Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ZeroTier – home VPN without a public IP address

blog.tomaszdunia.pl

Post reply on HN
Print view View original

41–50 of 68 posts

Re: ZeroTier – home VPN without a public IP address

#41

Post by the_mitsuhiko »

chabad360 wrote: post #24
savikko wrote: post #17

Hugged to death but what i like about zerotier is that I can access my Home Assistant instance (and other home services) with same ip address (resolved from dns and then TLS terminated with traefik) from home network and from zerotier. And it does not matter if I have ZT network connected when home. Not sure if that is possible with tailscale (from my understanding, it generates always tailnet ip for hosts).

Tailscale does support this. Using the Subnet routing feature you can expose other devices on the network to the Tailnet. I had to use this for a while with TrueNAS because of the way it handles TS integration (eventually I moved to using a reverse proxy).

The best part of tailscale is that you can use an Apple TV as a subnet router and exit node. So even if you do not have any home networking equipment, you can utilize this by just using the Apple TV app. This is particularly great if you have a second home etc.

Re: ZeroTier – home VPN without a public IP address

#42

Post by jstasiak »

eptcyka wrote: post #31
exceptione wrote: post #28

Earlier quoted context omitted.

How does Nebula compare to Wireguard?

Nebula does use WireGuard, as per their go.mod file. EDIT: actually, they just use various I/O abstractions that WireGuard developed.

Looking at that file may make you reach misleading conclusions. Some tun/io code may be use but there's that. As far as I understand WireGuard the protocol is not used anywhere:

  nebula (master)> git rev-parse HEAD
  2b427a7e8934f0a436fea25eb40a6b979b34ee7a
  
  nebula (master)> rg --glob '*.go' -i wireguard
  wintun/tun.go
  6: * Copyright (C) 2018-2021 WireGuard LLC. All Rights Reserved.
  9://NOTE: This file was forked from https://git.zx2c4.com/wireguard-go/tree/tun/tun_windows.go?id=851efb1bb65555e0f765a3361c8eb5ac47435b19

  udp/udp_rio_windows.go
  4:// Inspired by https://git.zx2c4.com/wireguard-go/tree/conn/bind_windows.go
  25: "golang.zx2c4.com/wireguard/conn/winrio"

  overlay/tun_wintun_windows.go
  17: "golang.zx2c4.com/wireguard/windows/tunnel/winipcfg"

  wintun/device.go
  6: * Copyright (C) 2017-2021 WireGuard LLC. All Rights Reserved.
  9://NOTE: this file was forked from https://git.zx2c4.com/wireguard-go/tree/tun/tun.go?id=851efb1bb65555e0f765a3361c8eb5ac47435b19

Re: ZeroTier – home VPN without a public IP address

#43

Post by eptcyka »

jstasiak wrote: post #42
eptcyka wrote: post #31

Earlier quoted context omitted.

Nebula does use WireGuard, as per their go.mod file. EDIT: actually, they just use various I/O abstractions that WireGuard developed.

Looking at that file may make you reach misleading conclusions. Some tun/io code may be use but there's that. As far as I understand WireGuard the protocol is not used anywhere: nebula (master)> git rev-parse HEAD 2b427a7e8934f0a436fea25eb40a6b979b34ee7a nebula (master)> rg --glob '*.go' -i wireguard wintun/tun.go 6: * Copyright (C) 2018-2021 WireGuard LLC. All Rights Reserved. 9://NOTE: This file was forked from htt…

I stand corrected then.

Re: ZeroTier – home VPN without a public IP address

#46

Post by jstasiak »

bclemens wrote: post #21

Also consider Nebula: https://github.com/slackhq/nebula ZeroTier does not use an OSI approved open-source license. It is under a freedom-restricting "Business Source License". Nebula is MIT licensed. Nebula is much simpler and in most cases faster than ZeroTier.

Adding +1 to the Nebula recommendation.

The last time I tried ZeroTier (years ago, I admit) it wasn't possible to self-host all of it I think and I couldn't make it reliably use my own relays for good performance of non-direct connections.

I've been happily using Nebula for a while now, pretty easy to configure and self-host.

Re: ZeroTier – home VPN without a public IP address

#47

Post by ramarnat »

Also great to bypass Netflix/Hulu/Disney geo or VPN restrictions. I run ZT on my travel Amazon firestick, connect to my home network, turn on use default gateway and all traffic goes via my home router.

Using a similar setup, a friend in Oz and I also share ZT networks, so either he or I can use them to watch content that is only available regionally. The traffic uses home IPs, so it won't get blocked or detected.

It just works.

(Disclosure: was part of the first angel round investment in ZT)

Re: ZeroTier – home VPN without a public IP address

#49

Post by Diti »

Krasnol wrote: post #13

Very nice and detailed guides. The guide for Shellys [0] is highly appreciated. I always thought about touching those, but all the guides I've found required knowledge I didn't have. I guess it's a precaution because one can cause real damage doing this wrong, but I feel now, I could do it. Dzieki. [0] https://blog.tomaszdunia.pl/shelly-smart-oswietlenie-eng/

Do you have any feedback regarding lag? I like the potential of Shelly products, but every single light I bought from them has a 2-second lag, as the devices seem to want to light up only AFTER being connected to the WiFi.

Re: ZeroTier – home VPN without a public IP address

#50

Post by john_alan »

k8sToGo wrote: post #29
mr_mitm wrote: post #26

Earlier quoted context omitted.

DDclient (or an alternative) takes care of the IP change and wireguard is as good as stateless anyway.

Wireguard connects to an IP endpoint. It does not resolve the domain for each packet.

Gotcha but a restart every IP change and you’re good.
Post reply on HN