ZeroTier

[Seacht]

https://www.zerotier.com/

Connect cloud, mobile, desktop, and data center resources regardless of where they’re located. ZeroTier saves time and opens new possibilities by making even the most complex networks easy to deploy and manage.

Our software is open source and free to use. A commercial license is only needed if you want to rebrand our stuff or create a closed-source derivative work.

This looks like it might have some uses ........  anyone used it to date?

[Texstar]

It would be nice if they provided a direct link to their deb instead of providing a way to add their repo to your desktop.

[Seacht]

It would be nice if they provided a direct link to their deb instead of providing a way to add their repo to your desktop.

Just use that version of Bunty you keep hidden from us to grab the deb!   

[Texstar]

I was able to download and install the following after updating iproute2 to provide iproute. I can start the service but then got connection refused. I created an account at zerotier but then it got confusing as to what the heck I am supposed to do so I ended up deleting the account and removing zerotier-one package from my computer.

https://www.dropbox.com/s/0hjakecbkdd2om7/zerotier-one-1.2.12-1.el6.x86_64.rpm?dl=0

[Seacht]

I was able to download and install the following after updating iproute2 to provide iproute. I can start the service but then got connection refused. I created an account at zerotier but then it got confusing as to what the heck I am supposed to do so I ended up deleting the account and removing zerotier-one package from my computer.

https://www.dropbox.com/s/0hjakecbkdd2om7/zerotier-one-1.2.12-1.el6.x86_64.rpm?dl=0

iproute2 updated to what version?

EDIT:  got an update via Synaptic from 4.4 to 5.1

[Seacht]

This looks like it might be helpful for setting this up in Linux
https://discourse.coreelec.org/t/coreelec-and-zerotier-a-good-couple/5335

OK, details will need to be changed but the outline is all there I think.

It seems to be a very secure method of sharing media with friends and family ......  particularly getting access to home media, live TV and stored media, from tvheadend/Kodi server.

[Seacht]

I tried this tonight and put two PCs on a Virtual Network, and streamed Live TV from one to the other.

As best I can recall it, this is what I did ...



Setting up two PCs on private Virtual Network using Zerotier

Created an account at zerotier.com, and noted the ID it provided me for my network after confirming I got the email.
Installed zerotier on both PCs.
Rebooted the PCs to ensure zerotier-one was running
Used

Code: [Select]

zerotier-cli join <[b]ID[/b]>to apply to the account for approval to join the virtual network. Done from each PC.

I logged into the account at

Code: [Select]

https://my.zerotier.com/network/<[b]ID[/b]>and approved both PCs.
Took note of the Virtual Network IP addresses (actually selected my own range) allocated to each PC.

The PCs could then ping each other using the Virtual IP addresses.

One of the PCs was running Tvheadend server, and I could use Kodi on the other one to access what it made available ....  in this case live DVB-T and DVB-S TV channels ...... by pointing Kodi at the Virtual IP address of the other PC.



This will be a very useful means of sharing media securely over the internet.
I can access my own TV channels while away from home without worrying about security.

[Seacht]

For some reason today, although the NIC is present in ifconfig, it is not showing any IP address.
Yet, my zerotier account shows the PC as on line and the IP address allocated.




EDIT:

I disable zerotier in System Services and ensured it would not run at boot, then rebooted.

I ran zerotier manually after reboot and it connected correctly.

I suspect it failed because the network was not up prior to its running.


Is there a simple way to have this run only if the main network is up?

[Seacht]

Played a little more with this.
I am not getting a connection on a reboot/warmboot/cold boot ......  something is getting its knickers in a twist!

If I kill off the connection and set up a new one then I can connect.

Maybe some config file is missing or not right?

[Seacht]

Duh!

It was so simple!

In Network Center - Configure for the wired Zerotier NIC I entered the Zerotier allocated IP address after selecting Manual Configuration.
It automatically filled in Netmask, and I made no other edits or entries.

Now everything works after reboot.

All is good with the world 

[Seacht]

Is anyone presently using Zerotier?

My install has changed and of course during lockdowns and travel restrictions there was no need for Zerotier, so I didn't miss it - until now.

EDIT:

I got it set up again - I found I had saved the rpm Tex posted above.
This is working, but it very much out of date.

Ver 1.8.1 is current release

https://github.com/zerotier/ZeroTierOne/blob/master/RELEASE-NOTES.md

[Seacht]

If anyone has the time and inclination to build an RPM for the latest version of ZeroTier-one that would be great, as there are considerable changes since the last RPM was done ......  both in function and security.

Thanks.


https://github.com/zerotier/ZeroTierOne/blob/master/RELEASE-NOTES.md

[Texstar]

If anyone has the time and inclination to build an RPM for the latest version of ZeroTier-one that would be great, as there are considerable changes since the last RPM was done ......  both in function and security.

Thanks.


https://github.com/zerotier/ZeroTierOne/blob/master/RELEASE-NOTES.md

I didn't find an rpm in our software repo so I made one. If it works you owe me a 6 pack of tacos. Please reboot after package installation so the service can start at boot. I also have no idea what this does or how to configure it.

[Seacht]

If anyone has the time and inclination to build an RPM for the latest version of ZeroTier-one that would be great, as there are considerable changes since the last RPM was done ......  both in function and security.

Thanks.


https://github.com/zerotier/ZeroTierOne/blob/master/RELEASE-NOTES.md

I didn't find an rpm in our software repo so I made one. If it works you owe me a 6 pack of tacos. Please reboot after package installation so the service can start at boot. I also have no idea what this does or how to configure it.

Thank you.

Your monthly allocation of Nachos is on the way.   

The RPM you made in 2019 disappeared, except I had a copy here and used that until now.
It is good that this is now in the repository.
I find it very useful.

It is a really easy method for individuals to set up secure sharing on P2P basis.
The Virtual Private Network is registered with Zero Tier, based on an account set up there.
Approval is given to devices, through this account, to join the network.
A free account allows up to 50 devices to join a single network.

The communications are encrypted and speed of data transfer between devices is solely dependent on their own broadband connection speed, as transfers are direct P2P.

Example:
I have a small ARM device running tvheadend which provides live TV to whatever device in house that connects to the server using Kodi.

I have ZeroTier-one running on that ARM device which allows devices in the same VPN it joined to just as easily connect to the ARM TV server and view TV channels, which means that when travelling I have secure access to the same media as if I were home.
Of course other files etc can be shared within this secure environment.

****************

How To

1.
Sign up at
https://www.zerotier.com/
to create an account and get your ID number.

2.
Install the rpm, reboot and run as root

Code: [Select]

zerotier-cli join <ID Number>
3.
Go to the account you set up
https://my.zerotier.com/network/<ID Number>
and log in to approve the device and allocate VPN IP address.

Approve each new device you wish to allow join the network.

That is it. Those device can now share files.

2.         above is all a new device must do to join the VPN.
1. & 3.  above are done by the 'controller' of the VPN.

For simple folk like me this is about as simple as it gets to set up a P2P connection ......  no messing with firewalls, port forwarding or rules etc.

Thanks again for the RPM in the repo. 

[tbs]

Thanks for posting, this sounds really interesting!