voobscout/zerotier repository overview

zerotier docker container This container will self-authorize to Zerotier network and create a NAT: #+BEGIN_SRC sh iptables -t nat -A POSTROUTING -s $zt_network -o eth0 -j SNAT --to-source $eth0_ipaddr iptables -A FORWARD -i zt0 -s $zt_network -d $anywhere -j ACCEPT iptables -A FORWARD -i eth0 -s $anywhere -d $zt_network -j ACCEPT #+END_SRC

Remember to set ZT_API_KEY and ZT_NETWORK_ID! Both NET_ADMIN and SYS_ADMIN capabilities are required!

Must disable ipv6 for ZT network

#+BEGIN_SRC sh docker run --rm -ti
--cap-add NET_ADMIN
--cap-add SYS_ADMIN
--device /dev/net/tun
-e ZT_API_KEY=
-e ZT_NETWORK_ID=
--name
--hostname
voobscout/zerotier #+END_SRC

To route traffic via this container:

#+BEGIN_SRC sh ip r add <docker/k8s network CIDR> via dev #+END_SRC ** TODO Figure out how to pass those correctly: $NODE_DESCRIPTION #+BEGIN_SRC json { "name": "", "description": "" } #+END_SRC

Handle ipv6 addresses