ZeroTierOne is a software-defined networking engine that creates virtual local area networks by emulating Ethernet switches across distributed devices. It functions as a peer-to-peer platform, establishing encrypted tunnels directly between endpoints to bypass the need for centralized gateways or hub-and-spoke architectures.
The system distinguishes itself through a decentralized approach to network discovery and identity management. By utilizing a distributed hash table and public key infrastructure, it authenticates devices and maps virtual addresses to physical endpoints without relying on centralized certificate authorities. Security is enforced at the individual device level, allowing for granular access control policies that remain consistent regardless of the physical network location.
The platform provides a user-space network stack that enables consistent behavior across diverse operating systems and hardware. It supports integration into applications for embedded networking, allows for deployment via containerization, and provides compatibility with mobile hardware. The software includes cryptographic standards designed to maintain security in sensitive environments.