decentral vpn with 1 gateway host

[Sven-Haegar Koch]

On Thu, 25 Feb 2010, deep_eye wrote:

> it is possible to hold the connections between the clients behind a
> nat-router without a third node?

I don't think so.

> if i create a second reachable master and add in the tinc.conf a
> additional connectto line, make the clients to both masters a connection
> or at first to the first and if it is not reachable then probe/connect
> to the second?

The clients make connection to all connectto lines right after they 
start - so in your case you would have two open tcp connections when 
both masters are reachable.

To make this work even better add to master1 a ConnectTo=master2 and 
vice versa.
(This way everything keeps running even if some clients can for whatever
reason only talk to master1, whiche some others can only talk to 
master2 at that time - at least as long at the two masters can talk to 
each other)

c'ya
sven-haegar

-- 
Three may keep a secret, if two of them are dead.
- Ben F.