ZeroTier and DNS issues
-
Does ZeroTier offer anything around visibility into connected devices and the like via a central graphical console? I'm all about the CLI, but most of my team would be unhappy for most things.
-
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
-
@scottalanmiller said:
It's always been free for a small network. No idea, I've not looked in a really long time.
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
-
On their website it does, but it's basically just a list of the devices connected with room for you to desscribe what device is what.
One thing that I have noticed is that on ZT, the built in DHCP server tends to assign static IP addresses to the servers... I've been running my own for weeks and the IPs haven't changed. Even if I make a device leave the network and add it back in later.
-
@Breffni-Potter said:
@scottalanmiller said:
It's always been free for a small network. No idea, I've not looked in a really long time.
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
The question remains, did the SMB care about those features?
-
@adam.ierymenko said:
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
@adam.ierymenko said:
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
I've used Chef but it doesn't tell me who is currently connected, their assigned IP, etc.
-
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
-
@scottalanmiller Does the baseline Pertino package include the ability to see network usage? performance?
-
@Breffni-Potter said:
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
ZT to the rescue!
-
Seeing bottle necks I suppose would be something nice to see, though I don't know what type of overhead that kind of reporting would add to the whole system.
-
@Dashrender said:
@Breffni-Potter said:
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
ZT to the rescue!
I've never been so excited about a product before.
Built by engineers, not slicked well oiled salesmen.
-
ZT tells you basic information: assigned IP, who is on your network, etc., but it doesn't do sysadmin stuff... Puppet and Chef and such have very deep well-developed products that do that and you can use them over a ZT network just fine.
@dafyre ZT addresses are stable down to the virtual Ethernet MAC, which is derived from your ZeroTier address + network ID, and both of those are cryptographic credentials. Basically your identity.secret file is your virtual network endpoint on all networks you belong to. (A gotcha we see from time to time is people cloning VMs then wondering why the clone gets the same addresses. It's because it has the same identity.)
-
Since both ZeroTier and Pertino simply provide IP space, you could join $networkmonitoringpackage to the SDN (ZT / Pertino) IP space and install the agents (if necessary) and away you go.
-
@dafyre Yes, there's some great software for that including some that does detailed security analytics and scans for known malware traffic, etc.
-
Pertino does not manage endpoints in any way like Chef or Puppet. That's completely out of scope. It is all network.
-
Yeah so far for us stuff like managing endpoints is out of scope and there are already tools that do it well. Detailed security analytics is also out of scope so far, but maybe not forever.
-
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
-
I didn't think @scottalanmiller was asking about endpoint management, he's talking a more about network management - bottlenecks, who has what IP, who's online now, etc.
Right?
-
@dafyre said:
Since both ZeroTier and Pertino simply provide IP space, you could join $networkmonitoringpackage to the SDN (ZT / Pertino) IP space and install the agents (if necessary) and away you go.
I've never heard of that - I guess I"ll be googling soon.
-
@dafyre Also wanted to mention: ZT doesn't use DHCP per se. It can do its own IP assignment using its own methods (network controller assigns IPs) or it can let the OS manage it. In the latter case it will pass DHCP packets so if you enable DHCP on the interface it should work if you have a server on the same network. Beware of DHCP + bridging though, since you can get weird route issues.