3 ms·

zerotier runs into problems when two NATs are involved, this claims to not have any problems with that?

dividuum 6y ago
Once you have two NATs, you can either try to punch holes (ZeroTier tries that), use UPnP (ZeroTier does - see below) or relay traffic using dedicated machines (ZeroTier does that as fallback). I successfully used ZeroTier to connect multiple devices behind NATs. VPNCloud seems to only do UDP hole punching and doesn't have the ability to relay via a third party. At least in theory, ZeroTier should handle cases that VPNCloud doesn't.
- Anunayj 6y ago
  I think zerotier does UPnP too (read somewhere), though I could not get zerotier to work reliably with 2 NATs. I'll try this and tell if I see any success with this.
  - dividuum 6y ago
    > I think zerotier does UPnP too I think you're correct. Thanks. My information was from an old blog post from 2014 [1] but they seems to have added support since then: https://github.com/zerotier/ZeroTierOne/commit/bf193dd3 https://github.com/zerotier/ZeroTierOne/commit/bf193dd3. Edited my post. [1] https://www.zerotier.com/2014/08/25/the-state-of-nat-traversal/#:~:text=UPnP https://www.zerotier.com/2014/08/25/the-state-of-nat-travers...
kenmacd 6y ago
Do you mean when one peer is behind multiple layers of NAT? If so that's not a situation I have myself, but I'll keep in mind. For regular nodes behind a single NAT I've personally found it worked remarkable well. Maybe I've been lucky on UPnP support with routers or something though.
adamfisk 6y ago
Having two NATs is really the only case worth mentioning. Considering almost all internet traffic involves at least one NAT, if you can’t handle a single NAT case, you’ve got issues!
- kenmacd 6y ago
  I have ZeroTier running behind a variety of different NATs and haven't had any issues at all. It also seems to do a good job of having hosts on the same network talk directly over their private IPs.
- namibj 6y ago
  Except almost no IPv6 traffic involves a NAT, and a significant chunk of internet traffic is using IPv6. Hence it's not possible for almost all to involve a NAT, even if all IPv4 traffic would.
heythere22 6y ago
I'm running 4 hosts behind 4 different NATs in the same zerotier-virtual-network and never had any issues. By far the easiest way to accomplish connecting different hosts behind different NATs. No config whatsoever required!
linsomniac 6y ago
I haven't experienced that. At home I currently have a Google WiFi in NAT mode behind a Nokia Fiber ONT also in NAT mode (eventually plan to switch to bridging mode after some networking reorganization). I haven't run into any ZeroTier issues in this config.

Once you have two NATs, you can either try to punch holes (ZeroTier tries that), use UPnP (ZeroTier does - see below) or relay traffic using dedicated machines (ZeroTier does that as fallback). I successfully used ZeroTier to connect multiple devices behind NATs. VPNCloud seems to only do UDP hole punching and doesn't have the ability to relay via a third party. At least in theory, ZeroTier should handle cases that VPNCloud doesn't.

Anunayj 6y ago
I think zerotier does UPnP too (read somewhere), though I could not get zerotier to work reliably with 2 NATs. I'll try this and tell if I see any success with this.
- dividuum 6y ago
  > I think zerotier does UPnP too I think you're correct. Thanks. My information was from an old blog post from 2014 [1] but they seems to have added support since then: https://github.com/zerotier/ZeroTierOne/commit/bf193dd3 https://github.com/zerotier/ZeroTierOne/commit/bf193dd3. Edited my post. [1] https://www.zerotier.com/2014/08/25/the-state-of-nat-traversal/#:~:text=UPnP https://www.zerotier.com/2014/08/25/the-state-of-nat-travers...

kenmacd 6y ago

Do you mean when one peer is behind multiple layers of NAT? If so that's not a situation I have myself, but I'll keep in mind. For regular nodes behind a single NAT I've personally found it worked remarkable well. Maybe I've been lucky on UPnP support with routers or something though.

adamfisk 6y ago

Having two NATs is really the only case worth mentioning. Considering almost all internet traffic involves at least one NAT, if you can’t handle a single NAT case, you’ve got issues!

kenmacd 6y ago
I have ZeroTier running behind a variety of different NATs and haven't had any issues at all. It also seems to do a good job of having hosts on the same network talk directly over their private IPs.
namibj 6y ago
Except almost no IPv6 traffic involves a NAT, and a significant chunk of internet traffic is using IPv6. Hence it's not possible for almost all to involve a NAT, even if all IPv4 traffic would.

heythere22 6y ago

I'm running 4 hosts behind 4 different NATs in the same zerotier-virtual-network and never had any issues. By far the easiest way to accomplish connecting different hosts behind different NATs. No config whatsoever required!

linsomniac 6y ago

I haven't experienced that. At home I currently have a Google WiFi in NAT mode behind a Nokia Fiber ONT also in NAT mode (eventually plan to switch to bridging mode after some networking reorganization). I haven't run into any ZeroTier issues in this config.