Subj : fsxNet Feedback (ZeroTier)
To   : deon
From : Oli
Date : Fri May 14 2021 11:19 am

deon wrote (2021-05-14):

 A>>> # We could choose to 'secure' the network using something like
 A>>> ZeroTier
 Ol>> I used ZeroTier and it's quite easy to setup and works, but I
 Ol>> dislike the idea to use a commercial provider for the basic
 Ol>> infrastructure. FTN is DIY.

 d> You dont have to use "a provider" with ZeroTier.

 d> I run a ZeroTier network that is independant of "zerotier" (the provider)
 d> itself.

Is it completely independent?

Wikipedia tells me: "Virtual networks are created and managed using a ZeroTier controller. Management is done using an API, proprietary web-based UI (ZeroTier Central), open-source web-based or CLI alternative. Using root servers other than those hosted by ZeroTier Inc. is *impeded* by the software's license.

 d> While you may argue that you "find" me through their root server (which
 d> is the default) - it doesnt "have" to operate that way. I can populate a
 d> "moon" that you "orbit" around (their terms, not mine) so that zerotier
 d> can be turned off and our connection still works.

 d> I know ZeroTier were working on personal "roots" so that this moon thing
 d> has a less of a value (and they are no longer a sudo dependancy). (I
 d> havent kept up with it recently though.)

root, moons, orbits, ... contr

 d> The other good thing, with ZeroTier, you dont necessarily provide anybody
 d> on the network (who needs to be authorised if it is configured to do so),
 d> to see everything on all ports. You can firewall it to a certain extent
 d> (at the network layer), such that only specific ports are permitted on
 d> the network. (I did setup the FSX zerotier network this way.) (You could
 d> also have your own running firewall as well if you wanted.)

Can I configure the ports or has the admin the power to change the rules at will?

Is it possible to use ZeroTier in a really decentralized way?

---
 * Origin: . (21:3/102)

.