I just built another Unraid server at a remote location and was looking for ways to connect both my servers and just found Zerotier. Great video explaining what and how it works! I was able to get it up and running on Unraid and it works flawlessly. I love the fact that I don't need to open ports on my router. Awesome software!
Wow this is a golden tip !!, I also had a provider blocking most ports. With this tool they can block whatever they want, it doesn't bother me anymore.
Couple questions: 1. When the app on a phone is connected, does it create an actual VPN and if so, through which node does it route the traffic? From my understanding, it creates a "pseudo VPN" and only provides a connection to the other nodes, not actually funneling all the traffic through the "VPN" 2. How do you force all the data on a laptop client (or any version that creates a virtual network port) to go through the ZeroTier connection? 2.5. Could you make a video on how to setup a "ZeroTier VPN Server". i.e. I have a computer that is on all the time. I want to route all the traffic from each of my other ZeroTier devices through that central ZeroTier device. I've had ZeroTier for a while, but not the full understanding of how it actually works. So any help would be appreciated.
Thx for this follow up video and the packet capture you did was gold! One thing I have noticed from that capture is that the encrypted traffic that goes to and from the ZeroTier server is UDP. It is somewhat faster than TCP and not much overhead for ZeroTier servers as no connections needs to be maintained. On the other side, the applications we might use to communicate between our devices (through ZeroTier) must ensure the data arrived at the destination. Have you made some tests through ZeroTier to validate the importance of this? Applications that by default uses TCP won't have any issues, but have you tested some gaming for example which are notorious to use UDP for fast overhead-less communications?
A great way to show this is using tracert command. Had 2 zerotier clients, both on separate cell networks. Tracert came up with 1 hop, and less than 40ms ping.
Looks interesting. Can you connect 2 offices and share resources e.g. printers, etc..? Seems like whatever you want to access on the other side needs to have the client installed.
As its encrypted they can yansfer and see all the things. Also you are connected to their infra using virtualadapter thats on your pc ... does anyone that takes security seriously would use zerotier... ?
So if I download ZeroTier to my phone with no other configuration, all communication between my phone and the other side is encrypted, right? What about encrypting all traffic, to be safe using the public wifi. Is it possible to force all traffic to be encrypted and send through ZeroTier to my home server? I am currently using ZeroTier to access my security system, homeassistant, and others running on my home server.
Nice save , I almost fell off my chair lmao was so funny , I can almost hear Tom rag on about using opnsense verses pfsense , and how he does'nt see any reason to switch .... bla .... bla
I installed on Heztner VPS, by default zerotier enable IPv6. But Im encountered my VPS IPv6 traffic cannot go out... I have to disable IPv6 on ZeroTier.. How to fix it?
Very nice video, thanks. I travel a lot and run up against geofencing of services that I subscribe to back home. Would ZeroTier be a viable means to access these services while I am overseas? (I tried running a VPN/DynamicDNS service on an old Mac OS server I had lying around and while that worked initially, it broke while overseas and left me with no way to try and fix it so scratch that as a solution.)
Very cool project. I can see some use cases, especially if built into other things. I see a lot of potential. However, ZeroTier's value proposition seems to be rapid and easy deployment, so I don't really see the use case for building fixed firewall-to-firewall tunnels. I'm not really sure why you would use it over a mature, heavily audited, fully private VPN project in that case. Secondarily, while I get that this might eat into their monetization strategy, I'd like to see them release a "community edition" of the server like some other projects. I could see some enterprise and educational institutions wanting to run them in-house and configure their clients to never use the public planetary servers.
I am from India, Here port forwarding is very difficult to get from ISP's and therefore due to this, everything which requires connecting through the internet and even hosting a website is impossible here. I use zerotier to connect to my Raspberry Pi, and my server on my home network while I am out, I mainly use Raspberry Pi to turn my servers on or get them to sleep.
There is free version of ZeroTier up to 25 endpoints or nodes. Besides Professional version of ZT starts at 5$ for 25nodes, much cheaper than many/most VPN solutions. And ZT code was also audited, tested and its's also private and stable. We are using it for 3+ years so far and works fine.
I would argue that ZeroTier is a VPN. The definition is broad and encompasses any encrypted tunneling service, which this clearly is. If you go by popular definitions, ZeroTier falls in a class of VPN technologies known as P2PVPN.
I just built another Unraid server at a remote location and was looking for ways to connect both my servers and just found Zerotier. Great video explaining what and how it works! I was able to get it up and running on Unraid and it works flawlessly. I love the fact that I don't need to open ports on my router. Awesome software!
Wow this is a golden tip !!, I also had a provider blocking most ports. With this tool they can block whatever they want, it doesn't bother me anymore.
I love you Sir, you are brilliant at explaining things.
Couple questions:
1. When the app on a phone is connected, does it create an actual VPN and if so, through which node does it route the traffic? From my understanding, it creates a "pseudo VPN" and only provides a connection to the other nodes, not actually funneling all the traffic through the "VPN"
2. How do you force all the data on a laptop client (or any version that creates a virtual network port) to go through the ZeroTier connection?
2.5. Could you make a video on how to setup a "ZeroTier VPN Server". i.e. I have a computer that is on all the time. I want to route all the traffic from each of my other ZeroTier devices through that central ZeroTier device.
I've had ZeroTier for a while, but not the full understanding of how it actually works. So any help would be appreciated.
Hey please make a tutorial on how to create the server \ moon of zerotier
just use ztncui from github. has a docker image so it's one click install.
Ok thank you. When I was looking to install the moon I did not find anything about it. So I'll try it
Thank you@@elv_on
Thx for this follow up video and the packet capture you did was gold!
One thing I have noticed from that capture is that the encrypted traffic that goes to and from the ZeroTier server is UDP. It is somewhat faster than TCP and not much overhead for ZeroTier servers as no connections needs to be maintained. On the other side, the applications we might use to communicate between our devices (through ZeroTier) must ensure the data arrived at the destination. Have you made some tests through ZeroTier to validate the importance of this? Applications that by default uses TCP won't have any issues, but have you tested some gaming for example which are notorious to use UDP for fast overhead-less communications?
A great way to show this is using tracert command. Had 2 zerotier clients, both on separate cell networks. Tracert came up with 1 hop, and less than 40ms ping.
Looks interesting. Can you connect 2 offices and share resources e.g. printers, etc..? Seems like whatever you want to access on the other side needs to have the client installed.
i thought you're going to talk about speed/throughput of ZT vs. VPN
love your thoughts about the topic.. pls. keep em coming :)
I've been in the dark for too long this software is I.T. game changer love zerotier
As its encrypted they can yansfer and see all the things. Also you are connected to their infra using virtualadapter thats on your pc ... does anyone that takes security seriously would use zerotier... ?
is it possible to run ZT over TCP?
Nice video man - thanks a lot
Tom have you tried to authenticate via AD for remote clients?
Question: How does ZT interact with your IDS software when an outside connection is made?
No issues as it doesn't seem to match any threat feeds I am using
@@LAWRENCESYSTEMS Thank you! I am still looking into it.
Can you compare zero tier VS tinc vpn?
sounds cool :-) thanks a bunch young man ... keep smiling
So if I download ZeroTier to my phone with no other configuration, all communication between my phone and the other side is encrypted, right? What about encrypting all traffic, to be safe using the public wifi. Is it possible to force all traffic to be encrypted and send through ZeroTier to my home server? I am currently using ZeroTier to access my security system, homeassistant, and others running on my home server.
Might be possible but not really what it was designed for.
7:25 "Sideways" lol.
Why do Wireshark say UDP protocol when vpn using Openvpn protocol?
UDP is the default protocol for OpenVPN
It's here some chance to run zerotier for Freenas jail?
Thanks for the video, good content.
You probably knew OPNsense has package support for ZeroTier, it works very well. I wish pfSense had it
it actually has: github.com/ChanceM/pfSense-pkg-zerotier
and: th-cam.com/video/t0L_C7_LUgY/w-d-xo.html
@Codera C give it a try!
Nice save , I almost fell off my chair lmao was so funny , I can almost hear Tom rag on about using opnsense verses pfsense , and how he does'nt see any reason to switch .... bla .... bla
I installed on Heztner VPS, by default zerotier enable IPv6.
But Im encountered my VPS IPv6 traffic cannot go out... I have to disable IPv6 on ZeroTier.. How to fix it?
my.zerotier.com/network/ disable the auto assign IPv6 address under Advanced in your network. Use IPv4 only
Very nice video, thanks.
I travel a lot and run up against geofencing of services that I subscribe to back home. Would ZeroTier be a viable means to access these services while I am overseas?
(I tried running a VPN/DynamicDNS service on an old Mac OS server I had lying around and while that worked initially, it broke while overseas and left me with no way to try and fix it so scratch that as a solution.)
It could if you set up a box at home to route through
@@LAWRENCESYSTEMS Thanks
Very cool project. I can see some use cases, especially if built into other things. I see a lot of potential. However, ZeroTier's value proposition seems to be rapid and easy deployment, so I don't really see the use case for building fixed firewall-to-firewall tunnels. I'm not really sure why you would use it over a mature, heavily audited, fully private VPN project in that case.
Secondarily, while I get that this might eat into their monetization strategy, I'd like to see them release a "community edition" of the server like some other projects. I could see some enterprise and educational institutions wanting to run them in-house and configure their clients to never use the public planetary servers.
I am from India, Here port forwarding is very difficult to get from ISP's and therefore due to this, everything which requires connecting through the internet and even hosting a website is impossible here.
I use zerotier to connect to my Raspberry Pi, and my server on my home network while I am out, I mainly use Raspberry Pi to turn my servers on or get them to sleep.
There is free version of ZeroTier up to 25 endpoints or nodes. Besides Professional version of ZT starts at 5$ for 25nodes, much cheaper than many/most VPN solutions. And ZT code was also audited, tested and its's also private and stable. We are using it for 3+ years so far and works fine.
It's opensource download it an optimise it for your use case.
I would argue that ZeroTier is a VPN. The definition is broad and encompasses any encrypted tunneling service, which this clearly is.
If you go by popular definitions, ZeroTier falls in a class of VPN technologies known as P2PVPN.
quality 360p ?
TH-cam does that waiting for their servers to catch up
@@LAWRENCESYSTEMS I see the HD now.
please master, this zerotier works on freeNAS ?
github.com/zerotier/ZeroTierNAS/blob/master/FreeNAS/README.md
You are a crack!!!!! Thank you for this review and the previous one more in detail.
Note that VPN providers must by law keep logs. So pretty worthless.
ZeroTier is not that type of VPN software