Shouldn't LocalDiscovery go in tinc.conf, not in host files?

[LukeShu]

https://www.tinc-vpn.org/documentation/tinc.pdf

[fauno]

woa! that's weird, maybe i misread the docs when i added it or did it change places in the meanwhile? i never got to test if it really worked :/

[LukeShu]

IDK if it used to be different and changed, or if it's always been that way.

But, looking at the tinc source, and then verifying it with my configs: Assignments in your own host file behave as if they were in tinc.conf. If you wanted, you could move everything except for Name= from tinc.conf to your host file.

Now, there is a problem with LocalDiscovery: It doesn't work with IndirectData, which is fine, because IndirectData has been unnecessary (even if you are behind a NAT) since at least 2012 (ref). The TeXinfo manual doesn't suggest this at all, but tinc.conf(5) explains it a bit differently.

Given my 2 hosts (lukeshu_b64 and lukeshu_arla) on the same LAN, which both ConnectTo=parabola_nu, if I:

1. set LocalDiscovery = yes on one or both of them, and
2. Disable IndirectData in /etc/tinc/lvpn/hosts/lukeshu_* on (1) b64, (2) Arla, AND (3) proton.parabola.nu

Whichever host(s) has LocalDiscovery=yes also need the host file for the hosts they'll discover.

Then I get direct communication between b64 and Arla. I verified this via ping time to their 192.168.9.X address. Without the above steps, they have a ~200ms ping time (since it's ~100ms between me and proton), and with the above steps that's down to ~2ms.

[LukeShu]

But, LocalDiscovery'd connections don't show up in /tmp/lvpn.dot :(

[LukeShu]

On that note, is there a good reason to not always just use the default Port? Currently it generates a random port if there are no public addresses; why?

[fauno]

ok, so the fix would be: * remove indirectdata when creating a node without a public address. i'm trying to remember cases when it's been useful. * move localdiscovery to tinc.conf

…

-- http://partidopirata.com.ar

[LukeShu]

Yeah.

[fauno]

On that note, is there a good reason to not always just use the default `Port`? Currently it generates a random port if there are no public addresses; why?

the plan was to run upnp+nat-pmp and you can't redirect restricted ports. also you may want to be on different networks at the same time.

…

-- :D