ZeroTier and DNS issues
-
Yeah so far for us stuff like managing endpoints is out of scope and there are already tools that do it well. Detailed security analytics is also out of scope so far, but maybe not forever.
-
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
-
I didn't think @scottalanmiller was asking about endpoint management, he's talking a more about network management - bottlenecks, who has what IP, who's online now, etc.
Right?
-
@dafyre said:
Since both ZeroTier and Pertino simply provide IP space, you could join $networkmonitoringpackage to the SDN (ZT / Pertino) IP space and install the agents (if necessary) and away you go.
I've never heard of that - I guess I"ll be googling soon.
-
@dafyre Also wanted to mention: ZT doesn't use DHCP per se. It can do its own IP assignment using its own methods (network controller assigns IPs) or it can let the OS manage it. In the latter case it will pass DHCP packets so if you enable DHCP on the interface it should work if you have a server on the same network. Beware of DHCP + bridging though, since you can get weird route issues.
-
@Breffni-Potter said:
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
LOL So like LMI, they dumped their free product, but unlike LMI they never told everyone that the free product would be free forever.
-
@Dashrender IPs and online status can be seen through the ZT control panel (https://my.zerotier.com/ and we'll be licensing a self-hosted version of this soon with more features) and I'm not sure what you mean by bottlenecks. If you mean traffic monitoring there are tools like Zabbix (linked above) that do that well and so far detailed stats like that have been out of scope for ZT (but maybe not forever). ZeroTier runs a full p2p mesh so under most conditions a bottleneck has no real meaning... traffic just flows directly from endpoint to endpoint as it normally would but with encryption and stable mobile addressing. It will run as fast as the underlying network (minus a bit of crypto overhead).
-
@dafyre said:
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
OK i missed this post - no wonder I had no idea what $networkmonitoringpackage meant.
-
@Dashrender said:
@dafyre said:
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
OK i missed this post - no wonder I had no idea what $networkmonitoringpackage meant.
We have Zabbix running here.
-
@Dashrender said:
@Breffni-Potter said:
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
LOL So like LMI, they dumped their free product, but unlike LMI they never told everyone that the free product would be free forever.
Only for new signups, people on the free still have free, that much I know. LMI started charging their "free forever" clients or turning them off.
-
We have every intent of keeping ZeroTier open source and basic end-user use free, but we don't even say "forever" since IMHO that's often duplicitous... there is simply no way you can absolutely guarantee that unless you have no maintenance/upkeep cost at all... and even zero-infrastructure software has upkeep cost. Otherwise it's just marketing bait and should be considered meaningless.
I'm waiting for the first company to get sued for false and misleading advertising for that.
-
Things can also be free forever if you are the product: https://www.youtube.com/watch?v=ldhHkVjLe7A
-
@adam.ierymenko said:
I'm waiting for the first company to get sued for false and misleading advertising for that.
LMI should be.
-
@scottalanmiller said:
@adam.ierymenko said:
I'm waiting for the first company to get sued for false and misleading advertising for that.
LMI should be.
yeah, was thinking the same. Class action anyone?
-
@adam.ierymenko said:
and we'll be licensing a self-hosted version of this soon with more features)
That's awesome. I was just going to ask you if it's possible to get the interface on our own controller.
-
I think I sent in a question about that via Github earlier today too, lol. Oops. -
@dafyre Yes, the upcoming product is called ZeroTier Central and will consist of the UI you see at https://my.zerotier.com/ plus additional features people would want for in-house usage. We are talking to some potential users about that right now. Potentials include integration with in-house access control mechanisms like active directory and LDAP, etc. So you on-board a user and add them to LDAP and add their ZeroTier device IDs and they now have access to all the correct networks for their job and access levels.
-
@adam.ierymenko said:
@dafyre Yes, the upcoming product is called ZeroTier Central and will consist of the UI you see at https://my.zerotier.com/ plus additional features people would want for in-house usage. We are talking to some potential users about that right now. Potentials include integration with in-house access control mechanisms like active directory and LDAP, etc. So you on-board a user and add them to LDAP and add their ZeroTier device IDs and they now have access to all the correct networks for their job and access levels.
That would be awesome. We've been asking Pertino for that function since day one!
-
@adam.ierymenko Would this be something that is available on self-hosted controllers or only through the ZT Web Site?
-
@dafyre said:
@adam.ierymenko Would this be something that is available on self-hosted controllers or only through the ZT Web Site?
Self Hosted
