ZeroTier VS VPN and A Look At The Data Stream With Wireshark

Amazon Affiliate Store
➡️ www.amazon.com...
Gear we used on Kit (affiliate Links)
➡️ kit.co/lawrenc...
Try ITProTV free of charge and get 30% off!
➡️ go.itpro.tv/lts
Use OfferCode LTSERVICES to get 5% off your order at
➡️ lawrence.video...
Tesla Referral Program Offer
🚘 www.tesla.com/...
Lawrence Systems Shirts and Swag
👕 teespring.com/...
Digital Ocean Offer Code
➡️ m.do.co/c/85de...
HostiFi UniFi Cloud Hosting Service
➡️ hostifi.net/?v...
Protect you privacy with a VPN from Private Internet Access
➡️ www.privateint...
Google Fi Service Referral Code
📱g.co/fi/r/TA02XR
More Of Our Affiliates that help us out and can get you discounts!
➡️ www.lawrencesy...
Twitter
🐦 / tomlawrencetech
Patreon
🔗 / lawrencesystems
Our Forums
🔗 forums.lawrenc...
GitHub
🔗 github.com/law...
Discord
🔗 / discord
Our Web Site
🔗 www.lawrencesy...
PIA Internet Access Affiliates Link
www.privateint...
www.zerotier.com/
My More in depth Zerotier Tutorial
• Zerotier Tutorial: Del...

[@hoonetic]

I just built another Unraid server at a remote location and was looking for ways to connect both my servers and just found Zerotier. Great video explaining what and how it works! I was able to get it up and running on Unraid and it works flawlessly. I love the fact that I don't need to open ports on my router. Awesome software!

[@rudypieplenbosch6752]

Wow this is a golden tip !!, I also had a provider blocking most ports. With this tool they can block whatever they want, it doesn't bother me anymore.

[@jamalkhan815]

I love you Sir, you are brilliant at explaining things.

[@devinduricka243]

Couple questions: 1. When the app on a phone is connected, does it create an actual VPN and if so, through which node does it route the traffic? From my understanding, it creates a "pseudo VPN" and only provides a connection to the other nodes, not actually funneling all the traffic through the "VPN" 2. How do you force all the data on a laptop client (or any version that creates a virtual network port) to go through the ZeroTier connection? 2.5. Could you make a video on how to setup a "ZeroTier VPN Server". i.e. I have a computer that is on all the time. I want to route all the traffic from each of my other ZeroTier devices through that central ZeroTier device. I've had ZeroTier for a while, but not the full understanding of how it actually works. So any help would be appreciated.

[@Itay1787]

Hey please make a tutorial on how to create the server \ moon of zerotier

[@elv_on]

just use ztncui from github. has a docker image so it's one click install.

[@Itay1787]

Ok thank you. When I was looking to install the moon I did not find anything about it. So I'll try it Thank you@@elv_on

[@andrewborntrager7909]

A great way to show this is using tracert command. Had 2 zerotier clients, both on separate cell networks. Tracert came up with 1 hop, and less than 40ms ping.

[@hothardwarehive1526]

Thx for this follow up video and the packet capture you did was gold! One thing I have noticed from that capture is that the encrypted traffic that goes to and from the ZeroTier server is UDP. It is somewhat faster than TCP and not much overhead for ZeroTier servers as no connections needs to be maintained. On the other side, the applications we might use to communicate between our devices (through ZeroTier) must ensure the data arrived at the destination. Have you made some tests through ZeroTier to validate the importance of this? Applications that by default uses TCP won't have any issues, but have you tested some gaming for example which are notorious to use UDP for fast overhead-less communications?

[@michaelloving8004]

I've been in the dark for too long this software is I.T. game changer love zerotier

[@EdisonSatorre]

i thought you're going to talk about speed/throughput of ZT vs. VPN love your thoughts about the topic.. pls. keep em coming :)

[@nixxblikka]

Nice video man - thanks a lot

[@informol9843]

As its encrypted they can yansfer and see all the things. Also you are connected to their infra using virtualadapter thats on your pc ... does anyone that takes security seriously would use zerotier... ?

[@lanceeilers5061]

sounds cool :-) thanks a bunch young man ... keep smiling

[@enderst81]

Looks interesting. Can you connect 2 offices and share resources e.g. printers, etc..? Seems like whatever you want to access on the other side needs to have the client installed.

[@notpublic7149]

7:25 "Sideways" lol.

[@CzAerox]

So if I download ZeroTier to my phone with no other configuration, all communication between my phone and the other side is encrypted, right? What about encrypting all traffic, to be safe using the public wifi. Is it possible to force all traffic to be encrypted and send through ZeroTier to my home server? I am currently using ZeroTier to access my security system, homeassistant, and others running on my home server.

[@LAWRENCESYSTEMS]

Might be possible but not really what it was designed for.

[@DiSHTiX]

Thanks for the video, good content. You probably knew OPNsense has package support for ZeroTier, it works very well. I wish pfSense had it

[@christianriegert2370]

it actually has: github.com/ChanceM/pfSense-pkg-zerotier and: kzbin.info/www/bejne/qmGvkHZtlLGInbs

[@christianriegert2370]

@Codera C give it a try!

[@lanceeilers5061]

Nice save , I almost fell off my chair lmao was so funny , I can almost hear Tom rag on about using opnsense verses pfsense , and how he does'nt see any reason to switch .... bla .... bla

[@kristopherleslie8343]

Tom have you tried to authenticate via AD for remote clients?

[@OoKangZheng]

I installed on Heztner VPS, by default zerotier enable IPv6. But Im encountered my VPS IPv6 traffic cannot go out... I have to disable IPv6 on ZeroTier.. How to fix it?

[@DiSHTiX]

my.zerotier.com/network/ disable the auto assign IPv6 address under Advanced in your network. Use IPv4 only

[@davidkierzkowski]

is it possible to run ZT over TCP?

[@SomeGuyInSandy]

Question: How does ZT interact with your IDS software when an outside connection is made?

[@LAWRENCESYSTEMS]

No issues as it doesn't seem to match any threat feeds I am using

[@SomeGuyInSandy]

@@LAWRENCESYSTEMS Thank you! I am still looking into it.

[@sejerersek]

Why do Wireshark say UDP protocol when vpn using Openvpn protocol?

[@LAWRENCESYSTEMS]

UDP is the default protocol for OpenVPN

[@sethwilliamson]

Very cool project. I can see some use cases, especially if built into other things. I see a lot of potential. However, ZeroTier's value proposition seems to be rapid and easy deployment, so I don't really see the use case for building fixed firewall-to-firewall tunnels. I'm not really sure why you would use it over a mature, heavily audited, fully private VPN project in that case. Secondarily, while I get that this might eat into their monetization strategy, I'd like to see them release a "community edition" of the server like some other projects. I could see some enterprise and educational institutions wanting to run them in-house and configure their clients to never use the public planetary servers.

[@Nikhil-Tomar]

I am from India, Here port forwarding is very difficult to get from ISP's and therefore due to this, everything which requires connecting through the internet and even hosting a website is impossible here. I use zerotier to connect to my Raspberry Pi, and my server on my home network while I am out, I mainly use Raspberry Pi to turn my servers on or get them to sleep.

[@aeonikus1]

There is free version of ZeroTier up to 25 endpoints or nodes. Besides Professional version of ZT starts at 5$ for 25nodes, much cheaper than many/most VPN solutions. And ZT code was also audited, tested and its's also private and stable. We are using it for 3+ years so far and works fine.

[@JamesT65]

It's opensource download it an optimise it for your use case.

[@UlisesRolonDavila]

You are a crack!!!!! Thank you for this review and the previous one more in detail.

[@Baker00552]

Can you compare zero tier VS tinc vpn?

[@RoyOlsen]

I would argue that ZeroTier is a VPN. The definition is broad and encompasses any encrypted tunneling service, which this clearly is. If you go by popular definitions, ZeroTier falls in a class of VPN technologies known as P2PVPN.

[@jadamsnz]

Very nice video, thanks. I travel a lot and run up against geofencing of services that I subscribe to back home. Would ZeroTier be a viable means to access these services while I am overseas? (I tried running a VPN/DynamicDNS service on an old Mac OS server I had lying around and while that worked initially, it broke while overseas and left me with no way to try and fix it so scratch that as a solution.)

[@LAWRENCESYSTEMS]

It could if you set up a box at home to route through

[@jadamsnz]

@@LAWRENCESYSTEMS Thanks

[@mr_fukiyato]

It's here some chance to run zerotier for Freenas jail?

[@KebraderaPumper]

please master, this zerotier works on freeNAS ?

[@user-hk3ej4hk7m]

github.com/zerotier/ZeroTierNAS/blob/master/FreeNAS/README.md

[@randomnight935]

quality 360p ?

[@LAWRENCESYSTEMS]

KZbin does that waiting for their servers to catch up

[@randomnight935]

@@LAWRENCESYSTEMS I see the HD now.

[@jeffwads]

Note that VPN providers must by law keep logs. So pretty worthless.

[@user-hk3ej4hk7m]

ZeroTier is not that type of VPN software