May 1st 2016

Version 1.1pre14 released.

  • Add tinc.service back.

April 30th 2016

Version 1.1pre13 released.

  • Fix BSD tun device support that was broken in 1.1pre12.
  • Speed up AutoConnect when there are many host config files present without an Address.

April 24th 2016

Version 1.1pre12 released.

  • Added a “—syslog” option to force logging to syslog even if running in the foreground.
  • Fixes and improvements to the DecrementTTL function.
  • Improved PMTU discovery and UDP keepalive probes.
  • More efficient relaying of UDP packets through intermediate nodes.
  • Improved compatibility with newer TAP-Win32 drivers.
  • Added support for UPnP.
  • Allow tinc to be compiled without LibreSSL or OpenSSL (this drops compatibility with nodes running 1.0.x).
  • Added a “fsck” command to check the configuration files for problems.
  • Tinc “start” now checks whether the daemon really started succesfully, and displays error messages otherwise.
  • Added systemd service files.
  • Use the recvmmsg() function if available.
  • Support ToS/Diffserv on IPv6 connections.
  • Updated support for BSD tun/tap devices.
  • Added support for OS X utun interfaces.
  • Dropped support for Windows 2000.
  • Initial support for generating a tinc-up script from an invitation.
  • Many small fixes, documentation updates.

Thanks to Etienne Dechamps, Rafał Leśniak, Vittorio Gambaletta, Martin Weinelt, Sven-Haegar Koch, Florian Klink, LunnarShadow, Dato Simó, Jo-Philipp Wich, Jochen Voss, Nathan Stratton Treadway, Pierre Emeriaud, xentec, Samuel Thibault and Michael Tokarev for their contributions to this version of tinc.

April 10th 2016

Version 1.0.28 released.

  • Fix compilation on BSD platforms.
  • Add systemd service files.

April 10th 2016

Version 1.0.27 released.

  • When using Proxy, let the proxy resolve hostnames if tinc can’t.
  • Fixes and improvements of the DecrementTTL option.
  • Fixed the $NAME variable in subnet-up/down scripts for the local Subnets.
  • Fixed potentially wrong checksum generation when clamping the MSS.
  • Properly choose between the system’s or our own copy of getopt.
  • Fixed compiling tinc for Cygwin with MinGW installed.
  • Added support for OS X utun interfaces.
  • Documentation updates and minor fixes.

Thanks to Vittorio Gambaletta, LunarShaddow, Florian Weik and Nathan Stratton Treadway for their contributions to this version of tinc.

December 22nd 2015

At SCALE 14x, which is held in Pasedana, California on January 21-24, there will be a talk titled Secure Mesh VPN w/ Service Discovery.

November 16th 2015

At FOSSETCON 2015, which is held in Orland, Florida on November 19-21, there will be a talk titled Secure peer networking with tinc.

July 5th 2015

Version 1.0.26 released.

  • Tinc now forces glibc to reload /etc/resolv.conf for every hostname lookup.
  • Fixed —logfile without a filename on Windows.
  • Ensure tinc can be compiled when using musl libc.

Thanks to Jo-Philipp Wich for his contribution to this version of tinc.

December 27th 2014

Version 1.1pre11 released.

  • Added a “network” command to list or switch networks.
  • Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol.
  • AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open.
  • The new protocol now uses UDP much more often.
  • Tinc “del” and “get” commands now return a non-zero exit code when they don’t find the requested variable.
  • Updated documentation.
  • Added a “DeviceStandby” option to defer running tinc-up until a working connection is made, and which on Windows will also change the network interface link status accordingly.
  • Tinc now tells the resolver to reload /etc/resolv.conf when it receives SIGALRM.
  • Improved error messages and event loop handling on Windows.
  • LocalDiscovery now uses local address learned from other nodes, and is enabled by default.
  • Added a “BroadcastSubnet” option to change the behavior of broadcast packets in router mode.
  • Added support for dotted quad notation in IPv6 (e.g. ::
  • Improved format of printed Subnets, MAC and IPv6 addresses.
  • Added a “—batch” option to force the tinc CLI to run in non-interactive mode.
  • Improve default Device selection on *BSD and Mac OS X.
  • Allow running tinc without RSA keys.

Thanks to Etienne Dechamps, Sven-Haegar Koch, William A. Kennington III, Baptiste Jonglez, Alexis Hildebrandt, Armin Fisslthaler, Franz Pletz, Alexander Ried and Saverio Proto for their contributions to this version of tinc.

December 22nd 2014

Version 1.0.25 released.

  • Documentation updates.
  • Support linking against -lresolv on Mac OS X.
  • Fix scripts on Windows when using the ScriptsInterpreter option.
  • Allow a minimum reconnect timeout to be specified.
  • Support PriorityInheritance on IPv6 sockets.

Thanks to David Pflug, Baptiste Jonglez, Alexis Hildebrandt, Borg, Jochen Voss, Tomislav Čohar and Vittorio Gambaletta for their contributions to this version of tinc.

You can find older news in the archive.