ZeroTier - are you using it in production?
-
@Dashrender I've deployed it to only the jump hosts in four company, in about half of the machines in my company and almost every machine in my home lab and other AWS instances. I don't use DNS with ZT, because the IP is static and is always the same, no matter from where I connect.
-
I use it and pay for it to get the alerting.
I have it on all the servers and then all the sales laptops. A couple users have on their desktops in the office for remoting in.
To handle DNS, I simply set use the host file on the laptops.
On the DC, I went into the DNS server and unchecked use all IP addresses and removed ZeroTier from the selection so that it does not auto add to DNS and cause problems for the local users.
-
We use it in the lab but not in production. Our production is completely LANless.
-
-
I really want to setup a gateway device and merge the LAN and ZT networks into one large network so I do not have to worry about anything at all, but I have not had time to test that.
Also the service occasionally does not fire up right and users have no idea how to fix it.
-
@JaredBusch said in ZeroTier - are you using it in production?:
I use it and pay for it to get the alerting.
I don't see any pricing anywhere on their website. I also can't find the difference of free vs paid.
-
@scottalanmiller said in ZeroTier - are you using it in production?:
We use it in the lab but not in production. Our production is completely LANless.
For myself and others, please explain how you achieve a LANless state.
-
@IRJ said in ZeroTier - are you using it in production?:
@JaredBusch said in ZeroTier - are you using it in production?:
I use it and pay for it to get the alerting.
I don't see any pricing anywhere on their website. I also can't find the difference of free vs paid.
https://www.zerotier.com/product-ss.shtml
I thought they upped the free version to 100 devices? Maybe they lowered it again?
-
I just logged into my ZT account and saw this.
-
@Dashrender Probably just haven't updated that page.
-
@Dashrender said in ZeroTier - are you using it in production?:
As the title asks, are you using ZeroTier in production?
If yes, please describe your setup.
Is it Windows only, or a mix?
Do you have it deployed to every user device/server/etc, or only some?
Do you have any DNS related issues? If so, how have you solved them?
Do the devices that you've installed it on travel both in and out of office? i.e. the machine ends up on the same LAN as the servers?Production
Windows & 3 Mac users currently - have 3 linux boxes that it will eventually get installed on.
Every device ~ In Office and Mobile users
No longer have DNS issues. Had a few early on but seems to be fixed. -
@WLS-ITGuy said in ZeroTier - are you using it in production?:
@Dashrender said in ZeroTier - are you using it in production?:
As the title asks, are you using ZeroTier in production?
If yes, please describe your setup.
Is it Windows only, or a mix?
Do you have it deployed to every user device/server/etc, or only some?
Do you have any DNS related issues? If so, how have you solved them?
Do the devices that you've installed it on travel both in and out of office? i.e. the machine ends up on the same LAN as the servers?Production
Windows & 3 Mac users currently - have 3 linux boxes that it will eventually get installed on.
Every device ~ In Office and Mobile users
No longer have DNS issues. Had a few early on but seems to be fixed.Do you have Active Directory?
-
@Dashrender Yes
-
@WLS-ITGuy said in ZeroTier - are you using it in production?:
Every device ~ In Office and Mobile users
Do you mobile users ever come into the office and plug/wifi onto the main network?
-
@Dashrender Yes. We are a school so the professors have a home office where they need access to the network and then also use the OnPrem network as well.
Mapped drives work well on both ZeroTier and LAN. I did have some issues where I had to make changes to the host file but I have removed that since we changed the local domain name to simplify things.
-
@WLS-ITGuy said in ZeroTier - are you using it in production?:
@Dashrender Yes. We are a school so the professors have a home office where they need access to the network and then also use the OnPrem network as well.
Mapped drives work well on both ZeroTier and LAN. I did have some issues where I had to make changes to the host file but I have removed that since we changed the local domain name to simplify things.
Any details you can provide would be great.
My past trials with ZT on a Windows Domain have had massive DNS issues, primarily in the fact that they would register both the local IP and the ZT IP, and DNS would often provide the ZT IP and non ZT PCs couldn't get there. Of course this is solved by putting all PCs on ZT, but won't solve it for things like printers who make DNS calls.
-
@Dashrender said in ZeroTier - are you using it in production?:
My past trials with ZT on a Windows Domain have had massive DNS issues, primarily in the fact that they would register both the local IP and the ZT IP, and DNS would often provide the ZT IP and non ZT PCs couldn't get there. Of course this is solved by putting all PCs on ZT, but won't solve it for things like printers who make DNS calls.
Why did you leave DNS actively listening on the ZT addresses?
-
@JaredBusch said in ZeroTier - are you using it in production?:
@Dashrender said in ZeroTier - are you using it in production?:
My past trials with ZT on a Windows Domain have had massive DNS issues, primarily in the fact that they would register both the local IP and the ZT IP, and DNS would often provide the ZT IP and non ZT PCs couldn't get there. Of course this is solved by putting all PCs on ZT, but won't solve it for things like printers who make DNS calls.
Why did you leave DNS actively listening on the ZT addresses?
Because at the time we were all learning. You replace DNS on AD with Host files. I wonder if you can turn that on it's ear and disable DNS on the local network and only use it on the ZT network if that would be enough to solve the issues? though I'm not sure what you do with things like printers/scanners that use resolution.
-
@Dashrender said in ZeroTier - are you using it in production?:
@JaredBusch said in ZeroTier - are you using it in production?:
@Dashrender said in ZeroTier - are you using it in production?:
My past trials with ZT on a Windows Domain have had massive DNS issues, primarily in the fact that they would register both the local IP and the ZT IP, and DNS would often provide the ZT IP and non ZT PCs couldn't get there. Of course this is solved by putting all PCs on ZT, but won't solve it for things like printers who make DNS calls.
Why did you leave DNS actively listening on the ZT addresses?
Because at the time we were all learning. You replace DNS on AD with Host files. I wonder if you can turn that on it's ear and disable DNS on the local network and only use it on the ZT network if that would be enough to solve the issues? though I'm not sure what you do with things like printers/scanners that use resolution.
You are mixing this up. I disable the interface in DNS. I am not replacing DNS with a host. I am specifically using the host file for 2 entries. The domain.local and the dc1.domain.local (same entry) and a entry for internalwebserver.domain.local
Everything else uses normal DNS in or out of the network.
Yes, this means when off the network, the devices only finds the 2 systems with host entries.
Disabling the interface in DNS prevents lots of auto DNS entries on the ZT network getting into the Windows DNS.
-
@JaredBusch said in ZeroTier - are you using it in production?:
You are mixing this up.
No I'm not
I disable the interface in DNS. I am not replacing DNS with a host.
Yes you are - DNS only works when outside the network because you have a hosts file. Without it, you would be sunk. Granted, it's the solution you've found to solve the DNS having LAN and ZT IPs.
Though I wonder if it's needed if all of your PCs have ZT on them, but you don't, you only have it on the sales laptops. Any reason you haven't installed it on the rest of the internal machines? According to previous discussions, that should solve the DNS issue because all machines will know how to get to both LAN and ZT IPs.
