<div dir="ltr">Ok, that's good to know. I just got the feeling that having multiple 'ConnectTo' statements would be inefficient. The only state on host using Tinc this way would be the 655 tcp/udp port forwarding for one of the public IPs. Everything else happens in the containers, and this can be a flexible option.<br><br>On the discovery, so it can be taken for granted that without the 'ConnectTo' new Tinc instances on either side in this context will autodiscover each other on the same host? Are they any additional settings like 'localdiscovery' to be enabled?<br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 24, 2014 at 9:25 PM, Etienne Dechamps <span dir="ltr"><<a href="mailto:etienne@edechamps.fr" target="_blank">etienne@edechamps.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Tue, Sep 23, 2014 at 11:55 AM, raul <<a href="mailto:raulbe@gmail.com">raulbe@gmail.com</a>> wrote:<br>
> I could install Tinc in all the containers on both sides and use 'ConnecTo'<br>
> and create a mesh which will possibly work, but is there a better or more<br>
> efficient way to do this?<br>
<br>
</span>I don't see why it wouldn't work. Note that you don't need a full<br>
mesh, just make sure all tinc nodes are part of the same graph and you<br>
should be good to go.<br>
<br>
tinc will automatically figure it out and establish direct UDP<br>
connections between nodes (using UDP hole punching to circumvent NATs<br>
if necessary), even if they don't have a direct "ConnectTo"<br>
declaration for each other. In other words tinc will always use the<br>
most efficient route (i.e. direct UDP communication) assuming it's<br>
technically feasible over the underlying network.<br>
_______________________________________________<br>
tinc mailing list<br>
<a href="mailto:tinc@tinc-vpn.org">tinc@tinc-vpn.org</a><br>
<a href="http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc" target="_blank">http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc</a><br>
</blockquote></div><br></div></div>