Dynamic Multipoint VPN with ZeroTier and VyOS

General Discussion
1

Update: Part 2 is live!

I wrote this post for people that may be interested in a scalable Multipoint VPN solution for site-to-site communication. I intend for this to be a multi-part series, so let me know if there’s anything specific you’d like to see related to a deployment like this.

2 Likes
2

I’d love to see a version using Mikrotik RouterOS instead of VyOS. (Nothing against VyOS, but I’m seeing more and more Mikrotik stuff in the field). Maybe adapting Zerotier & Mikrotik design concept - Infrageeks to use BGP instead of the Zerotier routing…

3

Part 2 is live!:

4

Thanks @erik, I’ll have to look into their cloud hosted router for that since I don’t have any physical boxes from them.

5

I’d be happy to lend you one, depending on shipping to wherever you are…

6

I can’t seem to edit my original post any more.

I uploaded a part 1.5 for the series about persistence for the ZeroTier deployment in VyOS:

7

Thanks for the offer! I have a few more things I’m working on as far as labs. Let me check out the cloud router and see if it’ll work for lab purposes first.

1 Like
8

Added a post about increasing the scale of this design:

9

Added another post to this design: Microsegmentation

10

I plan for this to be the final post in this series unless there’s something specific someone wants to see.

11

A friend of mine asked if he could create videos from my blog posts. Here is the first video:

1 Like
12

@erik,

I’ve released the first part of the Multipoint VPN series using ZeroTier and MikroTik. You can find it here:

1 Like
13

Nicely done!

Although this now has me going down the rathole of trying to truly understanding BGP in this context and thinking about the impacts of the Hub failure in this scenario…

14

In Part 2 I’ll be adding additional regions for scalability, as well as additional hubs for redundancy. In this design, the Hubs are not part of the forwarding path (unless you make it so), which allows you to place them anywhere. You can have some on-prem, and some in the cloud. Hub redundancy can be as

15

This topic was automatically closed after 30 days. New replies are no longer allowed.