ZeroTier and DNS issues
-
What are the most common management needs you tend to see in the field? I assume once you have a network you want to do access control / identity management tie-in somehow (which we're looking at), and you want security monitoring of some form or another, but what else? AD / LDAP already does user management and most people are not going to switch their whole user DB over to another service, and companies like Chef, Puppet Labs, and Hashicorp are completely rocking the devops large-scale management side of things. I'd hesitate to try to compete with any of those on their own turf.
-
@adam.ierymenko said:
What are the most common management needs you tend to see in the field?
I mostly work in the SMB space with SDN so the one really big thing we see is: nothing.
-
Heh... in that case ZT will work fine if they can work around addressing edge cases like the aforementioned. If you are all-in on SDN you just use that as your LAN in which case it all works because it's all just a LAN.
The hairy legacy heterogenous things are the evil ones, but I suspect that's where a good chunk of revenue might be if you could actually do it well.
-
Does ZeroTier offer anything around visibility into connected devices and the like via a central graphical console? I'm all about the CLI, but most of my team would be unhappy for most things.
-
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
-
@scottalanmiller said:
It's always been free for a small network. No idea, I've not looked in a really long time.
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
-
On their website it does, but it's basically just a list of the devices connected with room for you to desscribe what device is what.
One thing that I have noticed is that on ZT, the built in DHCP server tends to assign static IP addresses to the servers... I've been running my own for weeks and the IPs haven't changed. Even if I make a device leave the network and add it back in later.
-
@Breffni-Potter said:
@scottalanmiller said:
It's always been free for a small network. No idea, I've not looked in a really long time.
It was only free for 3 devices and they axed that last year when they did a 50% price hike.
Yes they offered "more features" but it was painful to swallow.
The question remains, did the SMB care about those features?
-
@adam.ierymenko said:
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
@adam.ierymenko said:
What do you mean by visibility into? We don't have anything that does system administration and control, but then again most people I talk to use something like Puppet or Chef for that.
I've used Chef but it doesn't tell me who is currently connected, their assigned IP, etc.
-
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
-
@scottalanmiller Does the baseline Pertino package include the ability to see network usage? performance?
-
@Breffni-Potter said:
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
ZT to the rescue!
-
Seeing bottle necks I suppose would be something nice to see, though I don't know what type of overhead that kind of reporting would add to the whole system.
-
@Dashrender said:
@Breffni-Potter said:
@Dashrender said:
The question remains, did the SMB care about those features?
My latest client really couldn't care less for any of the features. At the old price they might have gone for it, at the new one, not a chance.
ZT to the rescue!
I've never been so excited about a product before.
Built by engineers, not slicked well oiled salesmen.
-
ZT tells you basic information: assigned IP, who is on your network, etc., but it doesn't do sysadmin stuff... Puppet and Chef and such have very deep well-developed products that do that and you can use them over a ZT network just fine.
@dafyre ZT addresses are stable down to the virtual Ethernet MAC, which is derived from your ZeroTier address + network ID, and both of those are cryptographic credentials. Basically your identity.secret file is your virtual network endpoint on all networks you belong to. (A gotcha we see from time to time is people cloning VMs then wondering why the clone gets the same addresses. It's because it has the same identity.)
-
Since both ZeroTier and Pertino simply provide IP space, you could join $networkmonitoringpackage to the SDN (ZT / Pertino) IP space and install the agents (if necessary) and away you go.
-
@dafyre Yes, there's some great software for that including some that does detailed security analytics and scans for known malware traffic, etc.
-
Pertino does not manage endpoints in any way like Chef or Puppet. That's completely out of scope. It is all network.
-
Yeah so far for us stuff like managing endpoints is out of scope and there are already tools that do it well. Detailed security analytics is also out of scope so far, but maybe not forever.
-
Pretty much everybody here knows I'm a big fan of Zabbix (http://www.zabbix.com) for any sort of network monitoring.
