OPNsense Forum

English Forums => General Discussion => Topic started by: kapara on July 09, 2019, 10:42:25 pm

Title: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: kapara on July 09, 2019, 10:42:25 pm

I am curious if ZeroTier can be used with dual wan for vpn failover.  Does anyone have any experience with this?

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: kapara on July 11, 2019, 08:38:48 pm

Really no one has used ZeroTier?  is it a bad product?

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: kapara on July 11, 2019, 08:42:36 pm

Is David Harrigan dharrigan@gmail.com a developer at OPNsense?  I tried emailing him but no response and no response from the community.  Can anyone give any insight into this?

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: mimugmail on July 11, 2019, 09:59:36 pm

He pinged me last time via IRC, maybe you can have a look there, but ZeroTier is quite unmaintained (as it's the software itself too).

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: seized on July 13, 2019, 07:16:09 am

I use ZeroTier but not with dual WAN yet. I like it, it works well and is reliable. But cant comment on dual WAN. In theory it should work.

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: kapara on July 15, 2019, 07:52:46 pm

Great to hear.  Some of my reading said it required a lot of ram.   Can you tell me more about your implementation?  I am looking at Point to point between 2 firewalls.  Current firewalls have 8GB ram

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: kapara on July 16, 2019, 01:05:57 am

I have posted a job on upwork to get assistance with this.  If anyone here is interested I am happy to pay $150 an hour for assistance.  But this must be something you have previously done.  Site to site vpn over ZeroTier.

I am getting ping replies from the ZeroTier IP assigned ot the remote interface but nothing from the remote LAN even though routes have been added to ZeroTier and I think I have added all required rules.

On wan allow any from ZT Net

And on ZT interface allow to any

I also get 304 ping timeouts regularly.

https://www.upwork.com/ab/applicants/1150903677481607168/job-details (https://www.upwork.com/ab/applicants/1150903677481607168/job-details)

Title: Re: Anyone using ZeroTier? Can it be used with dual WAN for vpn failover?
Post by: kapara on July 17, 2019, 09:18:44 pm

So it started working!  I am now connected site to site over ZeroTier.  Now to test VPN failover by disabling the remote primary wan connection!  There is hope!