ZeroTier One

ZeroTier One is a software-defined networking platform that creates encrypted virtual overlay networks connecting devices, servers, and infrastructure across the internet without requiring specialized hardware.

How it works:

• Each device runs a lightweight software agent that generates a cryptographic identity for that node
• Devices join virtual networks using this cryptographic identity and are authenticated before being granted access
• Traffic between nodes is encrypted end-to-end
• Connections are established peer-to-peer wherever possible, with automatic NAT traversal
• Network policy is centrally defined and enforced locally by each node

Platform components:

• ZeroTier Central: A web-based management interface for creating networks, authorizing devices, defining routing and segmentation rules, and managing users and permissions
• Control Layer: Manages network membership, routing configuration, segmentation rules, and access policy; distributes control information to nodes
• Data Layer: The peer-to-peer overlay network that handles encrypted communication, NAT traversal, and adaptive path discovery
• Agents and Clients: Lightweight background services installed on each device that create a virtual network interface, establish peer connections, and enforce policy locally

Supported environments:

• Public cloud providers
• Private data centers
• On-premises environments
• Remote devices and edge/embedded systems
• Servers, desktops, mobile devices, and routers

The platform supports both Layer 2 Ethernet bridging and Layer 3 IP routing. Networks can be managed via a hosted controller (ZeroTier Central) or a self-hosted controller for organizations requiring full infrastructure control. A REST API is available for programmatic network management and automation integration.