ZeroTier provides a script that detects your OS, adds the correct GPG keys and repositories, and installs the package for you.<\/p>\n\n\n\n
# Install curl (if missing):\nsudo apt update && sudo apt install curl -y\n# Run the install script:\ncurl -s https:\/\/install.zerotier.com | sudo bash\n# Check Status:\nsudo zerotier-cli status\n# Enable on Boot:\nsudo systemctl enable zerotier-one<\/code><\/pre>\n\n\n\nDeorbit obsolete Moon Node<\/h2>\n\n\n\n
To check if your client is connected to a Moon node and to remove it (“de-orbit”), follow these steps.<\/p>\n\n\n\n
sudo zerotier-cli listpeers<\/code><\/pre>\n\n\n\nWhat to look for:<\/strong>
Scan the Role<\/strong> column in the output.<\/p>\n\n\n\n\n- PLANET: These are the official ZeroTier root servers.<\/li>\n\n\n\n
- LEAF: These are regular peers (other computers in your network).<\/li>\n\n\n\n
- MOON:\u00a0This is your Moon node.<\/strong><\/li>\n<\/ul>\n\n\n\n
# Run the deorbit command:\n# (Replace deadbeef00 with the 10-character ID you saw in the check step above)\nsudo zerotier-cli deorbit deadbeef00\n\n# Verify\n# (The Role for that ID should either disappear from the list entirely or change from MOON back to LEAF (if it is also a regular member of your network)\nsudo zerotier-cli listpeers<\/code><\/pre>\n\n\n\nSetting up Moon Node<\/h2>\n\n\n\n
Setting up a ZeroTier “Moon” node allows you to create your own user-defined root server. This helps reduce latency and adds redundancy if your connection to the official ZeroTier root servers is slow or unstable.<\/p>\n\n\n\n
Here is the step-by-step guide to setting up a Moon node on a Linux server.<\/p>\n\n\n\n
Prerequisites<\/h3>\n\n\n\n\n- A Linux server (Ubuntu, Debian, CentOS, etc.)<\/li>\n\n\n\n
- A\u00a0static IP address<\/strong>\u00a0(publicly accessible if your clients are over the internet; internal if strictly for LAN).<\/li>\n\n\n\n
- Port\u00a09993\/UDP<\/strong>\u00a0allowed through your server’s firewall.<\/li>\n<\/ul>\n\n\n\n
Firewall Rules<\/h3>\n\n\n\n
Ensure your cloud provider (AWS, DigitalOcean, etc.) and your OS firewall (ufw or iptables) allow traffic on UDP port 9993<\/strong>. If this port is blocked, clients will not be able to orbit the moon.<\/p>\n\n\n\nStep 1: Generate the Moon Configuration<\/h3>\n\n\n\n
SSH into your server and switch to the ZeroTier directory.<\/p>\n\n\n\n
1\u3001Navigate to the ZeroTier home directory:<\/strong><\/p>\n\n\n\n<\/ol>\n\n\n\ncd \/var\/lib\/zerotier-one<\/code><\/pre>\n\n\n\n2\u3001Generate the configuration file:<\/strong>
Use your node’s current identity to create a template JSON file.<\/p>\n\n\n\nsudo zerotier-idtool initmoon identity.public >> moon.json<\/code><\/pre>\n\n\n\nStep 2: Edit the Configuration<\/h3>\n\n\n\n
You must tell the Moon node what its own valid IP address is so other clients can find it.<\/p>\n\n\n\n
1\u3001Open\u00a0moon.json<\/strong>\u00a0with a text editor:<\/p>\n\n\n\nsudo vim moon.json<\/code><\/pre>\n\n\n\n2\u3001Find the\u00a0stableEndpoints\u00a0section.<\/strong>
It will likely look like\u00a0“stableEndpoints”: []. Change it to include your server’s IP address and the ZeroTier port (default is 9993).<\/p>\n\n\n\nExample: (Replace 203.0.113.10 with your server's actual static IP).\n\"roots\": [\n {\n \"identity\": \"YOUR_IDENTITY_STRING_HERE\",\n \"stableEndpoints\": [ \"203.0.113.10:9993\" ]\n }\n],<\/code><\/pre>\n\n\n\n3\u3001Save and exit<\/strong><\/p>\n\n\n\nStep 3: Sign and Create the Moon File<\/h3>\n\n\n\n
Now you need to cryptographically sign the configuration to create the actual .moon file.<\/p>\n\n\n\n
1\u3001Run the generation command:<\/strong><\/p>\n\n\n\nsudo zerotier-idtool genmoon moon.json<\/code><\/pre>\n\n\n\n2\u3001Identify the new file:<\/strong>
This will create a file named something like\u00a0000000deadbeef00.moon.<\/p>\n\n\n\nThe\u00a0deadbeef00\u00a0part (the last 10 characters) is your\u00a0Moon ID<\/strong>.<\/p>\n\n\n\nWrite this ID down<\/strong>, you will need it to connect clients.<\/p>\n\n\n\nStep 4: Install the Moon on the Server<\/h3>\n\n\n\n
For the server to act as a Moon, it must “install” this file into its own configuration folder.<\/p>\n\n\n\n
1\u3001Create the moons directory:<\/strong><\/p>\n\n\n\n<\/ol>\n\n\n\nsudo mkdir moons.d<\/code><\/pre>\n\n\n\n2\u3001Move the signed file:<\/strong><\/p>\n\n\n\nsudo mv 000000*.moon moons.d\/<\/code><\/pre>\n\n\n\n3\u3001Restart the ZeroTier service:<\/strong><\/p>\n\n\n\nsudo systemctl restart zerotier-one<\/code><\/pre>\n\n\n\nConnect Clients (Orbit)<\/h2>\n\n\n\n
To use this Moon node, your other devices (clients) need to “orbit” it.<\/p>\n\n\n\n
Run the following command on your client devices:<\/p>\n\n\n\n
sudo zerotier-cli orbit <Moon_ID> <Moon_ID><\/code><\/pre>\n\n\n\n\n- Note:<\/strong>\u00a0You usually type the ID twice. The first argument is the “World ID” (the moon), and the second is the “Root ID” (the specific server acting as the moon). In a single-server setup, these are identical.<\/li>\n\n\n\n
- Example:<\/strong>\u00a0If your file was\u00a0000000deadbeef00.moon, the ID is\u00a0deadbeef00.<\/li>\n<\/ul>\n\n\n\n
sudo zerotier-cli orbit deadbeef00 deadbeef00<\/code><\/pre>\n\n\n\nVerification<\/h3>\n\n\n\n
To verify that your client is using the Moon node:<\/p>\n\n\n\n
Run the list peers command:<\/p>\n\n\n\n
sudo zerotier-cli listpeers<\/code><\/pre>\n\n\n\nLook for your Moon’s ID in the list. Under the\u00a0“Role”<\/strong>\u00a0column, it should say\u00a0MOON\u00a0instead of\u00a0LEAF.<\/p>\n\n\n\n<\/p>\n","protected":false},"excerpt":{"rendered":"
ZeroTier Installation ZeroTier provides a script that detects your OS, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[36,24],"class_list":["post-250","post","type-post","status-publish","format-standard","hentry","category-tutotial","tag-moonnode","tag-zerotier"],"_links":{"self":[{"href":"https:\/\/haco.club\/index.php?rest_route=\/wp\/v2\/posts\/250","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/haco.club\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/haco.club\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/haco.club\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/haco.club\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=250"}],"version-history":[{"count":1,"href":"https:\/\/haco.club\/index.php?rest_route=\/wp\/v2\/posts\/250\/revisions"}],"predecessor-version":[{"id":251,"href":"https:\/\/haco.club\/index.php?rest_route=\/wp\/v2\/posts\/250\/revisions\/251"}],"wp:attachment":[{"href":"https:\/\/haco.club\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=250"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/haco.club\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=250"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/haco.club\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}