ZeroTier and DNS issues
-
@adam.ierymenko said:
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
@adam.ierymenko said:
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
I've used Chef but it doesn't tell me who is currently connected, their assigned IP, etc.
-
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
-
@scottalanmiller Does the baseline Pertino package include the ability to see network usage? performance?
-
@Breffni-Potter said:
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
ZT to the rescue!
-
Seeing bottle necks I suppose would be something nice to see, though I don't know what type of overhead that kind of reporting would add to the whole system.
-
@Dashrender said:
@Breffni-Potter said:
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
ZT to the rescue!
I've never been so excited about a product before.
Built by engineers, not slicked well oiled salesmen.
-
ZT tells you basic information: assigned IP, who is on your network, etc., but it doesn't do sysadmin stuff... Puppet and Chef and such have very deep well-developed products that do that and you can use them over a ZT network just fine.
@dafyre ZT addresses are stable down to the virtual Ethernet MAC, which is derived from your ZeroTier address + network ID, and both of those are cryptographic credentials. Basically your identity.secret file is your virtual network endpoint on all networks you belong to. (A gotcha we see from time to time is people cloning VMs then wondering why the clone gets the same addresses. It's because it has the same identity.)
-
Since both ZeroTier and Pertino simply provide IP space, you could join $networkmonitoringpackage to the SDN (ZT / Pertino) IP space and install the agents (if necessary) and away you go.
-
@dafyre Yes, there's some great software for that including some that does detailed security analytics and scans for known malware traffic, etc.
-
Pertino does not manage endpoints in any way like Chef or Puppet. That's completely out of scope. It is all network.
-
Yeah so far for us stuff like managing endpoints is out of scope and there are already tools that do it well. Detailed security analytics is also out of scope so far, but maybe not forever.
-
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
-
I didn't think @scottalanmiller was asking about endpoint management, he's talking a more about network management - bottlenecks, who has what IP, who's online now, etc.
Right?
-
@dafyre said:
Since both ZeroTier and Pertino simply provide IP space, you could join $networkmonitoringpackage to the SDN (ZT / Pertino) IP space and install the agents (if necessary) and away you go.
I've never heard of that - I guess I"ll be googling soon.
-
@dafyre Also wanted to mention: ZT doesn't use DHCP per se. It can do its own IP assignment using its own methods (network controller assigns IPs) or it can let the OS manage it. In the latter case it will pass DHCP packets so if you enable DHCP on the interface it should work if you have a server on the same network. Beware of DHCP + bridging though, since you can get weird route issues.
-
@Breffni-Potter said:
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
LOL So like LMI, they dumped their free product, but unlike LMI they never told everyone that the free product would be free forever.
-
@Dashrender IPs and online status can be seen through the ZT control panel (https://my.zerotier.com/ and we'll be licensing a self-hosted version of this soon with more features) and I'm not sure what you mean by bottlenecks. If you mean traffic monitoring there are tools like Zabbix (linked above) that do that well and so far detailed stats like that have been out of scope for ZT (but maybe not forever). ZeroTier runs a full p2p mesh so under most conditions a bottleneck has no real meaning... traffic just flows directly from endpoint to endpoint as it normally would but with encryption and stable mobile addressing. It will run as fast as the underlying network (minus a bit of crypto overhead).
-
@dafyre said:
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
OK i missed this post - no wonder I had no idea what $networkmonitoringpackage meant.
-
@Dashrender said:
@dafyre said:
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
OK i missed this post - no wonder I had no idea what $networkmonitoringpackage meant.
We have Zabbix running here.
-
@Dashrender said:
@Breffni-Potter said:
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
LOL So like LMI, they dumped their free product, but unlike LMI they never told everyone that the free product would be free forever.
Only for new signups, people on the free still have free, that much I know. LMI started charging their "free forever" clients or turning them off.
