Z
ZeroTier Blog
zerotier.com · Company blog · on HN since 2013
The company blog for ZeroTier, a software-defined networking product for building virtual networks between devices, with release notes and licensing news.
What HN saysHN commenters recommend ZeroTier as a stable, easy alternative to Tailscale, praise its rule engine, and use it for home servers and game multiplayer.
112HN people shared it
88linked it in comments
54stories submitted
2.2Kstory points
1 year agolast shared
2013people per year2026
Most-shared posts
- 1ZeroTier - Simple Software Defined Networking71 people · 141 points · first shared 2013 · 38 comments on HN
- 2ZeroTier 2.0 Status4 people · 99 points · first shared 2019 · 47 comments on HN
- 3Pricing4 people · first shared 2020
- 4Manual4 people · first shared 2019
- 5The State of NAT Traversal3 people · 191 points · first shared 2014 · 96 comments on HN
- 6ZeroTier Releases LF: A Fully Decentralized Fully Replicated Key/Value Store3 people · 11 points · first shared 2019 · 5 comments on HN
- 7ZeroTier: On the GPL to BSL Transition3 people · 4 points · first shared 2019 · 2 comments on HN
- 8The state of nat traversal3 people · first shared 2021
- 9Manual.shtml3 people · first shared 2017
- 10Incident Response to September 20th 20212 people · 132 points · first shared 2021 · 30 comments on HN
- 11Creating a Provider-Agnostic Private Backplane Network in the Cloud2 people · 6 points · first shared 2014 · 2 comments on HN
- 12Year Four Recap, and 2016 Plans2 people · 5 points · first shared 2016 · discussion on HN
- 13ZeroTier 6PLANE addressing for Docker IPv6 backplane networks2 people · 3 points · first shared 2016 · discussion on HN
- 14ZeroTier Eliminated Kernel Extensions on macOS2 people · 1 points · first shared 2019 · discussion on HN
- 15How ZeroTier Eliminated Kernel Extensions on macOS (2019)2 people · 1 points · first shared 2020 · discussion on HN
What HN people wrote when they linked it
oktwtf · 2021-09-15
Fantastic little board. I have a couple of these each with a sata card and a few rusty 8TB drives attached. They run Libreelec with Zerotier and a few basic bash scripts to sync some directories. One lives in my living room and one lives at my parents house. Works as on site backup for me, and offsite for Dad as well as vice versa.
Kodi is my favourite media centre software, been a fan since XBMC rolled into the scene.
https://libreelec.tv/
https://www.zerotier.com/
https://kodi.tv/
joshxyz · 2021-08-23
zerotier[0] is also a surprisingly great alternative to tailscale. stable as hell, adding devices is fast and easy, and their web panel is real-time and user-friendly as hell. cloudflare tunnel is a mess to set up unfortunately.
[0] https://www.zerotier.com/
kenmacd · 2021-04-03
Any advantages to this over https://www.zerotier.com/?
Being p2p and using one PSK seems to make firewalling more difficult. ZeroTier's 'capability-based + tagging' rule engine is pretty amazing in that I can easily allow just one peer to connect on a port.
tehskylark · 2021-03-17
ZeroTier is another option worth looking at for your use case.
https://www.zerotier.com/
yial · 2021-03-13
I don't know if this is helpful for cross platform, but for many games with problematic multiplayer you can use
https://www.zerotier.com/
(works great for original Warcraft III)
and they have a linux version.
pixelmonkey · 2019-07-21
If you just want it accessible from any of your other devices in a secure/private way without fussing much with DNS and port forwarding, ZeroTier is an excellent modern solution.
https://zerotier.com/
carlhjerpe · 2017-11-30
https://zerotier.com
I've tried to compose an article containing the same information as this podcast, but i'm a terrible writer so i thought i'd share it with you as is.
I'm using ZeroTier to connect my home network and all my portable devices (including work laptop) to my home network, routing traffic through a Raspbeyy Pi running OSMC at home.
This enables me to effortlessly, without manually connecting anywhere or NAT anything share files, RDP my personal devices from work, and vice versa when needed.
Since ZeroTier virtualises Layer 2 it can carry any ethernet packet and do many cool things. I recommend giving it a try. I love it.
(First submission, i'd appreciate feedback=))
manigandham · 2017-11-25
For everyone else, I recommend https://pritunl.com or https://www.zerotier.com to get VPN access easily. Pritunl is more traditional client/server while ZeroTier creates 1 giant LAN between as many machines as you want.
brbsix · 2016-09-09
I used to, but ZetoTier[0] has made that a thing of the past. Now, no matter where I am or what sort of connection I have, it's like I have all my devices (and a few other people's) on a local LAN. I use it all the time to SSH into my laptop from my phone when I leave it someplace. I really can't recommend it highly enough.
[0]: https://www.zerotier.com
darkblackcorner · 2016-08-18
I use https://www.privateinternetaccess.com/ on recommendation from a colleague, and I'm pretty happy. No logs, plenty servers, no real issues, and they recently shut down their Russian server due to imminent privacy concerns. So I feel that they have their priorities straight.
I used https://www.frootvpn.com/ briefly when it was free - seemed ok too, but not many servers back then.
Depends really what you want to use it for, but you could look into something like https://www.zerotier.com/ or even hosting your own.
This might be useful for more in depth comparisons: https://thatoneprivacysite.net/
rcoder · 2023-05-01
ZeroTier | https://www.zerotier.com | Full-Time | Remote
Securely connect any device, anywhere.
ZeroTier lets you build modern, secure multi-point virtualized networks of almost any type. From robust peer-to-peer networking to multi-cloud mesh infrastructure, we enable global connectivity with the simplicity of a local network. We have millions of active users with hundreds of millions of devices connected to their own private mesh networks.
We're looking for data/analytics and UI engineers who want to work at the intersection of networking, security, and usability, helping an amazing community of open source and commercial users. You'll be joining a fully-distributed team of ~12 (total; six in eng) with backgrounds in Linux networking, cloud ops, cryptography, and cross-platform product development and delivery.
Data eng: https://jobs.lever.co/zerotier/aeaeb543-1217-4897-aeb3-68e6db36d107
UI/UX: https://jobs.lever.co/zerotier/71024431-2935-48aa-9e5c-4fa467336e6b
I'm the head of engineering + hiring manager so if you have questions about the company, product, or roles, feel free to reach out directly: [email protected]
(We unfortunately can't sponsor visas or hire internationally at this point, so these are US-only positions.)
Karrot_Kream · 2022-03-23
Philosophizing on your blog seems to be the new way to tilt at windmills. If you're actually interested in self-hosting, https://github.com/awesome-selfhosted/awesome-selfhosted is a great resource for self-hosted apps. Roll up your sleeves, get prepared to get lost in documentation, and have some fun! You'll realize the tradeoffs of what to self-host and what not-to quickly as you start playing around with actual technologies. Just remember that your life is production and if you're self-hosting XMPP for your family, you may want to be confident you know how to run XMPP before pushing everyone onto it, so maybe setup a lab or staging environment. But that's fine, it's part of the process! Stop writing screeds and start actually self-hosting.
EDIT: Since I'm mostly just reposting the link that OP links in their post, I'll add a couple fun things that I use a lot with self-hosting.
https://hoppy.network/ lets you setup a Wireguard tunnel to have your own static IPv4 /32 and /128 IPv6.
https://freerangecloud.com/ gives you similar products but also lets you do things like colocating a Raspberry Pi or getting a VPS at an IX
https://www.zerotier.com/ can effortlessly setup a private network between hosts
There's more I'm sure, but I like these.
brigandish · 2021-05-11
> "THE PRO TERMINAL FOR iOS & iPadOS", from the front page.
Then what's Mosh? Why bring it up?
> " You bought the latest Pro device, loved it, and then you wondered...
> …Can I use it to replace my laptop?
No, I didn't but I know it's supposed to be appealing. The original comment about it was more appealing than that line. Still.
> Yes, you can
Can I? Because I can "code all day from the beach"? (which doesn't sound fun, actually)
It's facetious, it's anodyne while striving to be zippy, and worst of all, it's meaningless. I've seen half-arsed Github READMEs that are more informative. Do I really have to pull out alternatives to show the difference? Okay then.
There is ZeroTier[1], which I'm going to guess is a Mosh equivalent as I have zero (ha) desire to find out any more about Mosh. This is their initial blurb:
> Connect team members from anywhere in the world on any device.
> ZeroTier creates secure networks between on-premise, cloud, desktop, and mobile devices.
Now that answers my questions and the rest of the page goes into more detail.
Now for a shell - let's take Fish[2] because I've heard about it but never bothered with it. This will be fun…
> fish is a smart and user-friendly command line shell for Linux, macOS, and the rest of the family.
It then goes into features which is an indirect answer to the why so I'll give them half marks there.
Oops, my mistake, it's a terminal we need. Since I use iTerm[3] nowadays:
> What is iTerm2?
> iTerm2 is a…
api · 2020-04-02
I haven't been offended by it, and I'm the founder of a company that's been around longer and is probably the closest competitor: https://www.zerotier.com/
I don't hate on people for doing similar things. If anything I am absolutely shocked it took someone this long, since to me the idea of a full mesh virtual network is how things should work, everything else is stupid and clunky, the fact that we have to bounce off servers to transfer things is dumb, and NAT is pure concentrated evil and must be destroyed.
I absolutely loved David Crawshaw's Remembering the LAN post:
https://crawshaw.io/blog/remembering-the-lan
It echoes exactly the sentiments that motivated me to start working on ZeroTier, so I wish them well.
As far as the upvotes go I just figured they have a lot of friends from their time at Google and their posts get upvoted a lot.
I notice the same thing when any company that has a lot of HN users among its employee base does anything. When AWS, Apple, and Google do a bunch of product releases the front page gets bombed for days. The site practically turns into a news feed of new AWS Elastic Beanie Cap products when the ironically titled AWS ReInvent happens. If anything the FAANG companies get more free advertising here than anyone.
AnthonBerg · 2019-03-25
What I like to use is:
- Blink shell
- hooked to a tmux session
- connected with Mosh
- over a ZeroTier network
- to a UNIX machine in the cloud or at home (Linux, macOS, whatever).
The effect is a really snappy and powerful shell in a full UNIX system that stays up and connected even though your connection is dropped or moves from wifi to cellular, and your networks still stay closed and secure.
It's not the same as running Linux on the phone. However, in some respects it's better. It's trivially easy to move the session to another device (phone/tablet, or computer), and you don't need to use the phone's battery for processing. And you can summon a ton of computing power if you need to.
Blink shell, an iOS terminal emulator: https://www.blink.sh
tmux is like screen. It's a bit arcane at first but it's worth it. (Mouse scrollback is recommended. It works inside blink.) Introduction: https://hackernoon.com/a-gentle-introduction-to-tmux-8d784c404340
mosh enhances ssh and adds roaming, supports intermittent connectivity, and cuts perceived lag a lot by being smarter about the interface vs. the network roundtrip. (It works kind of like a online game engine that predicts network events). https://mosh.org
ZeroTier is an open-source secure virtual network layer that's good at hole punching so you can just have the real network completely walled off: https://www.zerotier.com/
wbadart · 2025-01-06
You might like ZeroTier[0]. Similar solution to Tailscale but supports email registration.
[0]: https://www.zerotier.com/
caishu97 · 2024-05-08
ztm can be used to build in-house solution like cloud flare tunnel(https://www.cloudflare.com/products/tunnel/) and and zero-tier(https://www.zerotier.com). ztm is http2 based, not VPN based. It runs in pure user space and safe, easy to use, zero firewall config, zero route change. ztm has REST API, programmer can build their decentralized application on top of ztm.
ethanpil · 2022-10-20
As a long time ZeroTier user I want to point out that they have some interesting DNS solutions as well.[1]
(Personally, have not felt the need to change something that has a great free tier, self hosting controllers, etc, and has been working reliably for years... Tailscale looks cool though)
[1]https://www.zerotier.com/2022/04/11/the-zerotier-dns-story/
benbristow · 2022-07-26
Not 100% open source, but a good solution for controlling my parent's laptop when they need a hand with something (they live in England, I live in Scotland) is to use ZeroTier to set up a VPN (installed it on their laptop when I had physical access to it, uses basically no system resources and just runs in the background automatically) and then use RDP built into Windows (I installed Windows 10 Enterprise on their laptop when I first set it up, have loads of MSDN keys from work).
https://www.zerotier.com/
Works really, really well and doesn't try to wrongfully block me for 'commercial usage' like Teamviewer does.
sandstrom · 2022-06-22
And for anyone looking at Tailscale, I should also mention ZeroTier (https://www.zerotier.com/).
In my opinion they have better tech, but they are pretty bad at packaging it, and bad at making it work for actual use-cases.
Tailscale seems to be much more clever around building out stuff (like this one, SSH) that actually goes all the way for a particular use-case. ZeroTier feels more like a building block, where you need to bring more stuff yourself.
Either way, both are awesome pieces of technology, and really useful!
ignoramous · 2022-05-05
There's https://zerotier.com, https://netbird.io, https://defined.net, https://github.com/tonarino/innernet and likely many more.
anuvrat1 · 2022-05-04
There exists ZeroTier too, which can be self-hosted.
[1]: https://www.zerotier.com/
mike_d · 2022-01-24
https://zerotier.com/
The managed backend/NAT broker is free up to 50 machines, or you can run the open source server yourself.
derefr · 2022-01-14
That use-case is exactly what I use https://www.zerotier.com/ for — SSHing into my NAS from anywhere in the world. And there's less configuration involved than setting up a Tor hidden service.
mobilio · 2021-09-05
ZeroTier is amazing! And also support OpenWrt.
But bad news is that their license isn't GPL anymore:
https://www.zerotier.com/pricing/
PhilippGille · 2021-08-29
Apart from some smaller projects building on top of WireGuard, there's Tailscale [1]. One of the founders is Brad Fitzpatrick who worked on the Go team at Google before and built memcached and perkeep in the past.
Outside of the WireGuard ecosystem there's ZeroTier [2] which has been around for a while and they're working on a new version; and Nebula [3] from Slack, which is likely to be maintained as long as Slack uses it.
There might be others, but with tinc these four are the ones I've seen referred to most often.
[1] https://tailscale.com
[2] https://www.zerotier.com
[3] https://github.com/slackhq/nebula
cassianoleal · 2021-06-29
https://zerotier.com
Not Wireguard based, but similar functionality.
_hyn3 · 2020-12-16
https://zerotier.com does a very nice job of NAT "bouncing", free (hosted) for up to 50 hosts, or you can run your own.
You end up with another "zt" interface, so you can apply firewall rules to that interface, separate from your main NIC(s), kinda like assigning your own VPC but for your laptop, etc. It only takes a few seconds to install the agent and join your private network, and it seems to reconnect quite nicely as well; if your network is private, you can force all new attempts to connect to be approved (where you can check the mac address first). Basically, it's exactly the right level of technical config traits with a simple interface.
(no affiliation, just a very happy user, but I will say that running your own seems to be a lot more difficult than it should be..)
Zero3K · 2020-08-16
A nice alternative (without text chat, for now) is vs5x. You can get it at http://blog.x-row.net/download/?file=vs5x&ver=015. The only issue is that it connects by using IP addresses. You and the person you're wanting to chat with can install ZeroTier (https://www.zerotier.com/) configure it to make a network and join it and then authorize the person's IP address.