{"id":64114,"date":"2022-05-04T09:00:41","date_gmt":"2022-05-04T09:00:41","guid":{"rendered":"https:\/\/www.cryptocabaret.com\/?p=64114"},"modified":"2022-05-04T09:00:41","modified_gmt":"2022-05-04T09:00:41","slug":"how-i-manage-my-own-virtual-network-with-zerotier","status":"publish","type":"post","link":"https:\/\/www.cryptocabaret.com\/?p=64114","title":{"rendered":"How I manage my own virtual network with ZeroTier"},"content":{"rendered":"

How I manage my own virtual network with ZeroTier<\/span>
\nKevin Sonney<\/a><\/span>
\nWed, 05\/04\/2022 – 03:00<\/span><\/p>\n

\n
Register<\/a> or Login<\/a> to like<\/div>\n
Register<\/a> or Login<\/a> to like<\/div>\n<\/div>\n
\n

Automation is a hot topic right now. In my day job as a site reliability engineer (SRE), part of my remit is to automate as many repeating tasks as possible. But how many of us do that in our daily, not-work, lives? This year, I am focused on automating away the toil so that we can focus on the things that are important.<\/em><\/p>\n

While automating everything, I ran into some difficulty with remote sites. I’m not a networking person so I started to look at my options. After researching the various virtual private networks (VPN), hardware endpoints, firewall rules, and everything that goes into supporting multiple remote sites, I was confused, grumpy, and frustrated with the complexity of it all.<\/p>\n<\/p>\n

\n
More on automation<\/div>\n
\n
Download now: The automated enterprise eBook<\/a><\/div>\n
Free online course: Ansible essentials<\/a><\/div>\n
Ansible cheat sheet<\/a><\/div>\n
eBook: A practical guide to home automation using open source tools<\/a><\/div>\n
A quickstart guide to Ansible<\/a><\/div>\n
More articles about open source automation<\/a><\/div>\n<\/p><\/div>\n<\/p><\/div>\n

Then I found ZeroTier<\/a>. ZeroTier is an encrypted virtual network backbone, allowing multiple machines to communicate as if they were on a single network. The code is all open source, and you can self-host the controller or use the ZeroTierOne<\/a> service with either free or paid plans. I’m using their free plan right now, and it is robust, solid, and very consistent.<\/p>\n

Because I’m using the web service, I’m not going to go into detail about running the controller and root services. ZeroTier has a complete reference on how to do that in their documentation<\/a>, and it’s very good.<\/p>\n

After creating my own virtual network in the web user interface, the client installation is almost trivial. ZeroTier has packages for APT, RPM, FreeBSD, and many other platforms, so getting the first node online takes little effort.<\/p>\n

Once installed, the client connects to the controller service and generates a unique ID for the node. On Linux, you use the zerotier-cli<\/code> command to join a network, using the zerotier-cli join NETWORKID<\/code> command.<\/p>\n

\n
$ sudo<\/span> zerotier-cli info
200<\/span> info 469584783a 1<\/span>.x.x ONLINE<\/div><\/div><\/pre>\n
You can also use zerotier-cli<\/code> to get a listing of connected and available nodes, change network settings, and leave networks.<\/p>\n
\n
  \"Image<\/div>\n
Image by: <\/span><\/p>\n
(Kevin Sonney, CC BY-SA 4.0)<\/p>\n<\/div>\n<\/article>\n
After joining a network, you do have to approve access for the node, either through the web console or by making a call to the application programming interface (API). Both methods are documented on the ZeroTier site. After you have two nodes connected, connecting to each other \u2014 no matter where you are or what side of any firewalls you may be on \u2014 is exactly what you would expect if you were in the same building on the same network. One of my primary use cases is for remote access to my Home Assistant setup<\/a> without needing to open up firewall ports or expose it to the internet (more on my Home Assistant setup and related services later).<\/p>\n
One thing I did set up myself is a Beta ZeroNDS Service<\/a> for internal DNS. This saved me a lot of complexity for managing my own name service or having to create public records for all my private hosts and IP addresses. I found the instructions to be very straight forward, and was able to have a DNS server for my private network up in about 5 minutes. Each client has to allow Zerotier to set the DNS, which is very simple in the GUI clients. To enable it for use on Linux clients, use:<\/p>\n
\n$ <\/span>sudo<\/span> zerotier-cli setNETWORKID allowDNS<\/span>=1<\/span><\/code><\/span><\/pre>\n
No other updates are needed as you add and remove hosts, and it “just works.”<\/p>\n
\n
$ sudo<\/span> zerotier-cli info
200<\/span> info 469584845a 1<\/span>.x.y ONLINE
\n$ sudo<\/span> zerotier-cli join<\/span>
\n93afae596398153a 200<\/span> join<\/span> OK
\n$ sudo<\/span> zerotier-cli peers
200<\/span> peers
ztaddr><\/span> ver><\/span> role><\/span> lat><\/span> link<\/span>><\/span> TX><\/span> RX><\/span> path><\/span>
\n61d294b9cb - PLANET 112<\/span> DIRECT 7946<\/span> 2812<\/span> 50.7.73.34\/<\/span>9993<\/span>
\n62f865ae71 - PLANET 264<\/span> DIRECT 7946<\/span> 2681<\/span> 50.7.76.38\/<\/span>9993<\/span>
\n778cde7190 - PLANET 61<\/span> DIRECT 2944<\/span> 2901<\/span> 103.195.13.66\/<\/span>9993<\/span>
\n93afae5963 1<\/span>.x LEAF 77<\/span> DIRECT 2945<\/span> 2886<\/span> 35.188.31.177\/<\/span>41848<\/span>
\n992fcf1db7 - PLANET RECT 79124<\/span> DI47 2813<\/span> 195<\/span>. 181.173.159\/<\/span>9993<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/div><\/div><\/pre>\n
I’ve barely scratched the surface of the features here. ZeroTier also allows for bridging between ZeroTier networks, advanced routing rules, and a whole lot more. They even have a Terraform provider<\/a> and a listing of Awesome Zerotier Things<\/a>. As of today, I’m using ZeroTier to connect machines across four physical sites, three of which are behind NAT firewalls. Zerotier is simple to set up, and almost completely painless to manage.<\/p>\n<\/div>\n
\n
ZeroTier is an encrypted virtual network backbone, allowing multiple machines to communicate as if they were on a single network.<\/p>\n<\/div>\n
\n
\n
  \"Person<\/div>\n
Image by: <\/span><\/p>\n
Jonas Leupe<\/a>\u00a0on\u00a0Unsplash<\/a><\/p>\n<\/div>\n<\/article>\n<\/div>\n
\n
Networking<\/a><\/div>\n
Automation<\/a><\/div>\n<\/p><\/div>\n
What to read next<\/div>\n

\n        \"Creative<\/a>This work is licensed under a Creative Commons Attribution-Share Alike 4.0 International License.<\/div>\n
\n
\n
Register<\/a> or Login<\/a> to post a comment.<\/div>\n<\/p><\/div>\n<\/section>\n
Powered by WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"
How I manage my own virtual network with ZeroTier Kevin Sonney Wed, 05\/04\/2022 – 03:00 Register or Login to like Register or Login to like Automation is a hot topic right now. In my day job as a site reliability engineer (SRE), part of my remit is to automate as many repeating tasks as possible. […]<\/p>\n","protected":false},"author":1,"featured_media":64115,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[307],"tags":[],"class_list":["post-64114","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-open-source"],"_links":{"self":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/64114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=64114"}],"version-history":[{"count":0,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/64114\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/media\/64115"}],"wp:attachment":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=64114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=64114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=64114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}