[H-GEN] VPN Solutions

Menno Smits menno at freshfoo.com
Sun Apr 2 22:21:28 EDT 2006


Nikolai Lusan wrote:

> I have looked around at tinc, Openswan/Strongswan and openVPN. I cannot
> seem to find sufficient examples of this kind of solution (most of them
> are for net-net tunnels which is a little bit of overkill for what I
> actually need) and the documentation of all of these things is abismal.

I have lots of experience with tinc and really like it. I've heard good 
things about OpenVPN but have no personal experience. IPSec based 
solutions with OpenSwan will work but they are a real pain to get 
running and good documentation is scarce.

I'm not sure what you gripe is with documentation when it comes to tinc. 
There's heaps of it and its quite well written:

http://www.tinc-vpn.org/documentation/tinc
http://www.tinc-vpn.org/documentation/tinc.conf.5
http://www.tinc-vpn.org/documentation/tincd.8
http://www.tinc-vpn.org/examples/

Tinc is geared towards net to net tunnels but a host to net 
configuration is almost identical to set up. The tincd daemon and the 
protocol are both lightweight in terms of memory and CPU overhead so you 
couldn't call tinc overkill in that regard.

Hope that helps.

Menno







More information about the General mailing list