search

zerotier / ZeroTierOne

A Smart Ethernet Switch for Earth
https://zerotier.com
Other
14.19k stars 1.65k forks source link

How to send unencrypted tunnelled traffic #802

Closed bodleytunes closed 6 years ago

bodleytunes commented 6 years ago

Hi,

I'm trying to use ZT in a strange situation for some unencrypted tunnels, similar I suppose to a GRE tunnel, I want this for maximum performance as its only for internet bound traffic sourced from a local TCP proxy server to a remote one (using MPTCP) so not bothered about encryption.

I thought I enabled trusted paths in the local.conf file but I can't see much if any improvement in speed so I'm dubious as to whether its still encrypting traffic or not. I may have not set it up correctly to stop encrypting?

Is there an easy way to see if its encrypting the traffic or not? I'm looking on wireshark at a capture of the udp 9993 traffic and I'm not seeing much in the way of clear text just data in what look like hashes so it might still be encrypting. image image

Then again most of the traffic at the time was probably made up of https sites so probably not the best test really as it would be encrypted at the app layer!

Any help would be appreciated!

Cheers, Jon.

adamierymenko commented 6 years ago

There's no way right now to disable encryption in this way. I'm closing this since eventually the existing TCP tunnel system is going to go away anyway. It's kind of 'slated for demolition' code in favor of native p2p TCP support alongside UDP.

taxilian commented 4 years ago

It would be nice if there was a way to create an unencrypted network; zerotier would be perfect for how some of the amateur radio mesh network systems work, but legally we can't use encryption on ham radio

laduke commented 4 years ago

@taxilian interesting...

see "trusted path" here https://github.com/zerotier/ZeroTierOne/tree/master/service https://www.zerotier.com/manual/#2_1_4 not 100% sure how that regulation interacts with zerotier though