VPN with Tinc

FIXME: What's a VPN, what's Tinc

Installation on Server(s) and Client(s)

FreeBSD

• Install tinc 1.1 pre from ports

sudo pkg install tinc-devel               # binary
sudo portmaster -iB security/tinc-devel   # source

GNU/Linux (Debian based)

• Install tinc 1.1 pre from source

sudo apt install -y build-essential libncurses5-dev libreadline6-dev libzlcore-dev zlib1g-dev liblzo2-dev libssl-dev

Compile Tinc 1.1pre :

cd /usr/src/

wget https://www.tinc-vpn.org/packages/tinc-1.1pre17.tar.gz

tar xvf tinc-1.1pre17.tar.gz

cd tinc-1.1pre17

./configure

make

sudo make install

Once installed the configuration dir should be in:

/usr/local/etc/tinc/

And tinc is installed in

/usr/local/sbin/tinc

MacOs

FIXME

Windows

• Install tinc 1.1 pre win binaries from upstream at https://tinc-vpn.org/download/

Setup Server(s)

FreeBSD

• Initialize new VPN

sudo tinc -n beernet init server

• Configure the host's own interface

sudo tinc -n beernet add subnet 10.10.10.1

• Configure the host's public IP, or domain if you have one for the host

sudo tinc -n beernet add address=super.domain.xxx  # if you have a domain ...
sudo tinc -n beernet add address=1.1.1.1           # or if you just have a public IP

• edit /usr/local/etc/tinc/beernet/tinc-up, so that your network interface is brought up correctly, for instance with:

ifconfig $INTERFACE 10.10.10.1 netmask 255.255.255.0  # leave $INTERFACE as it is

• test if your VPN works nicely for the time being by running it directly in a shell with extra verbose options:

tincd -n beernet -D -d3