ZeroTier SD-WAN / Network Orchestration

I’m truly surprised that you didn’t mention TailScale yet in a topic about ZeroTier.
What gives? Are you ok?

Just for You @Znevna
Battle of the VPNs: Which one is fastest? (speed test)
Perhaps you can learn something from Netmaker … :slight_smile:

In my opinion this is a rather sloppy article/test/comparison thus I wouldn't bother too much about the outcome and related conclusions. Just a few examples of shortcomings:

  • Tailscale and the stand-alone wireguard offer identical point-to-point traffic (that is the wireguard protocol) and both are normally equally fast.

  • The article lacks information on how the controllers for nebula, tailscape and zerotier were set up. A sloppy configuration will in worst case pass all traffic through the controllers and not point-to-point as was probably intended.

  • There is no information regarding the different capacity settings and configuration options like best practice recommended settings thus I suspect he missed things like using aes instead of the standard salsa for zestier and nebula (and simlar for the others).

There are plenty of other more more in depth and serious tests than this one IMHO.

@Anava, I'll get back to you later on the other matter.

Thanks Larsa, yeah tend to agree the article was an infomercial for their product which uses wireguard… not a credible review IMHO.

@Larsa … IMHO Netmaker test are COMPREHENSIVE and very credible …. I do not understand why YOU would think otherwise … why because my comparison made some time ago showed TailScale being FAR superior to ZeroTier … by a country mile. WireGuard is the THE ONE in every way shape and form. IMO, ZeroTier is a complete and absolute waste of valuable time. What a shame that MikroTik has included it within RoS 7 for ARM devices.

My comment was merely about the test itself and not about a specific solution.

When it comes to SD-WAN, I think there are other important factors to take into account than just pure speed. In addition, standard pptp connections that require manual configuration are by definition not SD-WAN and therefore don’t meet the standards of a decent test IMHO, it might be valuable as a reference though.

Benefits of SD-WAN
SD-WAN offers many benefits to geographically distributed organizations, including:

Simplicity: Because each device is centrally managed, with routing based on application policies, WAN managers can create and update security rules in real time as network requirements change. By combining SD-WAN with zero-touch provisioning – which helps automate deployment and configuration processes – organizations can further reduce the complexity, resources and opex required to turn up new sites.

Improved performance: By allowing efficient access to cloud-based resources without the need to backhaul traffic to centralized locations, organizations can provide a better user experience.

Reduced costs: Network administrators can supplement or substitute expensive MPLS with broadband connectivity options.

So @ Larsa how does ZeroTier meet the THREE Critical Benefits of a SD-WAN as stated above : … please elaborate …

All very good examples of essential points that define the advantage of SD-WAN. Of course there might be advantages to other alternatives, but at the moment ZT is the only available solution for Mikrotik (so far).

SD-WAN compared to regular pptp solutions that requires human intervention during ongoing operations for configuration of new entery points and reconfiguration of exitent ones I beleave is a more interesting topic to discuss.

So ZeroTier cannot meet ANY of those 3 CRITICAL advantages … otherwise you @Larsa would be singing from the Tree Tops :slight_smile:

To bad that TailScale is not integrated into RoS as a client because TailScale is Far superior and a SCALEABLE management solution for WireGuard. However, for the purposes of MikroTik WireGuard is so easy to deploy and manage especially for the SMB marketplace.

Sorry to fan the flames on this but Tailscale is terrible. IMHO.

Note the IMHO part. If Tailscale was included as a package I wouldn’t care. I likely wouldn’t use it but the fact it was there wouldn’t bother me in the slightest.

We get that you don’t like Zerotier. It doesn’t make you right and it doesn’t make you wrong either. If you don’t like it just don’t use it. Simple. This endless back and forth about it is tiresome and irrelevant. Move on.

TZ meets all these requirements by definition. However even though it’s quite obvious that you have a different view, it’s also hard to determine the reason for this.

@Larsa … word games do not work ?.. but you can dream all you want because in dreams everything is possible.

Haha, well as you probably live in another dimension! But deep down you know I’m right! ( :smiley: )

Still waiting for that “right” config LOL

Hell will freeze over before @Larsa will provide that “right” config for you …. simplicity, performance, reduced costs ONLY in Larsa’s dreams.

That was a bit unfair since hell will freez to ice already tomorrow and I don’t really have time to fix it. : )

Anyhow, I may have expressed myself carelessly but I don’t recall that I have ever promised a complete config.

However I’m open to a dialogue about the advantages of SD-WAN (ZT) compared to manually configured tunnels like for instance wg.

If there is any interest, I might consider to contribute parts to some kind of best practice for ZT (but subject to available time).

@Larsa, without one shadow of doubt I really like your sense of humor …. :laughing:

Are you a ZT employee?

I can assure you that I’m not working for or am employed by ZT.

Also, I am not in favor of any particular solution in general, meaning each thing has its place that best suits a specific need or occasion.