Exposing home hosted services on internet with tinc

[Martin]

Hi Andrê,

So by nodes I assume you mean the "boxes".
I would suggest each "box" gets it's own tinc node(with a static ip) and
then on the server it should be a matter of pointing at the ip address of
the appropriate box tinc ip address.

I've done this myself with WireGuard and it works great.

On Mon, Nov 25, 2019 at 7:14 AM André Rodier <andre at rodier.me> wrote:

> Hello,
>
> I need to build a VPN, and I am not sure if tinc is the right tool to
> use. I am more familiar with OpenVPN.
>
> I have a few boxes at home, behind a router with a dynamic IP
> address. Those boxes host some services, like web sites, for instance.
>
> I have a server hosted online, with a few IPv4 and IPv6 addresses. All
> addresses being static, of course.
>
> I am planning to use tinc on Debian, to "expose" the services hosted on
> these "home" boxes on IPv4/IPv6 addresses, using tinc VPN. The NAT
> would occur in the tunnel. I can write the nat/masquerade rules.
>
> The big question is, does tinc need the two nodes have a static IP
> address ?
>
> I don't want to modify the router configuration or to create nat rules
> in the home router.
>
> Thanks,
> André
>
> _______________________________________________
> tinc mailing list
> tinc at tinc-vpn.org
> https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20191125/63ed8a09/attachment-0001.html>