Hello,
For several years now, the ZeroTier GUI has been missing two important switches: allowDNS and allowDefault (the latter is set to 0 by default). The only way to change these settings is through SSH, and you must also create a boot script to keep the changes persistent after reboot. In addition, firmware updates overwrite any modifications you make.
Is there any chance that these settings will be exposed in the GUI?
These 2 switches default to 0 (disabled) and did not affect the routing function of Zerotier.
Why do you need to enable these 2 switches?
allowDefault
With default 0: Only traffic to zerotier nodes/lan segments is sent through the ZeroTier interface. All other traffic, including general Internet access, continues to use your local router or whatever is already configured as the default gateway.
With 1: ZeroTier become an exit node for all traffic that would otherwise go out the local router. This means any packet that doesn’t match a more specific route will be forwarded through the ZeroTier interface.
I use this specific configuration to avoid using VPN and ZeroTier at the same time (not all ZeroTier nodes are available via VPN)
allowDNS
With 1: Lets ZeroTier clients automatically use DNS servers advertised by the ZeroTier network, as i have one DNS server configured with all custom DNS records.
For the current GL firmware, these two functions require development to support.
Is there an exit node in your Zerotier network, and do you want all traffic of GL router to go to the exit node?
Yes, currently i use my second gl router as exit node. By now, on travel router i use manual script to force all traffic to zerotier.
#!/bin/sh /etc/rc.common
START=99
start() {
echo “Enabling ZeroTier…”
zerotier-cli set <ZT_NETWORK> allowDefault=1 allowDNS=1
}
stop() {
echo “Stopping ZeroTier…”
\# Add any stop logic if needed
}
reload() {
stop
start
}
restart() {
reload
}
boot() {
start
}
shutdown() {
stop
}
Thanks for sharing, that's pretty cool!
I think this script will be a great help to users who need a Zerotier exit node.