TINC.CONF(5) File Formats Manual TINC.CONF(5) (NAME) tinc.conf - tinc (DESCRIPTION) /etc/tinc/ tinc . (NETWORKS) tinc . -c . : . tinc.conf -n . /etc/tinc/NETNAME/ NETNAME -n . syslog tincd.NETNAME . tinc -n . . tinc /etc/tinc/ /etc/tinc/NETNAME/ /etc/tinc/tinc.conf /etc/tinc/hosts/ . tinc . . (NAMES) tinc . tinc . /etc/tinc/NETNAME/tinc.conf . () tinc . . / (PUBLIC/PRIVATE KEYS) tincd -K / . . : /etc/tinc/NETNAME/rsa_key.priv -- NETNAME ( (NETWORKS) ). : /etc/tinc/NETNAME/hosts/NAME -- NAME tinc ( (NAMES) ). (SERVER CONFIGURATION) /etc/tinc/NETNAME/tinc.conf . ( # ) : Variable = Value . . : = . . ( ). /etc/tinc/NETNAME/tinc.conf . . . AddressFamily = ipv4 | ipv6 | any (any) . "any" IPv4 IPv6 IPv6 . BindToAddress = address [port] [experimental] IPv4 IPv6 tinc . BindToAddress . port Port 655 . * address . . BindToInterface = interface [experimental] tinc . . . . Broadcast = no | mst | direct (mst) [experimental] . : VPN Broadcast . no . mst (Minimum Spanning Tree) VPN . . direct . . IndirectData . ConnectTo = name tinc . ConnectTo tinc . tinc ( ConnectTo ). ConnectTo tinc . DecrementTTL = yes | no (no) [experimental] tinc (Time To Live) IPv4 (Hop Limit) IPv6 TTL ICMP Time Exceeded . switch IPv6 . Device = device (/dev/tap0 /dev/net/tun ) . tinc . . Device Interface . info tinc . DeviceType = type ( ) . Tinc tun/tap . . dummy (dummy). . . raw_socket Interface ( eth0). . . IP . multicast (multicast) UDP ( ) TTL Device . . UML QEMU KVM . tinc . VPN . uml ( ) Device /var/run/NETNAME.umlsocket . tinc User Mode Linux . vde ( ) libvdeplug Virtual Distributed Ethernet Device /var/run/vde.ctl . tinc : tun ( BSD ) tun. ( ). tunnohead ( BSD) tun . Tinc IP . IPv6 . tunifhead ( BSD) tun . Tinc IP . IPv4 IPv6 . utun ( OS X) utun. 10.6.8 OS X tuntaposx . IPv4 IPv6 . tap ( BSD ) tap. Tinc . DirectOnly = yes | no (no) [experimental] . IndirectData . Forwarding = off | internal | kernel (internal) [experimental] . off . internal tinc . . kernel TUN/TAP . . GraphDumpFile = filename [experimental] tinc filename . graphviz . filename | . Hostnames = yes | no (no) IP ( VPN) (resolve) . DNS tinc DNS . IP . IffOneQueue = yes | no (no) [experimental] ( ) IFF_ONE_QUEUE TUN/TAP . Interface = interface . . . Device . KeyExpire = seconds (3600) . . LocalDiscovery = yes | no (no) [experimental] tinc . LAN NAT NAT (ConnectTo) LAN . LAN MTU . . MACExpire = seconds (600) MAC . Mode "switch" . MaxTimeout = seconds (900) tinc . Mode = router | switch | hub (router) . router Subnet . (IPv4 IPv6) . . switch MAC VPN . ARP . (bridge) . hub switch . Name = name [required] tinc . . - (underscore) . Name $ . . Name $HOST gethostname() . PingInterval = seconds (60) tinc (probe) . PingTimeout = seconds (5) . . PriorityInheritance = yes | no (no) [experimental] TOS IPv4 UDP . PrivateKey = key [obsolete] RSA tinc. tinc . PrivateKeyFile = filename (/etc/tinc/NETNAME/rsa_key.priv) RSA tinc . ProcessPriority = low | normal | high tincd . VPN . Proxy = socks4 | socks5 | http | exec ... [experimental] . : socks4 address port [username] SOCKS 4. username . IPv4 SOCKS 4 . socks5 address port [username password] SOCKS 5. username password / . http address port HTTP CONNECT. exec command command . NAME NODE REMOTEADDRES REMOTEPORT . ReplayWindow = bytes (16) (replay) . 1 16 128 . / . tinc . StrictSubnets = yes | no (no) [experimental] tinc Subnet /etc/tinc/NETNAME/hosts/ . . TunnelServer = yes | no (no) [experimental] tinc tinc /etc/tinc/NETNAME/hosts/ . StrictSubnets . UDPRcvBuf = bytes ( ) UDP . . UDPSndBuf = bytes ( ) UDP . . (HOST CONFIGURATION FILES) . tinc . . . hosts tinc tinc . . Address = address [port] [recommended] IP tinc . tinc . . Address . Cipher = cipher (aes-256-cbc) UDP. LibreSSL OpenSSL . "none" . CBC . ClampMSS = yes | no (yes) tinc (MSS) TCP MTU (clamp) . ICMP Fragmentation Needed Packet too Big . Compression = level (0) UDP . 0 () 1 (zlib ) 9 ( zlib) 10 (lzo ) 11 ( lzo). Digest = digest (sha256) (digest) UDP. LibreSSL OpenSSL . "none" . IndirectData = yes | no (no) yes . no . MACLength = length (4) (MAC) UDP. "0" . PMTU = mtu (1514) MTU . PMTUDiscovery = yes | no (yes) tinc MTU . MTU VPN . Port = port (655) tinc Address . PublicKey = key [obsolete] RSA tinc. . PublicKeyFile = filename [obsolete] RSA tinc . 1.0pre4 tinc PEM . PEM . Subnet = address[/prefixlength[#weight]] tinc . tinc . . Subnet . MAC IPv4 IPv6 IPv4 IPv6 . IPv4 192.168.1.0/24 192.168.1.0 24 . 192.168.1.1/24 ! . IPv6 fec0:0:0:1::/64 . MAC 0:1a:2b:3c:4d:5e . . 10 . . . TCPOnly = yes | no (no [obsolete]) yes UDP TCP . tinc (masquerading) UDP . IndirectData . 1.0.10 tinc UDP . (SCRIPTS) tinc . . . tinc . . . ( Cygwin) .bat . /etc/tinc/NETNAME/tinc-up . tinc . . Network Connections . /etc/tinc/NETNAME/tinc-down tinc . /etc/tinc/NETNAME/hosts/HOST-up tinc HOST . /etc/tinc/NETNAME/hosts/HOST-down tinc HOST . /etc/tinc/NETNAME/host-up . /etc/tinc/NETNAME/host-down . /etc/tinc/NETNAME/subnet-up . . /etc/tinc/NETNAME/subnet-down . . $ . .bat % . NETNAME . NAME tinc . DEVICE tinc . INTERFACE tinc . ifconfig . NODE . . REMOTEADDRESS . REMOTEPORT tinc . SUBNET . WEIGHT . chmod a+x script . (FILES) : /etc/tinc/ . /etc/tinc/NETNAME/tinc.conf NETNAME . /etc/tinc/NETNAME/conf.d/ *.conf . /etc/tinc/NETNAME/hosts/ . /etc/tinc/NETNAME/tinc-up tinc . . /etc/tinc/NETNAME/tinc-down tinc . (SEE ALSO) tincd(8), https://www.tinc-vpn.org, http://www.tldp.org/LDP/nag2 . tinc Texinfo . info tinc info tinc . tinc . COPYING . 2016-10-29