Andrew Gault
So Hello, everyone! Thank you for joining us today for a look at what’s new and what’s next for ZeroTier One for Enterprise.
I’m Andrew Galt, CEO, here at ZeroTier. I joined last year and I work closely with our founder Adam. Every single day. My joining has really freed up Adam to focus on our roadmap and push forward a lot of what we’re going to show you today. And of course, some very exciting announcements. Later in the year
I’m joined today by Lennon and Angelo. Gentlemen, would you like to introduce yourselves.
Lennon Day-Reynolds
Sure. Hi! I’m Lennon Day-Reynolds. I head up solutions architecture here at ZeroTier. I joined a little over 2 years ago, and I’ve been working on the engineering team since then, so definitely been right in the middle of a lot of what you’re going to see today. And I’m really excited for both. Show it to you. And then, in the coming months, you know, maybe work hand in hand with a number of you to sort of adopt and explore all these new improvements. So, thanks.
Angelo Rodriguez
Hey, everyone Angelo Rodriguez. I’m the SVP of Global Operations. I’ve been with the company for a little over 2 years. Of course, work closely with Andrew and Lennon. I oversee areas like customer success technical support Channel partnerships. And I do a lot of work with our self-serve products and other areas of ZeroTier operations. But really, really excited to show you all the updates that we have for you today. So let’s jump in.
Andrew Gault
Great. Thank you both.
Okay, so quick run through the agenda. What we got lined up to talk about today. So first, a quick refresher on who we are, what ZeroTier does, and a short overview of how we do it. Then Angela will share some of the customer use cases we had front and center while developing our latest features. He’ll talk about new enterprise, great support options rolling out too.
Then Lennon will dive into the meat of the presentation. He’ll show off all the latest enterprise features, including a refreshed admin dashboard ui and the powerful new access control system, and after that they’ll give you a sneak. Peek at what? Come, what’s coming soon, including new device centric screens and some long requested infrastructure changes.
Next we’ll talk about ways you can get involved, whether that’s through our new partner program or future early access track, and we’ll save for the end some time to wrap up some Q&A.
So on housekeeping: This session is being recorded. We will send out a link afterward with some handy notes and links. You can rewatch it, you can share it with your team. I don’t think there’s any reason for any of you to be taking notes, as you’re watching along.
And, as I mentioned, we’ll save a bunch of time at the end for some Q. And A. We received a ton of great questions from you all during registration. If you didn’t send any yet, I believe you can also drop in a question during the webinar through zoom, I think it’s a Q&A button at the bottom of your screen.
Of course I can’t promise. We’ll get to all your questions. Live, but we will try and get back to everyone.
Okay, so let’s kick things off with a quick refresher on what ZeroTier is.
We spent a lot of time recently discussing internally exactly how to describe what we do.
Depending on who you ask, we’ll get lots of different solution names. It’s very use case dependent, we found. Anyway, we’ve been called a, “mesh network overlay,” a, “virtual ethernet switch,” a “VPN replacement,” or sometimes just “magic.” Lennon, Angelo: What are your favorite descriptions of what we do.
Lennon Day-Reynolds
I think I always come back to: “It’s an invisible, infinitely long network cable. You can just like, summon it out of thin air, plug it into your devices. It follows them along wherever they go, and suddenly they’re networked.”
Angelo Rodriguez
I think that’s a much cooler way to describe it, Lennon and I. I always kind of default to, “software defined networking solution.” To me, that’s kind of like a, it’s kind of like a catch all for all the things that ZeroTier does.
Andrew Gault
I’m with Lennon, and I prefer the giant magic switch in the sky. Anyway, whatever you call us, we are bringing next-generation connectivity and next-generation cybersecurity to businesses around the globe.
So when I get asked to explain ZeroTier, I always try and start with what I think is a personal example for who I’m talking to. I bet if everyone looks down at their desk, their phone is about 6 inches away from their desktop.
Of course, that is in the real world space and network space. They’re much further apart.
So I did a little experiment a couple of weeks ago in a coffee shop here in Portland, Oregon, which is on the west coast of the United States. If you’re further afield.
and to trace between my laptop and my phone was 13 hops routing through Idaho, Washington, Seattle, Washington State, and back down to Oregon. That was 4,000 miles and 22ms of distance between the phone and my laptop, which are 6 inches apart.
And if you think about that, that’s 13 potential man-in-the-middles, 13 systems that all need to be patched, updated, maintained correctly. 13 routes, of course, that could be misconfigured.
And obviously 4,000 miles of physical infrastructure. Right? That’s a lot of cable which someone could dig up either by accident or maliciously, which may matter, depending on your use case.
So when you add ZeroTier into the mix. All of that gets abstracted away. My phone and my laptop are connected. They’re one hop apart. It’s just like having to switch on my desk to Ethernet cables. ZeroTier doesn’t care if I move if I roam. If my phone switches, the telephone provider doesn’t care if I get on a plane, fly halfway around the world, they will always appear one hop apart on a local, safe, secure, local network.
And it’s super easy to reason about that. I think a lot of network engineers in particular, which was me 20 years ago. Love that’s so logically easy to reason about. And of course it collapses the attack surface area down to just the IP stack of the underlying operating system. So super easy connectivity, super robust, reliable connectivity. And then everything just gets so much more secure almost as a side effect.
Anyway, Lennon, can you walk us through a little deeper on how we make that magic work.
Lennon Day-Reynolds
Absolutely.
So really, at the core, ZeroTier manages and abstracts away networking complexity. So your team doesn’t have to. Our customers come to us with fragmented and complex networks that are fragile and difficult to maintain, or products and services they want to deploy across networks they don’t even have insight into. Yet we help them build networks, using ZeroTier One, that are simple, resilient, and secure.
It’s all based on direct, encrypted peer-to-peer connections, and builds an overlay network that works across other last mile providers and connection types.
It deployed firewalls, NAT gateways, and cloud VPCs. Any other infrastructure that might happen to be between your devices.
The entire thing is self-healing. It’s continuously finding working and optimized paths between all the devices on your network. So if a last mile last hop path changes or a link goes down, the ZeroTier agent will find an alternative. Reroute. Bring the connection back up automatically.
Setup’s really fast. You install one small software agent on each connected device, click, create, network and go. There’s no dedicated hardware, no port forwarding or firewall rules to manage, and no centralized cloud concentrator or API or provider that all your traffic has to route through everything’s end-to-end encrypted, and again passed directly between peers on the network.
Only the trusted peers you select are allowed onto the network, others simply get dropped.
All your devices have a unique, durable, cryptographic identity based on a key pair. And you build your network by simply picking the devices by ID. That you want to have included creates an instant virtual ethernet network containing all of them.
Your data stays entirely private. It doesn’t transit our servers or our cloud infrastructure providers.
We don’t have encryption keys for any of your traffic. We don’t see it. It’s all up to you.
And whether your devices are static, mobile, roaming between ISPs, you get the same robust connectivity, security, and control over how all of them are connected.
Angelo, you want to jump in.
Angelo Rodriguez
Sure, absolutely. Thank you.
Look, we’re not a niche tool or a point solution. We’re providing secure networking across a wide mix of industries, each with their own different needs and requirements. We’ve got customers in finance and healthcare and government that are deeply concerned about security and control.
We’re in hospitality and gaming and retail environments where speed and uptime are everything. We’re also powering IoT and edge deployments, you know, with zero touch giving MSPs and Telcos the tools and resources they need to scale fast without having to reinvent the wheel. That’s some of the value added that we bring to a lot of our customers, you know, all over the world. If you’re wondering whether ZeroTier can handle your edge, use case. The odds are we probably already are. And I can give you a couple of examples.
So let’s go over to the next slide. Thank you.
These are some common areas where you know customers use solutions like ZeroTier. But I’ll give you. I’ll give you 2 specific examples. The 1st one is a company called Metropolis Technologies. So Metropolis is a computer vision platform provider. They focus on providing a checkout free experience for parking garages all over the world.
The challenge they face really is deploying their edge equipment at parking garages and managing traffic across all of these sites across their cloud providers, but with networks or on networks that they don’t own and control.
And so with ZeroTier, they were able to build a virtual network that allows those edge devices to connect to their cloud services and other resources as if they were on the same physical network. The benefit is this, reducing their deployment time. So not only is there this kind of security element, but it reduces their deployment time from months to the same day. Implementation, if needed, so rapidly able to deploy, get instant insight into that equipment.
And to be able to scale really infinitely, planning to go from 5,000 plus devices and sites and scaling all over the world, so really excited to see what they’re doing and partnering with them. Of course, the second is, I’m sorry. Forest rock forest Rock is a software provider in the IoT space. They’re based out of the Uk
And they specialize in building management systems. The challenge they faced was providing secure remote access to things like energy meters and water meters, Hvac systems.
And those systems frequently reside again on networks they don’t own and control. And so they leverage IoT edge devices combined with ZeroTier to create secure remote access without the headaches and security risks of public static IPs. So this eliminates the need to have people on site to troubleshoot and significantly reduces deployment time.
So we can go through to the next one there. Dan and I want to talk a little bit about support, because this is an area we’ve been spending a lot of time and resources on all based on the support that we’re getting from all of you. We know that for our enterprise customers support is often just as important as the features of a platform.
And so that’s why, as part of ZeroTier One for Enterprise. We’re also introducing new support packages that include, you know, upcoming structured SLAs and expanded options for teams running critical infrastructure at scale.
We’re looking at, you know, 24×7 technical support with fast response, times documented service and operating SLAs, deployment guidance for regulated or air gapped environments which tend to be, you know, really complex, and require quite a bit of guidance and consulting from ZeroTier
Custom setup and central ui configuration options. And then, as I mentioned, your direct collaboration for complex rollouts and infrastructure planning
Lennon and his team, myself and many others at ZeroTier work directly with you and your teams to help you kind of navigate those complex needs. That again, infrastructure planning, custom tooling or even direct collaboration with our engineering team. We are tooled, and resource to make sure that you and your organization are set up for success. And so, with that, I’ll turn it over to Lennon and talk about some of our new enterprise features.
Lennon Day-Reynolds
Thanks, Angelo, very excited to get into this.
We’ve been a little bit quiet on the announcement front for a while, but that’s because we’ve really been head down, working closely with some of our top customers to understand kind of end-to-end needs, what problems they’re solving with ZeroTier, and how we can build solutions to match that ZeroTier as a piece of networking technology has been really capable. And a big part of a lot of our customers’ networking stories for a long time, but like the services and support that Angelo described, there’s a bigger picture, right? The tools need to be available to you in a way that really fits how your business is deploying ZeroTier. So a lot of the focus for these upcoming releases are in exactly that space. Two big ones. First and foremost, new, powerful ways to manage access to your ZeroTier deployments based on a core technology called ReBAC.
And across the board a streamlined, modernized, majorly improved user experience for the entire administration dashboard and control panel. So let’s talk a little bit about Rebac first.
So access control, pretty well established the field. But when you look at most tools, especially networking tools that are talking about user access, you tend to see a lot of systems built on a technology called RBAC — Role-based Access Control. And RBAC is simple and straightforward to implement. And the basic idea is, you take a user. In this case, our friend Wyle E. Coyote, who is a very capable network administrator, although a little bit prone to running off the rails at times. So we’ve given Wyle E. a network admin role.
Now, that’s a very broad and sweeping role. As you can see, we’ve had to enumerate a ton of discrete permissions. Those of you who have worked extensively with ZeroTier in the past have probably experienced this, just attaching a ton of granular access rules to individual user accounts.
Roles help a little bit, but only as much as you can make a small set of roles that describe all possible use cases in the real world. You end up with a proliferation of roles, each with fairly complex and overlapping access, and it can be hard to reason about and hard to restrict access to just what’s needed. So in this case, Wyle E., as a network admin, has access to all of these networks across all of these scopes. But in fact, all he really needs access to is a subset of them.
So that’s where ReBAC — Relationship-based Access Control — comes into play. Instead of defining a single global role for a user across the entire platform, you define a role in the context of a particular resource to be managed. So in this case, we know that Wyle E.’s job function really only requires him to access resources inside Domain 2, which contains Networks 3 and 4.
Networks 1 and 2 are part of a different business unit, a different project. Wyle E. doesn’t need access. But in a role-based system those are all the same kind of resource, and his role would grant access to each of them.
So ReBAC lets us say things like Wyle E. is an admin on Domain 2, implicitly. That means the networks contained within it are reachable and other resources that are needed, devices, organizational details, etc. That can work in both directions. So, the links between objects help define the policy for what each user can do.
So, it’s granular. It matches how real orgs actually work. And it scales without turning into a nightmare of fine-grained permissions and memberships and individual user assignments.
So with that, I’d love to do a quick demo walkthrough of some of these changes.
As I said, in addition to specific features. We’ve done a ton of work, top to bottom to make the whole user experience a lot cleaner and a lot more intuitive. So going to do a whirlwind view of a number of things here.
Be excited to go deeper into this with all of you in the coming weeks. As we get this closer to launch. But we’ll start with, you know. Just sort of the usual Sso login to the system. But as any of you who’ve used ZeroTier in the past can probably already tell. This is a dramatically different experience. The entire ux is cleaned up. Modernized navigation is more intuitive. The controls you need are right in front of you, and we’ve introduced some important new concepts like here, you see domains as a top level resource that helps you group together networks that have shared configuration, access control policies. Even IP address management and other services that can be attached.
So we’ll go into a single domain here, and you can see I have some settings that are now attached at the domain level, so those, again, can be managed independently, and some that are. We’ll get into the individual network.
Want to touch briefly on that access control. As I mentioned, we’ve implemented ReBAC from top to bottom. We’ve also added a flexible concept of teams which let you group users based on job function, geography, business unit, etc. When you are working to create a team, it’s really intuitive. Add whatever members you need from your group, assign a role. Again, the role is in the context of the organization. In this case, in other resources. We can attach this team more locally to a domain, to a network, etc.
So, now I have this new team of network admins and I can associate them with permissions in any of the other objects that I have deployed.
So, going back to the domain, you can see I have detailed access control at the domain level, and likewise in my particular network.
So again, top to bottom, shape your access and your configuration according to how you’ve actually deployed ZeroTier. And what your team needs to do the job that’s really at a high level kind of what’s happening in the front end in the upcoming enterprise release. I’m going to head back into the presentation, so we can give you a sneak peek of some of the changes that are coming a little further in the year.
So first, devices obviously are at the heart of everything that you do with ZeroTier. They are what you’re connecting. They’re where the resources and services you need live. And so part of the ZeroTier One for Enterprise update has been bringing devices front and center as something you can manage independently of their membership in any particular network.
So you can set metadata, see the connection, history and network memberships for each of those devices and attach policies and other useful configurations at the device level. So again, like domains, this lets you cut across individual networks and find more usable sort of reusable ways of managing your deployment.
So here you can see devices joined across networks, connection, history, network details, etc. And then we’ll move on and show. This also extends to provisioning and membership lifecycle. So lots more to come here. But the idea is, your devices are 1st front and center in ZeroTier. Yes, the networks are what stitch them together, but we want to make it as intuitive and safe and productive as possible, to manage those devices throughout their entire lifecycle.
Finally, the last piece of the sort of resilience and reliability pie infrastructure. So today the zero-tier control plane and infrastructure are deployed and scaled to support millions of active devices across the globe.
This works for every ZeroTier connected device and user.
Unfortunately, because it’s shared infrastructure across every user. In some cases a particular pool of devices or networks can consume more than their fair share, and that can degrade performance. Slow down, peer discovery, limit throughput on relay traffic just generally worsen the experience.
So for ZeroTier One for Enterprise, in our sort of upcoming releases, we’re going to be adding more and more dedicated infrastructure to each instance of ZeroTier One for Enterprise. So at the beginning, that’s network controllers, configuration data logs, all of the sort of application level data. But shortly thereafter, we’re going to be deploying, giving you the option to deploy, dedicated relays and discovery infrastructure so that you can place the ZeroTier network infrastructure that your connectivity depends on close to your users and workloads
That includes spanning geographic regions, cloud providers even extending to on-prem and air Gap deployments. Angelo mentioned that we’ve worked hand in hand with advanced and particular sort of deployments to allow fully air gapped and standalone environments. We’re bringing that as a turnkey offering as part of ZeroTier One for Enterprise. So whether you’re in a regulated industry, working in a region of the world with limited connectivity, or just have other reasons. You need to own your infrastructure. We’re going to give you that ability.
So these infrastructure offerings will also come with improved SLAs and availability guarantees because we can place and scale that infrastructure according to your specific needs. So none of your traffic, your data or your resources will be intermixed with anyone else’s, and we can scale and support it for your particular use case.
With that I’m going to pass it back to Angelo to talk a little bit more about how you can engage and get involved with ZeroTier.
Angelo Rodriguez
Awesome. Thanks, Lennon. So yeah, let’s talk about, you know, a few of the ways that you can get involved with us.
First, our new partner program. This is something that so many of you have been asking for. We’ve been hard at work on making this a reality. This is the 1st phase of our program. You may have seen our press release. So you know whether you’re a bar or an Msp. A router oem systems, Integrator or or any one of the many partners in a Channel ecosystem.
We now have a program that will help you to boost revenue to modernize your customers, networks to differentiate, differentiate your portfolio with a new solution that your customers may not have seen before, to set yourself apart from. You know many of your competitors.
And you know most importantly, to accelerate sales. Right? You have a solution that you can deploy in minutes, which means time to value time to revenue for you is rapidly accelerated. So we’re really excited to get this off the ground. We’re using a platform called PartnerStack to power the program, and getting started with us is quick and easy. I mean, it’s as simple as filling out a short application form on the site. You can see the site URL here at the bottom.
For those of you who have already reached out and expressed interest in our program, you’ll receive an invite from us to the program in the coming days. But once you’re approved, you’ll have the ability to refer business to ZeroTier via a customer affiliate link
where your customers can be pointed to ZeroTier through our self-serve products. This is really for your smaller opportunities that are able to go in and self-serve, but as they follow that affiliate link and join our program and sign up, for you know, either our essential or premium subscription. You’ll receive a commission from ZeroTier for driving that business to us.
Secondly, is deal registration. And so for a larger, more complex opportunity that requires a ZeroTier salesperson to engage on. You’ll have access to deal registration. We have training. We’re looking at co-marketing real support from a team that’s committed to helping you succeed. But that, you know, led to that deal. The registration process is deeply integrated with our CRM, and so you’ll have the ability to see each and every step of that sales journey all the way to close.
And so we’re excited to be able to share that with you. We’re excited to work with you and kind of lock arms on that program, and really to help drive ZeroTier engagement all over the world. So more to come, you’ll see more in a follow up email. But we’re very excited to roll this out to all of you. I’ll move over to the next which is our early access program. So
This is coming soon. But you’ll have the ability to apply using the link that you’ll see in a follow up email. You see, the URL here. But customers who are accepted will have early access to new releases. You can test in your environments and then provide direct feedback to our team. So again, there’s multiple ways to engage with us. Hopefully, you found all of this really exciting, as exciting as we did, and with that I’ll turn it over to Andrew.
Andrew Gault
I’m sorry, talking to my mute button there.
Thank you, Angelo, and thank you, Lennon, for the demo. I’m also very excited about that. That partnership opportunities for everyone.
So, as mentioned, we’ve reserved some time to wrap up with a Q&A, if you have any question you haven’t already asked. I think you can still submit using that Q&A button at the bottom of the zoom screen.
And if you are comfortable doing so, please do include your name, title, industry, contact details. We love speaking directly to customers. It’s how we learn which features to build. Next, it’s like, I think you’ve heard there are so many amazing use cases for ZeroTier. It’s almost, you know, there’s an abundance of use cases, and we love to hear about your specific one, and exactly how we can help you.
So anyway, we’ve got some great questions during registration. We won’t be able to answer. All of them live, of course, but if we don’t get to your question today, we will try and get back to everyone in due course.
Okay, so I’ll actually kick it off with the 1st question which I get asked all the time by customers, why did this take so long? So a lot of this work has been happening behind the scenes for well over a year. We built an entirely new front end Ux team, and we’ve completely rebuilt central from the foundations up right. It was central, was created many years ago, with an eye to much smaller deployments, I think, than we’re frequently seeing now with our customers, and I’ve as ZeroTier has grown as a company, and our customer base has expanded. It was time to get a new foundation, get it right? So that we could start delivering new features that will build and scale for the next 10 years along with our roadmap.
So that meant rethinking how customers use ZeroTier day-to-day, how access control actually works when you’ve large enterprise teams of, you know, a hundred people, how device management could work when you’ve tens of thousands of devices, and how the UI should work across super complicated deployments. Right?
We’re all expert network engineers, but we still have information overload. Right? We’ve got to be able to jump down into a domain and focus on the project at hand.
So I think this upcoming mid July release will really set us up to move much faster from here, and you should expect a regular cadence of releases from ZeroTier going forward.
Okay, next.
Our first real question, from an MSP: When will I be able to use reback to manage my downstream customers. Sounds like one for you, Angelo.
Angelo Rodriguez
Happy to take it before I answer that one. I did see a note that a few people were having a hard time getting to the partnership page. If you just add the Www. Prefix. That will solve your problem. So don’t forget the “www,” prefix, and you should be good to go to get to that page so hopefully that resolves some of those issues.
But to the question about you know, being able to use reback to manage downstream customers. This is one that we’ve been hearing all the time. It’s on our roadmap targeting a late summer release, following the release of ZeroTier One for Enterprise. The work that we’ve done for our ux on our ux and around reback that Lennon shared earlier that really lays the foundation for us to better support service providers. And so that’s really where we’re going with this.
Andrew Gault
Okay, someone here is asking. They say we have an air gapped ZeroTier, one environment to support devices in parts of the world with limited access to the rest of the Internet.
That’s worked very well for desktop and server devices, but not mobile. Will this help our mobile users?
That’s definitely one for you, Lennon.
Lennon Day-Reynolds
Yeah. So good news, we actually have a mobile release coming in the next few weeks that will support full air gap deployments. So the classic sort of approach and framing for this with ZeroTier, has used something we call moons deep sort of technical details about that. But we have this global infrastructure for peer discovery. Moons are a way of running a federated bit of that inside your own data center or network or infrastructure you control.
It’s actually part of what we’re leveraging for the ZeroTier enterprise offering. But in the meantime we do have customers who are running their own sort of self managed infrastructure. And, yes, the inability to support mobile clients on those networks has been a strong wish from them for a long time. So we are delivering that in the next point release of the mobile clients. Look for that in both the Google Play and Apple App Stores very soon.
That will also be followed as we roll out ZeroTier One for Enterprise, with its dedicated infrastructure, with full support and parity on mobile clients. For all the other features, like client SSO, with multi-factor authentication and remote configuration, loading, and all the other things you need to attach your clients to your dedicated ZeroTier One for Enterprise environment so stay tuned on that. But we know mobile is important, and we’re going to be working in lockstep to keep feature support for all of the new capabilities that we’re rolling out available in mobile apps as we go. So great question.
Andrew Gault
Next, we’ve got a question from an admin at an energy management company. They’re asking: What’s the typical onboarding time for a new site or device? That’s for you, Lennon.
Lennon Day-Reynolds
Yeah, that’s another great question. So again, good news time to deploy is one of the big sort of advantages and wins that we hear about from customers all the time with ZeroTier. So people use us to connect sites where they have no control over the edge network, or it’s unreliable. They’re not sure what mode of connectivity they’re going to be on. They can’t even physically access the site in order to wire up connectivity. So by installing ZeroTier on either an embedded router or the edge device being deployed itself, you can take that setup time from weeks of troubleshooting local network conditions to minutes, adding the device in the central control panel. And since ZeroTier can also run on pretty resource constrained devices like portable LTE and 5G hotspots. You can actually bring zero-tier directly at that local network level, and your devices don’t even need to know that it’s in the mix, you get the same transparent, secure connectivity without doing anything on the individual edge device being deployed.
So yes, please do check out our metropolis case study. If you want more details on a particular shape of that kind of deployment. But we’d be happy to work with you to get your time to deploy like, I said, down to minutes or hours, instead of weeks or months, and it’s a consistent strength of the platform.
Andrew Gault
Okay, I’ve got a great live question. Actually, it’s just come in: Will there be a partner portal? And what will that look like? I think, Angelo, you can speak to that.
Angelo Rodriguez
For sure. Happy to. Yes, there will be a partner portal. So on. When I was going through the partner program I mentioned partner Stack. That is the platform that we’re leveraging for our partner portals. What that will look like is, once you are accepted as a partner, you will have access to log into the PartnerStack portal. You’ll have things like, you know, resources, decks, marketing, collateral. You’ll also, most importantly be able to see all of the customers that you have, that you drive to ZeroTier, you’ll be able to see where kind of in the pipeline they are, and when those customers are closed or they transact through our self serve, you’ll be able to track exactly how much business you’re driving and how much you’re receiving in in commission. So it’s a very robust platform. We chose them for that reason, and you’ll have full access once you’re admitted into the program.
Andrew Gault
Okay. And then in a similar vein. Here’s another live question as an MSP. Will I be able to manage all of my clients, 0 to your deployments from a single admin portal?
I think that might be one actually for you, Lennon.
Lennon Day-Reynolds
Yeah. Short answer, yes, that’s the entire goal. So because of both the access control model and some of the new organizational tools, we provided like domains
Yes, you should be able to map your actual real world deployment, including your client relationships onto your ZeroTier configuration and manage the whole thing in one place, another capability which we didn’t even showcase in the demo. But that we are building out is making organizations. The top level unit of grouping a user, manageable feature as well. So an instance of ZeroTier One for Enterprise will be able to support multiple logical organizations coexisting within it. So you have one business relationship with ZeroTier and as many downstream relationships with your customers, business units, etc, as you need to represent the structure of your organization and your deployment. So yes, that is absolutely our goal. We think the features that we’re delivering will go a long way to helping with that. And we really do want to partner with
MSPS and other sort of platform and service vendors to make sure that what we’re delivering does match those needs. But, yeah. Short answer: I think I think this will go a long way to making that just out of the box. Great experience.
Andrew Gault
Thank you. I’ve just got one in here. Someone’s asking about the apps for Ios and Android. And when will they get a newly designed UI, so I think maybe I can answer that one.
And it’s coming. It’s on the roadmap we’re really showing off here. Our next release, which, like, I said, is mid July. But this is the beginning of a new cadence and a new rhythm from ZeroTier, and you should expect consistent releases. And of course we’re aware that the iOS and Android apps need some love. Their UIs in particular need some love, and so we’ll look, you know, look forward to adding that to a future roadmap.
Okay, I’m going to jump to this one: Lennon, how easy is it to train a team on how to use ZeroTier?
Lennon Day-Reynolds
Well, there are kind of two answers to that. One, is that networking is complicated. ZeroTier makes it easier. We certainly remove a lot of the layers of configuration and configuration conflicts and sort of messy nested connectivity. But you know, at the end of the day some basic sort of understanding of networking fundamentals is still useful.
That being said, if you have that, if you have a team that’s able to wrangle the usual 192.168 sort of local network configuration. ZeroTier should not require a lot more deep domain knowledge or specialized sort of training than you already have. Devices are devices. Networks are virtual and software-based.
There’s no physical connections or troubleshooting to be done, no complex asset management and figuring out which rack and port something is connected to. So we think, combined with the upgraded Ui that we’re offering in the ZeroTier enterprise update.
It really should be fast and easy for your team with just the most basic IT and networking experience to get up and running with ZeroTier. And now have global reach for your connectivity instead of your home, office or or region, so.
Andrew Gault
Okay. And then a question from a financial services firm: Does ZeroTier support compliance-heavy environments or regulated industries? Angelo, can you talk to that?
Angelo Rodriguez
Sure. Yeah, I mean, we work with a lot of teams in highly regulated industries. I showed, you know, a few of those previously. We are SOC2 certified. We offer formal support agreements to help with setup and tools that are built with security in mind. Like Len mentioned. We’re also working on turnkey options for running fully isolated environments. So stay tuned for more on that.
Andrew Gault
Okay, well, thank you very much, everyone. I think we’re at time, here. So I’d love to thank Lennon and Angelo for a great presentation. Lennon, in particular, that was a great demo there. I think it’s very exciting for us all to see. Thank you, of course, to the ZeroTier team, which I hope some of you are watching. It’s been a long time coming. It’s been well over a year’s work, and it’s great to show off everything you’ve been doing to our users, and of course, thank you to our customers for joining today.
As mentioned, you can look forward to much more frequent things like this, and much more frequent updates as they come. And thank you so much for using ZeroTier. Bye.
Let’s answer some of the questions we didn’t get to live.
We know compliance is cricital for many of our customers in regulated industries. We will continue to assess current and upcoming regulations and let you know when we decide to add more certifications.
Each user will have visibility into just the resouces to which they’re granted access. So for users managing a single network or domain, only other users at the same scope should be visible.
Root and planet file handling is being reworked to support the full ZTE feature set. The first changes will be available in early summer, and future enhancements will track their ZTE backend support.
We’re always trying to optimize performance and reliability under varying network conditions. If you have specific cases where reconnection or route changes cause slowdowns, please reach out to our support team so we can help investigate!
We’re underway with our next full-generation platform update, which will include the features showcased at the webinar. This will be released in Rust.
This is the update described during the ZeroTier One for Enterprise webinar.
There are mechanisms today using our client OIDC support to add more authentication factors when authorizing devices. We’re also focused on improving the full device lifecycle (including authorization) as part of the ZTE roadmap after launch.
We have no new changes to announce at present, but we anticpate working with the existing list of requests as well as with customer and community input to gather further feedback for enhancements. This may take the form of a live Q&A session. Stay tuned!
We agree that DNS management at the Domain level makes sense. You can expect to see improved support for both automatic ZeroTier-managed DNS and custom external DNS settings following this update.
As we roll out more device lifecycle features, we’ll also be adding capabilies to all the clients to better integrate them with Central, including better network membership, performance, and configuration.
Yes, we will support the full feature set of CV2 via public API after launch. There will be changes compared to the V1 API, so stay tuned for updated docs, client libraries, and example code.
First-class support for orgs and the granular access control offered by ReBAC are both designed to provide separation between client deployments within a single logical ZTE environment.
There are no direct plans at this time. However, we are just in the early phases of our Partner Program and will be assessing new commercial, hardware, and software partners, so this may change.
We currently do not have plans for expanded support for pfsense on the roadmap. However, with our expanded Partner Program we are working with 3rd party companies on integrations, and we expect to be better positioned for community engagement for additional platform and integration support.
We currently do not have plans for expanded support for TrueNAS on the roadmap. However, with our expanded Partner Program, we are working with third-party companies on integrations, and we expect to be better positioned for community engagement through additional platform and integration support.
Yes, we plan to fully integrate enterprise directory and asset management systems with ZTE after our summer launch.
We actually collaborate with MicroTik to support their RouterOS package for ZeroTierOne. We’ll continue to work with them to ensure the latest features are available on their platform, but can’t speak to their roadmap or release plans.
Not at this time. We are always looking at future features including in this area.
We periodically reivew expansion of our planet server footprint, but in terms of location and server configurations. We have nothing new to announce at this time.
No, there are no plans currently to change the way mobile clients operate. Expect more news on mobile clients later in the year.
Early summer, in advance of the ZeroTier One for Enterprise features launch.
Yes, we will have a Partner Portal. Stay tuned for further details.
Yes! This will be part of our next major release of the ZT1 client. Also, stay tuned for more big news about ZeroTier performance later this year.
We do not enforce any bandwidth limits on traffic between ZeroTier peers. However, since each ZeroTier network appears as a virtual network interface, you can use any number of host-level traffic shaping or QoS tools to manage available bandwidth across your networks and services.
Today we are only supporting USD, but we will be adding additional currencies in the future.
Yes, we will unveil new enterprise pricing for advanced features.
ZeroTierOne network configurations are cryptographically signed by the network controller, and rotated regularly. In the case of a bad actor gaining elevated access to a controller, they could change basic network configuration (IP assignments, routes, etc.) but not affect other changes on the client.
In addition, the isolated infrastructure model that will be supported by ZTE reduces the surface area for attacks against the control plane, so a compromise in one environment doesn’t allow for easy lateral movement into another.
Every organization’s security needs are different, but if your threat model includes protection against network changes made in the ZeroTier-hosted control plane, you can and should apply additional controls — host firewalls, mTLS, endpoint logging, etc. — to mitigate that risk.
The mobile apps will be getting a UI refresh
It will available for all tiers, but immediately with select commercial partners.
We’ll be expanding visibility and remote management capabilities for ZeroTier One clients as part of the device management updates coming later in the year. Stay tuned!
Yes, this new set of feature releases represents the next generation of the ZeroTier platform. We have a lot more to come.
©
2025
ZeroTier, Inc. All rights reserved.