Internet routing stops several seconds after starting zerotier on Debian 12

System is a Dell laptop with Debian 12. Using the wifi interface. I am able to access the internet just fine when zerotier is not running. The routing table before enabling zerotier is below, and a few pings to google.com to show that it works.:

root@CKLT:/home/wright# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.68.1    0.0.0.0         UG    0      0        0 wlp2s0b1
default         192.168.68.1    0.0.0.0         UG    600    0        0 wlp2s0b1
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     0      0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp2s0b1
192.168.68.1    0.0.0.0         255.255.255.255 UH    0      0        0 wlp2s0b1
gateway.home    192.168.68.1    255.255.255.255 UGH   0      0        0 wlp2s0b1
root@CKLT:/home/wright# ping google.com
PING google.com (142.250.217.206) 56(84) bytes of data.
64 bytes from mia07s61-in-f14.1e100.net (142.250.217.206): icmp_seq=1 ttl=116 time=16.4 ms
64 bytes from mia07s61-in-f14.1e100.net (142.250.217.206): icmp_seq=2 ttl=116 time=16.7 ms
64 bytes from mia07s61-in-f14.1e100.net (142.250.217.206): icmp_seq=3 ttl=116 time=27.6 ms
--- google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 16.423/20.229/27.574/5.194 ms

Now I activated zerotier and joined a network, and then immediately start a ping to google.com again. Note that the ping continues to work for a number of seconds and then stops. After stopping the failing ping, examining the routing table shows zerotier has installed itself as a default gateway for everything.

So the question is how to get it to stop doing that?

root@CKLT:/home/wright# zerotier-cli join XXXXXXXXXXXXXXX
200 join OK
root@CKLT:/home/wright# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.68.1    0.0.0.0         UG    0      0        0 wlp2s0b1
default         192.168.68.1    0.0.0.0         UG    600    0        0 wlp2s0b1
10.147.19.0     0.0.0.0         255.255.255.0   U     0      0        0 ztrtauxf36
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     0      0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp2s0b1
192.168.68.1    0.0.0.0         255.255.255.255 UH    0      0        0 wlp2s0b1
gateway.home    192.168.68.1    255.255.255.255 UGH   0      0        0 wlp2s0b1
root@CKLT:/home/wright# ping google.com
PING google.com (142.250.189.142) 56(84) bytes of data.
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=1 ttl=116 time=13.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=2 ttl=116 time=14.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=3 ttl=116 time=14.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=4 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=5 ttl=116 time=15.6 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=6 ttl=116 time=20.7 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=7 ttl=116 time=16.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=8 ttl=116 time=16.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=9 ttl=116 time=14.4 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=10 ttl=116 time=23.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=11 ttl=116 time=17.1 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=12 ttl=116 time=16.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=13 ttl=116 time=20.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=14 ttl=116 time=16.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=15 ttl=116 time=41.9 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=16 ttl=116 time=18.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=17 ttl=116 time=14.1 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=18 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=19 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=20 ttl=116 time=14.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=21 ttl=116 time=16.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=22 ttl=116 time=14.8 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=23 ttl=116 time=16.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=24 ttl=116 time=15.1 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=25 ttl=116 time=14.8 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=26 ttl=116 time=15.7 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=27 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=28 ttl=116 time=15.2 ms
From 10.147.19.247 (10.147.19.247) icmp_seq=29 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=30 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=31 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=32 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=33 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=34 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=35 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=36 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=37 Destination Host Unreachable
^C
--- google.com ping statistics ---
39 packets transmitted, 28 received, +9 errors, 28.2051% packet loss, time 38274ms
rtt min/avg/max/mdev = 13.185/16.954/41.882/5.285 ms, pipe 4
root@CKLT:/home/wright# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         0.0.0.0         255.255.255.255 UH    0      0        0 ztrtauxf36
default         0.0.0.0         0.0.0.0         U     0      0        0 ztrtauxf36
default         192.168.68.1    0.0.0.0         UG    600    0        0 wlp2s0b1
10.147.19.0     0.0.0.0         255.255.255.0   U     0      0        0 ztrtauxf36
link-local      0.0.0.0         255.255.0.0     U     0      0        0 ztrtauxf36
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     0      0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp2s0b1
192.168.68.1    0.0.0.0         255.255.255.255 UH    0      0        0 wlp2s0b1
gateway.home    192.168.68.1    255.255.255.255 UGH   0      0        0 wlp2s0b1
root@CKLT:/home/wright#

Hello,
Which network manager(s) are you using in debian? ZeroTier won’t add a default route unless it exists in the network configuration and the client has “allow default” enabled.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.