Open-source zero-trust networking platform that makes services invisible to unauthorized users, with identity-based access and end-to-end encryption.
- Stars
- 17,237
- Forks
- 1,992
- Open issues
- 419
- Last commit
- 2 months ago
What is it?
ZeroTier is a virtual Ethernet switch that lets networked devices, VMs, containers and applications communicate as if they were on the same physical network, regardless of where they actually run. It combines a cryptographically addressed peer-to-peer layer (VL1) with an Ethernet emulation layer (VL2) that is somewhat similar to VXLAN.
All traffic is encrypted end-to-end with keys that the user controls. Most connections go directly peer-to-peer, and relaying is available as a slower fallback for peers that cannot connect directly. The VL2 layer includes fine-grained access control rules for network micro-segmentation and security monitoring.
The repository contains the core node and service code in C++, with build instructions in build.md. Android and iOS apps are distributed through the Google Play and Apple app stores.
Key features
- 01Creates a virtual Ethernet network that spans devices, VMs and containers across locations.
- 02Encrypts all traffic end-to-end with user-controlled keys.
- 03Prefers direct peer-to-peer connections and falls back to relays when needed.
- 04Provides fine-grained access control rules for network micro-segmentation.
- 05Offers mobile apps for Android and iOS.
Use cases
- Connecting servers and cloud instances in different data centers into one private network.
- Letting remote developers reach internal services without exposing them publicly.
- Linking containers or VMs on separate hosts as if they shared a LAN.
- Securing peer-to-peer access between personal devices.
Quick start
- 1
Read the build instructions in build.md
- 2
Download and install ZeroTier from the official downloads page or documentation
Things to know
- Parts of the repository are non-free, source-available code under a separate license.
- The license is not a standard open-source license and is listed as NOASSERTION.
- Relay traffic for devices that cannot connect peer-to-peer is free but slow.
In collections
Topics
FAQ
- What is ZeroTierOne?
- A programmable virtual Ethernet switch that connects devices, VMs and containers into one encrypted private network over peer-to-peer links. ZeroTier is a virtual Ethernet switch that lets networked devices, VMs, containers and applications communicate as if they were on the same physical network, regardless of where they actually run. It combines a cryptographically addressed peer-to-peer layer (VL1) with an Ethernet emulation layer (VL2) that is somewhat similar to VXLAN.
- Is ZeroTierOne free to use? What license does it have?
- ZeroTierOne is open source under the Other license. Check the license terms before using it in commercial products.
- Is ZeroTierOne still maintained?
- Updated within 6 months. The last commit to ZeroTierOne was on Sep 3, 2026.
- What can I use ZeroTierOne for?
- Connecting servers and cloud instances in different data centers into one private network. Letting remote developers reach internal services without exposing them publicly. Linking containers or VMs on separate hosts as if they shared a LAN. Securing peer-to-peer access between personal devices.
- How do I install ZeroTierOne?
- Read the build instructions in build.md Download and install ZeroTier from the official downloads page or documentation
- Where can I get ZeroTierOne?
- The source code and installation instructions are on GitHub: https://github.com/zerotier/ZeroTierOne
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A self-hosted, open source implementation of the Tailscale control server for running your own WireGuard-based mesh network.
Docker-based web admin UI for installing and managing a WireGuard VPN server and its client configurations.
A decentralized mesh VPN written in Rust that connects devices into a virtual LAN with NAT traversal and WireGuard support.
Netmaker automates WireGuard-based virtual networks for mesh VPNs, site-to-site links, remote access and Kubernetes clusters.
Tailscale builds private WireGuard-based networks between your devices; this repo holds its tailscaled daemon and tailscale CLI.