zerotier/ZeroTierOne
ZeroTierOne
ZeroTierOne is a software-defined networking engine that creates virtual local area networks by emulating Ethernet switches across distributed devices. It functions as a peer-to-peer platform, establishing encrypted tunnels directly between endpoints to bypass the need for centralized gateways or hub-and-spoke architectures.
The system distinguishes itself through a decentralized approach to network discovery and identity management. By utilizing a distributed hash table and public key infrastructure, it authenticates devices and maps virtual addresses to physical endpoints without relying on centralized certificate authorities. Security is enforced at the individual device level, allowing for granular access control policies that remain consistent regardless of the physical network location.
The platform provides a user-space network stack that enables consistent behavior across diverse operating systems and hardware. It supports integration into applications for embedded networking, allows for deployment via containerization, and provides compatibility with mobile hardware. The software includes cryptographic standards designed to maintain security in sensitive environments.
Features
- Peer-to-Peer Networking - Establishes secure, encrypted peer-to-peer tunnels between remote endpoints without requiring centralized gateway hardware.
- Zero Trust Access - Enforces security rules and access controls directly at each device to remove the need for centralized network chokepoints.
- Software-Defined Networking Services - Provides a software-defined networking engine that creates virtual Ethernet-like switches across distributed devices.
- Virtual Local Area Networks - Connects distributed devices into a single peer-to-peer network that functions like a shared physical Ethernet switch.
- Zero Trust Networking - Enforces granular access policies and cryptographic authentication directly at the device level for secure network communication.
- Virtual Network Interfaces - Implements virtual network interfaces to enable seamless connectivity across diverse operating systems and hardware.
- Virtual Private Networks - Establishes secure virtual private network connections for mobile hardware to allow remote devices to communicate as if locally attached.
- Identity Management - Authenticates devices using public key infrastructure to verify peer identity without relying on centralized certificate authorities.
- Userspace Network Stacks - Implements packet processing and protocol handling within the application layer for consistent network behavior across platforms.
- Zero Trust Architectures - Enforces granular security policies directly on local devices to maintain consistent protection regardless of network location.
- Overlay Networks - Layer 2 overlay network for decentralized device connectivity.
- Virtualization Networking - Creates software-defined layer two network interfaces that allow remote devices to communicate as if connected to a local switch.
- Network Access Control - Applies security rules and access controls directly at each device to remove the need for centralized network chokepoints.
- Distributed Hash Tables - Locates network peers using a decentralized global lookup system to map virtual addresses to physical endpoints.
- Network Policy Enforcement - Applies granular security rules and access control lists directly on local devices to ensure consistent protection.
- Mobile Network Clients - Establishes secure virtual private network connections for mobile hardware to enable remote access to local networks.
- Embedded Network Stacks - Integrates virtual network stacks directly into applications to grant exclusive access to private network interfaces.
- Data Encryption - Protects network data using cryptographic standards designed to withstand future computing threats.
