@adam.ierymenko if you run your own controller do you get all same features as you would with using the hosted controller?

So as is with most things. I actually did set an address for Bind in named.conf. I just needed to add the ip address to listen on and add the zone for recursion and it's working now. Thanks!

One wrinkle you should be aware of (this needs to be fixed in our web UI!) -- if you change the ZT-managed range from /24 to /23 or /22 you will also need to change it on all the devices. We should add a feature to renumber automatically since right now it's tedious.

@JaredBusch said in ZeroTier Question:

At the very core of it is a Linux kernel of some flavor, but that just used to load their own vmkernel.

No Linux at all. Never was. Long ago there was Linux in the host VM (Dom0 equivalent) but never in the ESX product itself. That was just a VM on top of ESX that provided a GUI. But that was removed long ago and now there isn't even that.

@dafyre said in Timeframe for ZeroTier on iOS:

It was in the big write up with all the price changes... http://mangolassi.it/topic/8928/zerotier-gui-updates-new-features-and-new-pricing-structure

It was just a quiet mention... Not even a bold or italics line. lol.

LOL - it was in the part that MLNews actually posted itself.

@mlnews

Along with our web UI and our subscription service, we have quite a bit more in the pipeline. Our iOS version is now in beta. If you want to try it out via TestFlight drop us an e-mail and we'll send you an invite. Major announcements on the Network Containers and Enterprise fronts are coming soon as well.

@adam.ierymenko said in ZeroTier GUI Updates, New Features and New Pricing Structure:

Yeah that's in our feature queue but after a ton of other stuff.

Nice. Keep up the good work!

@Curtis said in ZeroTier Bridging Configuration:

@dafyre can you explain your setup in more detail?

@Curtis -- Do you mean my current set up?

I'll do a new post for that.

Edit:

Here it is: https://mangolassi.it/topic/19493/zerotier-site-to-site

@JaredBusch said:

@wirestyle22 said:

@JaredBusch said:

Controller is up and working well as a client. Easily joined the test network I setup on ZT's site.

Now to figure out how to create my own network.

Did you create a guide to how you achieved this? I've heard it's somewhat difficult. Also, is anyone testing the performance difference between self-hosted and hosted?

I have not setup the controller yet. I had other priorities form noon and beyond today.

It'll be interesting to see. I appreciate all of your effort

@JaredBusch how did you setup your NIC for the workstation that had to remote into the AD via ZeroTier? I'm still trying to figure out exactly what was statically assigned as your post wasn't too clear for me (this is new to me).

@wirestyle22 said:

Sorry for the lack of information. I'm currently researching LAN-less technology and was looking at thin clients just for funsies. We would be using ZT already and I was just wondering if thin clients would even work over the WAN. This is something I would possibly implement. We used to have them on mobile carts at the hospital I used to work at (LAN based). Bear with me here. I came in to get my cup of coffee today and someone didn't re-fill the Keurig so my life is meaningless for the next five minutes.

Well thin clients are used over a WAN all the time. Think about any time you RDP into a remote server. Remember a WAN isn't a different technology from a LAN, the devices can't tell them apart. It's all just the same TCP/IP network to the devices.

And when you use ZT, there isn't a WAN, it's all LAN.

@Dashrender said:

@dafyre said:

@Dashrender said:

@scottalanmiller said:

@FATeknollogee said:

@Jason said:

@FATeknollogee said:

Type 3: Users (are contractors), they connect via VPN from overseas

Seems like a bad idea. Usually employees are given VPN access from company owned devices. a VPN is too much exposure for non-company owned devices and for people who aren't full employees. I would look into some other form of access, RD Gateway with RDS or Ctirix etc for these people.

Are you saying access via ZT is not a good idea?

Correct. ZT is a VPN. VPNs from arbitrary devices is normally a bad idea. The only exception to this is when you would have happily exposed the LAN to the Internet and this is purely a handy control of IP addresses. If security is your goal, you are bypassing security using a VPN in this role. VPNs are very dangerous because they are about exposure.

The whole trusted network issue. LAN vs LAN-less

As more and more things move to networks that are not local to our computers, we're changing seeing how we trust things.

Traditionally we trust machines that are on our local LAN, but, if flip that on its ear and trust nothing, and always setup authenticated/trusted communications no matter where device is in comparison to us, then we are much safer.

I think that it is beyond time that we stop trusting machines on our local lan. Even my home network has the service discovery disabled, and each machine has its firewall turned on for that very reason.

I go back and forth on using the home networking features that Windows has these days.

I use them because they are there. I also have linux boxes at my house too, so there's that. 😄

This will be good for things like the Rocket.Chat system too. Was thinking that we would get that up and running in the lab for communication between people working in the lab so that they could coordinate easily. Although perhaps just an IRC channel would make more sense for that. But delivering those kinds of things over ZeroTier is easy.

@scottalanmiller said:

@johnhooks said:

I think the Ubuntu store ruined it for me. It used to take forever to load so I always just did cli, maybe I need to try the Fedora store and see how it works.

On Mint you just click on the DEB, there is no store involved.

Ah ok. Ya Ubuntu used to load the full store (not sure if it still does) to install something. So I just started doing gdebi or dpkg -i or dnf install ./package for everything I downloaded.

I have my menu key on my keyboard mapped to the drop down terminal Gnome 3 extension because I don't use that key anyway. So opening the terminal and running it is pretty quick.

I'll have to see how Fedora handles that.

I am letting ZT assign the IP addresses.

I just went and tried it with 'none' as my IP mode... I set a static IP address on my Windows DHCP server and activated a DHCP scope and it not work. I switched back to ZT for IP handling and everything went back to working agian.

I'll try it with a LInux DHCP server on the controller in a little bit and let you know how that goes.

Good point, let's start a new topic on Split Horizon DNS. When to use it and if it makes sense in your case 🙂

@Dashrender said:

@dafyre said:

There are a few of using it here already... Me and @johnhooks, and a couple other folks, I think.

Hey, what am I chopped liver 😉

Not any more. You've been upgraded to ground beef. (I didn't know you were using it already).

@adam-ierymenko I'm guessing the laptop was off two+ days. The user only uses it two days a week at most.

It's just that Windows Phone and Windows RT have merged and that's where that codebase has gone. It's real Windows now, from my understanding.

@dafyre said:

Chances are if Linux can do it, it probably does it better than Windows, lol.

I would second that.