>Does ZeroTier require a central coordination server for authentication and to distribute public keys? You can run your own network controller, although that o

>Does ZeroTier require a central coordination server for authentication and to distribute public keys? You can run your own network controller, although that option isn't very well documented. If you did, that network controller would be the only thing that had the private keys that sign changes to the network configuration. The basic network controller is bundled with the zerotier builds, but there's no web UI or anything like that. >I see there are “moons” and you can install your own moon. How much is the effort for self hosted version? It's easy to set up a moon. By default every zerotier install can also work as a moon. The challenge is more in configuring all the other nodes to use that moon. Some platforms, like android/iphone, I don't believe can be currently set up to use custom moons. There's currently no way to remove the default zerotier moons, as they're hard-coded. I think the only thing you really get out of a custom moon is that it can act as a relay server, and can work in an environment where there's no internet at all. I wish that it was easier to push moon config to other nodes, as right now the feature is kind of useless. >Another question: How does ZeroTier bypass NAT if the connections are peer to peer? Is it similar to Tailscale (UPnP and STUN, followed by relaying)? Yep.