7.20.4 Zerotier container issue

Hello, have you had any success in resolving the issue?
I have tried many things, and nothing has worked.

Hello. Could you please show me the working configuration of your router without public IP addresses and passwords? I can't seem to configure Zerotier :frowning:

Good afternoon,
Does MikroTik plan to fix this issue in 7.20.5, or will it release a guide on how to create a new zerotier container in 7.20.4?

Ask Mikrotik, perhaps ?
This is at first a user forum, users helping other users.
MT staff does come by from time to time but not always and not everywhere.

The only one in this thread who claims it works, apparently refuses to share config on how it has to be done.
So I am also in the dark, just like you.

I apologize, I did not realize that this was a forum for users.

Thank you, I will try to contact Mikrotik support.

I am sorry responding to you as I am out of town for last week.
I have given the instructions or the ways I make your firewall to allow NAT UDP 9993 to the container IP.

This is the additional thing I have but without it, zerotier can still works

I got it working over the weekend until I get into the container (read: up to the ZT IP address given to the container).
I haven't been able yet to reach CHR itself from there.

You may try the other docker images

for example: gists/zerotier:latest

I'd try 7.21rc1, it's going to be stable at some point soonish. And there are a ton of container changes, including increased permissions allowed for container. I haven't tried container ZT in a while (and I did it manually by adding ZeroTierOne for testing)... but I do know the "stock" one zerotier/zerotier is very docker-specific and does not work. But other have gotten this work in past, and 7.20.x seemingly has a few more issues than usual.... why I suggest trying 7.21rc1.

Regardless, configuration is tricky for ZT container since unlike the ARM package, all interactions happen via VETH. So exactly how ZL1 tunnels vs the ZL2 networks map is tricky business as /container, firewall, VETH config, and so many things all need to lineup. While ZT package does have access the raw interface (which a container does not, only VETH(s) exposed).... why it's pretty simple — it shame MikroTik/ZeroTier don't offer the native package for CHR already (especially since ZeroTier have been raising their prices of late)

The package I mentioned gists/zerotier:latest works. Zerotier official package can do but seems there is something wrong in working under x86/chr container.
I agree that if Mikrotik makes the offical integration into x86/chr, it would be better.

Nevertheless, using veth or nature ethernet interface should not be a problem.

Did you try my suggestions to use other docker images? In my x86, it works very well. for remote access. The official zerotier docker did not work in the my routeris version of x86 7.20.2.