wiki:Tinc

Version 26 (modified by r3vv7, 6 months ago) (diff)

I changed peering matrix

Tinc

We have opened a tinc cloud in the dn42 for peering, the link local subnet is 172.22.255.176/28

Participants

IP User Host ASN
172.22.255.177 downhill geekhabitat 64655
172.22.255.178 leon einstein 64703
172.22.255.179 welterde hex 64738
172.22.255.180 welterde hex
172.22.255.181 r3vv7 r3vv7 64667
172.22.255.182
172.22.255.183
172.22.255.184
172.22.255.185
172.22.255.186
172.22.255.187
172.22.255.188
172.22.255.189
172.22.255.190

Peering matrix

ASN 64655 64703 64738 64667
64655 4/- 4/- -/-
64703 4/- 4/- 4/-
64738 4/- 4/- 4/-
64667 -/- 4/- 4/-

If you are interested in joining us there or just interested in peering with tinc, talk to us in the jabber-muc or IRC.

How to peer

  • Install tincd ;)
  • In /etc/tinc, create a directory for the net (example: dn42) and a subdirectory hosts in it, so that you have /etc/tinc/dn42/ and /etc/tinc/dn42/hosts
  • Now create a configfile named 'tinc.conf' in /etc/tinc/dn42/
# port 655 tcp/udp is used 
BindToAddress=$your_public_IP
Device=/dev/net/tun
Mode=Switch
Name=$your_hostname_without_tld
PrivateKeyFile=/etc/tinc/dn42/rsa_key.priv
ConnectTo=$one_peer
  • Let tinc create it's keyfiles with tincd -n dn42 -K. You now should have a /etc/tinc/dn42/rsa_key.priv file like in the config above and a /etc/tinc/dn42/hosts/$your_hostname_without_tld
  • Now open the /etc/tinc/dn42/hosts/$your_hostname_without_tld and put the following on top of the public key there:
Compression=9    -- optional
Subnet=172.22.255.xxx/32
Address=$your_public_IP
  • Please put your file in the wiki, under Tinc/hosts/your_name and link it in the table above. For good measure you can put a link in Tinc/hosts too.
  • Obtain the config from your peer (should be linked in the table) and put it in /etc/tinc/dn42/hosts/
  • Write a /etc/tinc/dn42/tinc-up file with the content and set it executable:
#!/bin/sh
ip address add 172.22.255.xxx/28 broadcast 172.22.255.191 scope link dev $INTERFACE # $INTERFACE is meant literally
ip link set $INTERFACE up  
  • Now start the peering with tincd -n dn42. If all works with the peering, put dn42 in the /etc/tinc/nets.boot
  • New peers can be added the same way as your initial peer, put a new file in hosts/, nothing else of the config needed
  • Setup the bgp and have fun :)

Overview

http://eastend.welterde.dn42/vpn.png