Use 'full cone' or 'port restricted cone' NAT. If present it should be implemented without NAT (NAT is wholly unnecessary with IPv6 and only adds complexity) and with a stateful firewall that permits bidirectional UDP conversations. IPv6 is recommended and can greatly improve direct connection reliability if supported on both ends of a direct link. Supporting either UPnP or NAT-PMP on your network can greatly improve performance by allowing ZeroTier endpoints to map external ports and avoid NAT traversal entirely.Recommended Local Network and Internet Gateway Configuration Other settings such as 'local isolation' can also interfere significantly with performance by forcing local traffic to traverse the Internet. If your network configuration is hostile to peer to peer network connectivity, most of your ZeroTier traffic will end up being relayed indirectly. But 'some level of connectivity' does not mean 'optimal connectivity.' This page details the physical network configuration that we recommend for best results. We provide multiple layers of fallback so that some level of connectivity can be achieved through even the most restrictive or broken physical networks.

ZeroTier is designed to work in as many environments as possible. Please refer to your distribution's documentation for how to unblock ICMP packets. There are far too many linux distributions out there to list instructions for all of them here. Under Firewall Options, ensure 'Enable stealth mode' is disabled. If your firewall is enabled on macOS, go into System Preferences -> Security & Privacy.

The firewall is not enabled by default on macOS, and thus pings will not be blocked by default. ZeroTier versions 1.10.3 and greater automatically enable ping on ZeroTier adapters. Aside from that, some OSes block pings in their local firewall by default. Troubleshooting & FAQ Ping is not working įirst, make sure your device is authorized on the network and you're using the ZeroTier assigned Managed IP address.

Zero to One instal