Re:Setting up a home VPN server with WireGuard
by johntash on Friday November 01, 2019 @07:26PM
(#21424765)
+1 for Zerotier. I really like wireguard, but Zerotier is so much easier and quicker to set up from scratch. If wireguard had ACLs and ipam built-in, it probably would probably win me over.
Re:Setting up a home VPN server with WireGuard
by finchisko on Saturday November 02, 2019 @02:02AM
(#21426151)
Maybe because it's not open source, only free for personal use?
Re:Setting up a home VPN server with WireGuard
by Youden on Saturday November 02, 2019 @04:55AM
(#21426604)
It's open source (https://github.com/zerotier) but not Free Software.
Re:Setting up a home VPN server with WireGuard
by politelemon on Saturday November 02, 2019 @04:42AM
(#21426569)
According to their pricing page,
> ZeroTier’s software is open source and free to use for most purposes including personal use, internal use within a business or academic institution, and evaluation for uses that require commercial licensing.
I was able to find this: https://github.com/zerotier/ZeroTierOne
Re:Setting up a home VPN server with WireGuard
by mcfedr on Saturday November 02, 2019 @12:05PM
(#21428391)
That sentence is an contradiction, it's either open source or requires a commercial license, cannot be both.
Re:Setting up a home VPN server with WireGuard
by tbyehl on Friday November 01, 2019 @09:03PM
(#21425203)
I've long been confused about Wireguard getting all the attention over ZeroTier. ZT is so good at finding a communications path that I had to figure out how to block it from traversing one of my IPSec tunnels.
To expand a little bit: it provides an (almost) zero-configuration way to set up a private 'layer 2' network that you can connect your home server to, and any other machines that you want to be able to connect to it or to each other. It handles NAT traversal completely transparently.
In practice, it means that if I have a (say) NFS server connected to a Zerotier network I control, I can connect to it transparently from anywhere from another machine on that network, no matter what NATs / firewalls either machine is behind, even if they change. Perfect for phones, roving laptops, etc. I've gone to a model where I do most of my development (over mosh/tmux) on my home machine, from wherever I happen to be.
No home firewall configuration needed at all.