Create network of untrusted peers (like SocialVPN, ChaosVPN, etc)

[Glauber Ferreira]

For some weeks I've been trying to devise a way to connect multiple users in various parts of the city and state, and I found out that most likely Tinc is the only daemon that does the kind of meshing I want.

I was successful in connecting some servers of mine around in switch mode, but now comes the hard part: How can I authenticate clients on my network? I would also need to direct static leases and subnets to them, is this safely possible on switch mode? What other kind of attacks should I be aware of? (Impersonation, Any kinds of malicious broadcasts, etc)



For now, my configuration is that every peer connects to a master node where there's also a dnsmasq daemon which hands out IPs.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20171218/c9a1322d/attachment.html>