I am using Zerotier as both a remote access VPN for my users as well as a site to site bridge between branches. Everything is working great, however I have a certain scenario that I would like to achieve, and I’m not sure if it’s possible.
For the setup:
I have one network for the site to site bridge that is using managed routes between my firewalls. Then, at the headquarters branch, I have another network that my end users are connected to which provides their remote access VPN, ADDS and DNS, and managed routes for the LAN and the services necessary to do their work.
The scenario in question is this: I have 2 VPS networked in an offsite datacenter halfway across the country that serves as a disaster recovery connection for ADDS, DNS, and filesharing, as well as a failover connection for the most crucial services we utilise. Most of these services are vendor provided through IPSec tunnels. I am wanting to set up failover routing so that if the headquarters branch is inop, the managed routes would failover to the DR site, instead.