For minimal operation, outbound UDP on port 9993 (and reply packets) should be allowed to ZeroTIer's root servers. Allowing other UDP is ideal since it allows peer to peer connectivity, but these IPs on 9993 are the minimal requirement for ZeroTier to work:
| Code Block |
|---|
root-amslax-01.zerotier.com has address 195104.181194.1738.159134 root-amslax-01.zerotier.com has IPv6 address 2a02:6ea0:c024::2605:9880:200:1200:30:571:e34:51 root-seamia-01.zerotier.com has address 50103.7195.73103.3466 root-seamia-01.zerotier.com has IPv6 address 2001:49f0:d002:6::22605:9880:400:c3:254:f2bc:a1f7:19 root-miasgp-01.zerotier.com has address 10350.1957.103252.66138 root-miasgp-01.zerotier.com has IPv6 address 26052001:988049f0:400d0db:c3:2542:f2bc:a1f7:192 root-sgpzrh-01.zerotier.com has address 5084.717.25253.138155 root-sgpzrh-01.zerotier.com has IPv6 address 20012a02:49f06ea0:d0db:2d405::29993 root-alice-sfo-01.zerotier.com has address 107.170.197.14 root-alice-sfo-01.zerotier.com has IPv6 address 2604:a880:1:20::200:e001 |
...