Feasibility of Tinc vpn with my current setup.

[Guus Sliepen]

On Sun, Oct 18, 2015 at 02:00:36PM -0500, Bobby Thomas wrote:

> IPfire router/firewall(openvpn client) --->ISP(Internet)--->Amazon
> VPS(openvpn server).
> 
> The ipfire router is behind a CARRIER-GRADE NAT [...] I have come to
> know that Tinc VPN supports spoke to spoke(full mesh) direct
> connection bypassing hub (so clients can reach other clients without
> going through a server) , can this be possible in my scenario? I am
> really looking out for a solution.

Tinc needs at least one node that is not behind NAT to assist with the
hole punching of other nodes' NATs. As long as either of two nodes that
want to connect to each other is behind cone NAT, this will work. It is
likely that your carrier-grade NAT is cone NAT.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20151018/d4325af0/attachment.sig>