo=$one_peer
  • Let tinc create it's keyfiles with tincd -n dn42 -K. You now should have a /etc/tinc/dn42/rsa_key.priv file like in the config above and a /etc/tinc/dn42/hosts/$your_hostname_without_tld
  • Now open the /etc/tinc/dn42/hosts/$your_hostname_without_tld and put the following on top of the public key there:
Compression=9    -- optional
Subnet=172.22.255.xxx/32
Address=$your_public_IP
  • Please put your file in the wiki, under Tinc/hosts/your_name and link it in the table above. For good measure you can put a link in Tinc/hosts too.
  • Obtain the config from your peer (should be linked in the table) and put it in /etc/tinc/dn42/hosts/
  • Write a /etc/tinc/dn42/tinc-up file with the content and set it executable:
#!/bin/sh
ip address add 172.22.255.xxx/28 broadcast 172.22.255.191 scope link dev $INTERFACE -- this time $INTERFACE is meant literal
ip link set $INTERFACE up  -- same here
  • Now start the peering with tincd -n dn42. If all works with the peering, put dn42 in the /etc/tinc/nets.boot
  • New peers can be added the same way as your initial peer, put a new file in hosts/, nothing else of the config needed
  • Setup the bgp and have fun :)

Overview

http://eastend.welterde.dn42/vpn.png