One is the route for the local network, which tells the kernel which IP addresses are directly reachable. Normally, there are two entries in the routing table. The tinc daemon is listening on our configured port netstat -pnaut You should also be able to ping to the tunneling ping 172.16.16.1 04:43:21 tinc.gatewayvpn: /dev/net/tun is a Linux tun/tap device (tun mode) We can test our configuration as tincd -n gatewayvpn -logfile logfile should show the following cat /root/log If no Port option is specified, the socket will be bound to the standard port 655 of tinc. Make sure this connection is accesible! We set the subnet to 0.0.0.0/0, you can read this as alpha serve on the whole internet (as opposed to a limiting it in a local range. Since we want beta to connect to alpha we should assign the external IP and port number to it. We create this file here so we can automatically add a public key to this file. This file should be send to all the other peers (only beta in this example). Shell script that will be executed right before the tinc daemon is going to close its connection to the virtual network device. The /24 means the subnet in which the daemon is going to serve. We use an IP address in the private range: 172.16.16.0/24, but you can use any address that you like (i.e. UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 So later on, if you run tinc, it will show something like: $INTERFACE contains the name of our virtual network interface that the tinc daemon uses (in our case gatewayvpn). It should be used to set up the corresponding network interface, but can also be used to start other things (as we show later for routing). This is a shell script executed right after the tinc daemon has been started and has connected to the virtual network device. For alpha we don't fill out a ConnectTo option, so alpha will passively listen for incoming connections.

Because we are going to use routing we use a tunneling device. Device in here means the virtual network to bind to. The name will be used by other tinc daemons for identification. Create config files /etc/tinc/gatewayvpn/nf

Tinc configuration