1 |
>> The answer to this may be an obvious "yes" but I've never done it so I'm |
2 |
>> not sure. Can I route requests from machine C through machine A only |
3 |
>> for my domain name, and not involve A for C's other internet requests? |
4 |
>> If so, where is that configured? |
5 |
> |
6 |
> While ZT can be used to route requests between networks, but it is mainly |
7 |
> used to talk directly between clients. If A wants to talk to C over ZT, |
8 |
> it uses C's ZT IP address. |
9 |
> |
10 |
> Here's a snippet from ifconfig on this machine, whch may help it make |
11 |
> sense to you |
12 |
> |
13 |
> wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 |
14 |
> inet 192.168.1.6 netmask 255.255.255.0 broadcast 192.168.1.255 |
15 |
> ether c4:8e:8f:f7:55:c9 txqueuelen 1000 (Ethernet) |
16 |
> |
17 |
> zt0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 2800 |
18 |
> inet 10.252.252.6 netmask 255.255.255.0 broadcast 10.252.252.255 |
19 |
> |
20 |
> To talk to this computer from another of my machines over ZT I would use |
21 |
> the 10.252... address. If you tried that address, you'd get nowhere as |
22 |
> you are not connected to my network. |
23 |
|
24 |
|
25 |
So if 10.252.252.6 were configured as a router, could I join your ZT |
26 |
network and use iptables to route my example.com 80/443 requests to |
27 |
10.252.252.6, thereby granting me access to my web apps which are |
28 |
configured to only allow your machine's WAN IP? |
29 |
|
30 |
The first couple paragraphs here make it sound like a centralized SaaS |
31 |
as far as the setup phase of the connection: |
32 |
|
33 |
https://www.zerotier.com/blog/?p=577 |
34 |
|
35 |
Is it possible (easy?) to run your own "core node" and so not interact |
36 |
with the official core nodes at all? |
37 |
|
38 |
- Grant |