What it does
tinc is a GPL-licensed VPN daemon with automatic mesh routing, NAT traversal, IPv6 support and Ethernet bridging for networks you configure.
tinc can join several sites without forcing every packet through one central server. Its mesh routing tries to send traffic directly to the destination, and its bridging support can make separated Ethernet segments behave as one network. The project describes NAT traversal when at least one member can receive incoming connections.
This is daemon and network-configuration work: adding a member involves its host configuration, and you operate the participating machines. The March 2026 stable release fixes compatibility with modern systems; the separate 1.1 branch remains labelled prerelease. Decide which branch and routing model suit the network before deploying clients.
Strengths
- Routed mesh and Ethernet-bridge options
- NAT traversal with a reachable member
Watch out for
- Requires host and network configuration
Best for
- Administrators connecting private sites or lab networks