Back to Commands

tunctl

networkingLinux
The tunctl command is one of the most frequently used commands in Linux/Unix-like operating systems. tunctl Create and manage persistent TUN/TAP interfaces
See ExamplesView Syntax

Quick Reference

Command Name:

tunctl

Category:

networking

Platform:

Linux

Basic Usage:

tunctl [options] [arguments]

Common Use Cases

    Syntax

    tunctl [-t device-name] [-u owner] [-g group] [-b] [-f tun-clone-device] [-d device-name]

    Options

    Option Description
    -t device-name Name of the interface to create or delete
    -f tun-clone-device The tun clone device to open (default: /dev/net/tun)
    -b Brief output (don't display the device name on creation)
    -u owner Set owner of the device (username or numeric uid)
    -g group Set group of the device (group name or numeric gid)
    -n Create a TUN device (rather than a TAP device)
    -p Set persistent mode (device survives when tunctl exits)
    -d device-name Delete the specified device

    Examples

    How to Use These Examples

    The examples below show common ways to use the tunctl command. Try them in your terminal to see the results. You can copy any example by clicking on the code block.

    Basic Examples:

    Create a new TUN/TAP device
    sudo tunctl
    Create a TUN/TAP device with a specific name
    sudo tunctl -t tap0
    Create a device and assign it to a specific user
    sudo tunctl -t tap0 -u username
    Delete a TUN/TAP device
    sudo tunctl -d tap0

    Advanced Examples:

    Create a device with a specific name and group ownership
    sudo tunctl -t tap1 -g netgroup
    Create a device in "bridge" mode (no IFF_NO_PI)
    sudo tunctl -b -t tap2
    Create a device with a custom TUN clone device file
    sudo tunctl -f /dev/net/tun2 -t custom_tap
    Set up multiple devices for a virtualization environment
    for i in {0..3}; do
    sudo tunctl -t tap$i -u $USER sudo ip link set tap$i up done
    Create a device and configure it in one go
    sudo tunctl -t tap0 -u $USER && sudo ip addr add 192.168.100.1/24 dev tap0 && sudo ip link set tap0 up
    Create a persistent TUN device for OpenVPN
    sudo tunctl -t tun0 -u openvpn
    Create a TAP device for a bridge setup
    sudo tunctl -t tap0 -u $USER
    sudo brctl addif br0 tap0
    sudo ip link set tap0 up
    Create a device for QEMU/KVM virtual machine
    sudo tunctl -t tap0 -u $USER
    sudo ip link set tap0 up
    qemu-system-x86_64 -net nic -net tap,ifname=tap0,script=no,downscript=no image.img

    Try It Yourself

    Practice makes perfect! The best way to learn is by trying these examples on your own system with real files.

    Understanding Syntax

    Pay attention to the syntax coloring: commands, options, and file paths are highlighted differently.

    Notes

    The `tunctl` command is a utility for creating and managing persistent TUN/TAP network interfaces in Linux systems. TUN (network TUNnel) and TAP (network TAP) are virtual network kernel interfaces that enable user-space programs to simulate network devices. These virtual interfaces are essential for various network applications, including virtual private networks (VPNs), virtual machines, network testing, and more. Here's a more detailed explanation of TUN/TAP interfaces: - **TUN devices** operate at the IP level (layer 3), simulating a network layer device. They process IP packets and are commonly used in routing-based applications like VPNs. - **TAP devices** operate at the Ethernet level (layer 2), simulating a link layer device. They process Ethernet frames and are often used for applications that need to create virtual Ethernet segments, such as virtual machines or network bridges. The `tunctl` command, which is part of the `uml-utilities` package in many Linux distributions, simplifies the process of creating and managing these virtual interfaces. Without `tunctl`, creating persistent TUN/TAP devices would require more complex operations involving the `/dev/net/tun` device. Some key features and use cases of `tunctl` include: 1. **Creating persistent interfaces**: By default, `tunctl` creates persistent interfaces that remain even after the creating process exits, which is useful for system services. 2. **Ownership management**: You can assign ownership of the interface to specific users or groups, allowing non-root users to access the interface. 3. **Virtual machine networking**: `tunctl` is commonly used to set up networking for virtual machines (like QEMU/KVM or User Mode Linux). 4. **VPN implementation**: Many VPN solutions use TUN/TAP devices created with `tunctl` to establish virtual private networks. 5. **Network testing and simulation**: These interfaces are useful for network testing, protocol development, and simulation without affecting physical networks. After creating a TUN/TAP interface with `tunctl`, you typically need to configure it using standard network configuration tools like `ip` or `ifconfig`. This includes assigning IP addresses, setting the interface up, and potentially adding it to network bridges. It's worth noting that modern Linux systems often provide alternative methods for managing TUN/TAP interfaces, such as through `ip tuntap` commands or systemd-networkd configurations. However, `tunctl` remains a simple and straightforward tool for quickly creating and managing these virtual interfaces, especially in scripts and traditional system configurations.

    Related Commands

    These commands are frequently used alongside tunctl or serve similar purposes:

    ip
    brctl
    ifconfig
    bridge
    openvpn
    qemu
    Explore All Commands

    Use Cases

    Learn By Doing

    The best way to learn Linux commands is by practicing. Try out these examples in your terminal to build muscle memory and understand how the tunctl command works in different scenarios.

    See ExamplesTry Lab Exercises
    $ tunctl
    View All Commands