Internet routing stops several seconds after starting zerotier on Debian 12

System is a Dell laptop with Debian 12. Using the wifi interface. I am able to access the internet just fine when zerotier is not running. The routing table before enabling zerotier is below, and a few pings to google.com to show that it works.:

root@CKLT:/home/wright# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.68.1    0.0.0.0         UG    0      0        0 wlp2s0b1
default         192.168.68.1    0.0.0.0         UG    600    0        0 wlp2s0b1
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     0      0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp2s0b1
192.168.68.1    0.0.0.0         255.255.255.255 UH    0      0        0 wlp2s0b1
gateway.home    192.168.68.1    255.255.255.255 UGH   0      0        0 wlp2s0b1
root@CKLT:/home/wright# ping google.com
PING google.com (142.250.217.206) 56(84) bytes of data.
64 bytes from mia07s61-in-f14.1e100.net (142.250.217.206): icmp_seq=1 ttl=116 time=16.4 ms
64 bytes from mia07s61-in-f14.1e100.net (142.250.217.206): icmp_seq=2 ttl=116 time=16.7 ms
64 bytes from mia07s61-in-f14.1e100.net (142.250.217.206): icmp_seq=3 ttl=116 time=27.6 ms
--- google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 16.423/20.229/27.574/5.194 ms

Now I activated zerotier and joined a network, and then immediately start a ping to google.com again. Note that the ping continues to work for a number of seconds and then stops. After stopping the failing ping, examining the routing table shows zerotier has installed itself as a default gateway for everything.

So the question is how to get it to stop doing that?

root@CKLT:/home/wright# zerotier-cli join XXXXXXXXXXXXXXX
200 join OK
root@CKLT:/home/wright# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.68.1    0.0.0.0         UG    0      0        0 wlp2s0b1
default         192.168.68.1    0.0.0.0         UG    600    0        0 wlp2s0b1
10.147.19.0     0.0.0.0         255.255.255.0   U     0      0        0 ztrtauxf36
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     0      0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp2s0b1
192.168.68.1    0.0.0.0         255.255.255.255 UH    0      0        0 wlp2s0b1
gateway.home    192.168.68.1    255.255.255.255 UGH   0      0        0 wlp2s0b1
root@CKLT:/home/wright# ping google.com
PING google.com (142.250.189.142) 56(84) bytes of data.
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=1 ttl=116 time=13.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=2 ttl=116 time=14.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=3 ttl=116 time=14.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=4 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=5 ttl=116 time=15.6 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=6 ttl=116 time=20.7 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=7 ttl=116 time=16.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=8 ttl=116 time=16.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=9 ttl=116 time=14.4 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=10 ttl=116 time=23.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=11 ttl=116 time=17.1 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=12 ttl=116 time=16.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=13 ttl=116 time=20.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=14 ttl=116 time=16.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=15 ttl=116 time=41.9 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=16 ttl=116 time=18.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=17 ttl=116 time=14.1 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=18 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=19 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=20 ttl=116 time=14.2 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=21 ttl=116 time=16.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=22 ttl=116 time=14.8 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=23 ttl=116 time=16.5 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=24 ttl=116 time=15.1 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=25 ttl=116 time=14.8 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=26 ttl=116 time=15.7 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=27 ttl=116 time=15.0 ms
64 bytes from mia09s26-in-f14.1e100.net (142.250.189.142): icmp_seq=28 ttl=116 time=15.2 ms
From 10.147.19.247 (10.147.19.247) icmp_seq=29 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=30 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=31 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=32 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=33 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=34 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=35 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=36 Destination Host Unreachable
From 10.147.19.247 (10.147.19.247) icmp_seq=37 Destination Host Unreachable
^C
--- google.com ping statistics ---
39 packets transmitted, 28 received, +9 errors, 28.2051% packet loss, time 38274ms
rtt min/avg/max/mdev = 13.185/16.954/41.882/5.285 ms, pipe 4
root@CKLT:/home/wright# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         0.0.0.0         255.255.255.255 UH    0      0        0 ztrtauxf36
default         0.0.0.0         0.0.0.0         U     0      0        0 ztrtauxf36
default         192.168.68.1    0.0.0.0         UG    600    0        0 wlp2s0b1
10.147.19.0     0.0.0.0         255.255.255.0   U     0      0        0 ztrtauxf36
link-local      0.0.0.0         255.255.0.0     U     0      0        0 ztrtauxf36
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     0      0        0 wlp2s0b1
192.168.68.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp2s0b1
192.168.68.1    0.0.0.0         255.255.255.255 UH    0      0        0 wlp2s0b1
gateway.home    192.168.68.1    255.255.255.255 UGH   0      0        0 wlp2s0b1
root@CKLT:/home/wright#

Hello,
Which network manager(s) are you using in debian? ZeroTier won’t add a default route unless it exists in the network configuration and the client has “allow default” enabled.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.