We are trying to get zerotier working behind a Palo Alto firewall. However it seems like the way that Palo Alto firewalls handle NAT and STUN is incompatible with zerotier. It doesn’t allow a direct connection and tries to relay.
UDP is allowed and no security rules are blocking traffic.
Reading up on Palo Alto and NAT, it looks like playstation and xbox have the same issue with UPnP, STUN, and NAT.
Has anyone been able to get zerotier working behind Palo Alto?