{"id":41742,"date":"2020-02-15T11:08:28","date_gmt":"2020-02-15T08:08:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1"},"modified":"2026-05-21T16:37:40","modified_gmt":"2026-05-21T14:37:40","slug":"powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1","title":{"rendered":"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/485914\/\" rel=\"nofollow\"><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/2dd5268fe56b6097ed82527ceac50179.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><\/a><br \/>\nContinu\u00e2nd povestea despre ZeroTier, de la teoria expus\u0103 \u00een articolul \u201e<a href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/484178\/\" rel=\"nofollow\">Comutator Ethernet inteligent pentru planeta P\u0103m\u00e2nt<\/a>\u201d, trec la practic\u0103, \u00een care:<\/p>\n<ul>\n<li>Vom crea \u0219i configura un controler de re\u021bea privat<\/li>\n<li>Vom crea o re\u021bea virtual\u0103<\/li>\n<li>Vom configura \u0219i vom conecta nodurile<\/li>\n<li>Vom verifica conectivitatea re\u021belei \u00eentre ele<\/li>\n<li>Vom \u00eenchide accesul la GUI-ul controlerului de re\u021bea din exterior<\/li>\n<\/ul>\n<p><a rel=\"nofollow\" name=\"habracut\"><\/a><\/p>\n<h2>Controler de re\u021bea<\/h2>\n<p>A\u0219a cum s-a men\u021bionat anterior, pentru a crea re\u021bele virtuale, a le gestiona \u0219i a conecta noduri, utilizatorului \u00eei este necesar un controler de re\u021bea, interfa\u021ba grafic\u0103 (GUI) pentru acesta exist\u00e2nd \u00een dou\u0103 variante:<\/p>\n<p><b class=\"spoiler_title\">Op\u021biuni ZeroTier GUI<\/b><\/p>\n<ul>\n<li>Una de la dezvoltatorul ZeroTier, disponibil\u0103 ca o solu\u021bie cloud public\u0103, oferit\u0103 \u00een model SaaS, cu patru planuri de abonament, inclusiv unul gratuit, dar limitat \u00een num\u0103rul de dispozitive gestionate \u0219i nivelul de suport<\/li>\n<li>A doua \u2014 de la un dezvoltator independent, ceva simplificat\u0103 \u00een func\u021bionalitate, dar disponibil\u0103 ca o solu\u021bie open source privat\u0103, pentru utilizare on-premise sau pe resurse cloud.<\/li>\n<\/ul>\n<p>\u00cen practica mea, am folosit ambele \u0219i, \u00een cele din urm\u0103, m-am oprit pe a doua. Cauza fiind avertiz\u0103rile dezvoltatorului.<\/p>\n<p><i>\u201eControlerele de re\u021bea servesc ca centre de certificare pentru re\u021belele virtuale ZeroTier. Fi\u0219ierele care con\u021bin cheile secrete ale controlerului trebuie p\u0103strate cu stricte\u021be \u0219i arhivate \u00een siguran\u021b\u0103. Compromiterea lor permite atacatorilor neautoriza\u021bi s\u0103 creeze configura\u021bii frauduloase ale re\u021belelor, iar pierderea \u2014 conduce la pierderea capacit\u0103\u021bii de a controla \u0219i gestiona re\u021beaua, f\u0103c\u00e2nd-o practic inutilizabil\u0103.\u201d<\/i><\/p>\n<p>\u2192 <a href=\"https:\/\/www.zerotier.com\/manual\/#2_2_1\" rel=\"nofollow\">Link c\u0103tre documenta\u021bie<\/a><\/p>\n<p>\u0218i, de asemenea, semnele propriei paranoi\u0219i legate de securitate \ud83d\ude42<\/p>\n<ul>\n<li>Chiar dac\u0103 vine CheburNet \u2014 trebuie s\u0103 am acces la controlerul meu de re\u021bea;<\/li>\n<li>Controlerul de re\u021bea trebuie s\u0103 fie folosit doar de mine. Dac\u0103 este necesar, oferind acces persoanelor \u00een care am \u00eencredere;<\/li>\n<li>Trebuie s\u0103 existe posibilitatea de a restric\u021biona accesul la controlerul de re\u021bea din exterior.<\/li>\n<\/ul>\n<p>Nu v\u0103d sens \u00een a m\u0103 opri separat asupra modului de desf\u0103\u0219urare a controlerului de re\u021bea \u0219i a GUI-ului acestuia pe resurse fizice sau virtuale on-premise \u00een acest articol. \u0218i pentru asta sunt 3 motive:<\/p>\n<ul>\n<li>apare mai mult text dec\u00e2t planificam<\/li>\n<li>despre asta deja <a href=\"https:\/\/github.com\/key-networks\/ztncui\" rel=\"nofollow\">s-a vorbit<\/a> pe GitHub-ul dezvoltatorului GUI<\/li>\n<li>articolul are ca tem\u0103 altceva<\/li>\n<\/ul>\n<p>A\u0219adar, aleg\u00e2nd calea cu cea mai mic\u0103 rezisten\u021b\u0103, voi folosi \u00een aceast\u0103 nara\u021biune un controler de re\u021bea cu GUI bazat pe <a href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\">VDS<\/a>, creat <a href=\"https:\/\/ruvds.com\/ru-rub\/marketplace\/zerotier#advantages\" rel=\"nofollow\">dintr-un \u0219ablon<\/a>, generos dezvoltat de colegii mei de la ProHoster.<\/p>\n<h2>Configurare ini\u021bial\u0103<\/h2>\n<p>Dup\u0103 crearea <a href=\"https:\/\/prohoster.info\/ro\/server\/dts-los-angeles\/\">server<\/a> din \u0219ablonul specificat, utilizatorul poate accesa Web-GUI-ul controlerului prin browser, acces\u00e2nd adresa htt\u0440s:\/\/:3443<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/47a64c95797b49b874efe93eb2ff5183.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nImplicit <a href=\"https:\/\/prohoster.info\/ro\/server\/\">serverul<\/a> deja con\u021bine un certificat TLS\/SSL autofirmat pre-creat. Pentru mine, acest lucru este suficient, deoarece restric\u021bionez accesul la el din exterior. Pentru cei care doresc s\u0103 foloseasc\u0103 alte tipuri de certificate, exist\u0103 <a href=\"https:\/\/github.com\/key-networks\/ztncui\" rel=\"nofollow\">instruc\u021biuni de instalare<\/a> pe GitHub-ul dezvoltatorului GUI.<\/p>\n<p>La prima autentificare a utilizatorului \u00een sistem <b>Autentificare<\/b> cu numele de utilizator \u0219i parola implicite \u2014 <b>admin<\/b> \u0219i <b>parola<\/b>:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/491efbca93287738a237b163c0c26b20.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nAcesta propune s\u0103 schimbe parola implicit\u0103 cu una personalizat\u0103<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/f7e37af39ed01f0b7b864a0a78137307.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nFac pu\u021bin altfel \u2014 nu schimb parola utilizatorului existent, ci creez unul nou \u2014 <b>Creare utilizator<\/b>.<\/p>\n<p>Stabilesc numele noului utilizator \u2014 <b>Nume utilizator<\/b>:<br \/>\nStabilesc parola nou\u0103 \u2014 <b>Introduce\u021bi parola nou\u0103<\/b>:<br \/>\nConfirm parola nou\u0103 \u2014 <b>Reintroduce\u021bi parola<\/b>:<\/p>\n<p>Caracterele introduse sunt sensibile la majuscule \u2014 ave\u021bi grij\u0103!<\/p>\n<p>Culoarea de confirmare a schimb\u0103rii parolei la urm\u0103toarea autentificare \u2014 <b>Schimb\u0103 parola la urm\u0103toarea autentificare:<\/b> nu o bifez.<\/p>\n<p>Pentru a confirma datele introduse, apas pe <b>Seteaz\u0103 parola<\/b>:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/2796b7dfd681688b788c9e3aa2baca3d.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nApoi: m\u0103 deconectez \u2014 <b>Deconectare<\/b> \/ <b>Autentificare<\/b>, deja cu datele de autentificare ale noului utilizator:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/9c4da8f33bf06845ec6298b200630ad2.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nApoi, trec la tab-ul utilizatori \u2014 <b>Utilizatori<\/b> \u0219i \u0219terg utilizatorul <b>admin<\/b>, f\u0103c\u00e2nd clic pe pictograma co\u0219ului de gunoi aflat\u0103 la st\u00e2nga numelui s\u0103u.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/62caa16b4a1326875312cf7df7fc5778.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nUlterior, pentru a schimba parola utilizatorului, se poate face clic fie pe numele s\u0103u, fie pe setare parol\u0103.<\/p>\n<h2>Crearea unei re\u021bele virtuale<\/h2>\n<p>Pentru a crea o re\u021bea virtual\u0103, utilizatorul trebuie s\u0103 acceseze tab-ul <b>Adaug\u0103 re\u021bea<\/b>. Din punctul <b>Utilizator<\/b> acest lucru se poate face prin pagina <b>Acas\u0103<\/b> \u2014 pagina principal\u0103 a Web-GUI, pe care este afi\u0219at\u0103 adresa ZeroTier a acestui controler de re\u021bea \u0219i exist\u0103 un link c\u0103tre pagina cu lista re\u021belelor create prin acesta.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/6ef871af6aa26a4f31abb0f090843442.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nPe pagina <b>Adaug\u0103 re\u021bea<\/b> utilizatorul aloc\u0103 un nume re\u021belei pe care o creeaz\u0103.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/760ff4886272c5ed9c7ac6502c3d8786.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nAtunci c\u00e2nd datele introduse sunt aplicate \u2014 <b>Creeaz\u0103 re\u021bea<\/b> utilizatorul ajunge pe pagina cu lista re\u021belelor, unde sunt indicate:<\/p>\n<p><b>Numele re\u021belei<\/b> \u2014 numele re\u021belei sub form\u0103 de link, la care se poate accesa pentru a-l schimba<br \/>\n<b>ID re\u021bea<\/b> \u2014 identificatorul re\u021belei<br \/>\n<b>detaliu<\/b> \u2014 link c\u0103tre pagina cu detaliile re\u021belei<br \/>\n<b>configurare u\u0219oar\u0103<\/b> \u2014 link to the page for easy configuration<br \/>\n<b>members<\/b> \u2014 link to the node management page<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/fb7734caa8cd6793f19cb7ca1824f55d.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nFor further configuration, go to the link <b>configurare u\u0219oar\u0103<\/b>. On the opened page, the user sets the range of IPv4 addresses for the created network. This can be done automatically by clicking the button <b>Generate network address<\/b> or manually by entering the network mask in the corresponding field <b>CIDR<\/b>.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/2878034db9e121a30971a3e65a21ceed.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nUpon confirming successful data entry, you need to return to the network list page using the Back button. The main network configuration can be considered complete at this point.<\/p>\n<h2>Connecting network nodes<\/h2>\n<p><a rel=\"nofollow\" name=\"section1\"><\/a><\/p>\n<ol>\n<li><b>First, the user needs to install the ZeroTier One service on the node they want to connect to the network.<\/b><b class=\"spoiler_title\">What is ZeroTier One?<\/b><b>ZeroTier One<\/b> \u2014 a service running on laptops, desktop computers, servers, virtual machines, and containers that ensures connections to a virtual network through a virtual network port, similar to a VPN client. After installation and launching the service, you can connect to virtual networks using their 16-character addresses. Each network appears as a virtual network port in the system, behaving like a regular Ethernet port.<br \/>\nLinks to the distributions and installation commands can be found <a href=\"https:\/\/www.zerotier.com\/download\/\" rel=\"nofollow\">on the manufacturer's page<\/a>. You can manage the installed service via the command line (CLI) with admin\/root rights. In Windows\/MacOS also through a graphical interface. In Android\/iOS only via GUI.<\/li>\n<li><b>Checking the success of the service installation:<\/b>CLI:\n<pre><code class=\"plaintext\">zerotier-cli status<\/code><\/pre>\n<p>Rezultatul:<\/p>\n<p><code>200 info ebf416fac1 1.4.6 ONLINE<\/code><br \/>\nGUI:<\/p>\n<p>The mere fact of the application's operation and the presence of a line with Node ID with the address of the node.<\/li>\n<li><b>Connecting the node to the network:<\/b>CLI:\n<pre><code class=\"plaintext\">zerotier-cli join<\/code><\/pre>\n<p>Rezultatul:<\/p>\n<p><code>200 join OK<\/code><\/p>\n<p>GUI:<\/p>\n<p><b>Windows:<\/b> by right-clicking the icon <b>ZeroTier One<\/b> in the system tray and selecting the \u2014 <b>Join Network<\/b>.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/d0376a130e9516ae8371f817d4d3c226.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\n<b>MacOS:<\/b> Launch the application <b>ZeroTier One<\/b> in the bar menu, if not already running. Click on the \u23c1 icon and select <b>Join Network<\/b>.<\/p>\n<p>Android\/iOS: + (plus image) in the app<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/0d65dc87b6fce097f2ef9738da17a2c0.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nIn the field that appears, enter the one provided in the GUI of the network controller <b>ID re\u021bea<\/b>, and click <b>Join \/ Add Network<\/b>.<\/li>\n<li><b>Assigning an IP address to the node<\/b><br \/>\nNow we return to the network controller and on the network list page, go to the link <b>members<\/b>. If you see an image similar to this on the screen \u2014 it means your network controller has received a request to confirm connection to the network from the connecting node.<img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/c6589f1cc7b23c70bda7851101c7b012.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nOn this page, let's leave everything as it is for now and follow the link <b>IP assignment<\/b> mergem pe pagina destinat\u0103 adresei IP:<img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/fd99a0671533f10f8bd7dd5edfe122e9.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nDup\u0103 atribuirea adresei, ap\u0103s\u0103m pe butonul <b>Spate<\/b> ne \u00eentoarcem la pagina listei de noduri conectate \u0219i set\u0103m numele \u2014 <b>Numele membrului<\/b> \u0219i bif\u0103m c\u0103su\u021ba pentru autorizarea nodului \u00een re\u021bea \u2014 <b>Authorized<\/b>. Apropo, aceast\u0103 c\u0103su\u021b\u0103 este foarte convenabil\u0103 pentru deconectarea\/conectarea nodului de la re\u021bea ulterior.<img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/7d4cc765e8f86ede0e05ae0429ce77d5.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\nSalv\u0103m modific\u0103rile cu ajutorul butonului <b>Re\u00eemprosp\u0103tare<\/b>.<\/li>\n<li><b>Verificarea statusului conexiunii nodului la re\u021bea:<\/b><br \/>\nPentru a verifica statusul conexiunii pe nodul \u00een sine, execut\u0103m:<br \/>\nCLI:<\/p>\n<pre><code class=\"plaintext\">zerotier-cli listnetworks<\/code><\/pre>\n<p>Rezultatul:<\/p>\n<p><code>200 listnetworks<br \/>\n200 listnetworks 2da06088d9f863be My_1st_VLAN be:88:0c:cf:72:a1 OK PRIVATE ethernet_32774 10.10.10.2\/24<\/code><br \/>\nGUI:<\/p>\n<p>Statusul re\u021belei trebuie s\u0103 fie OK<\/p>\n<p>Pentru a conecta restul nodurilor, repet\u0103m opera\u021biile 1-5 pentru fiecare dintre ele.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<h2>Verificarea conectivit\u0103\u021bii nodurilor<\/h2>\n<p>Fac aceasta prin executarea comenzii <b>ping<\/b> pe dispozitivul conectat la re\u021bea, pe care momentan \u00eel administrez.<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/64523f3bac8886585356f90439ccef83.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><br \/>\n\u00cen captura de ecran a interfe\u021bei Web-GUI a controlerului, se pot vedea trei noduri conectate la re\u021bea:<\/p>\n<ol>\n<li><b>ZTNCUI \u2014 10.10.10.1<\/b> \u2014 controlerul meu de re\u021bea cu GUI \u2014 <a href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\">VDS<\/a> \u00eentr-unul dintre DC-urile ProHoster. Pentru func\u021bionarea normal\u0103, nu este necesar s\u0103-l adaug la re\u021bea, dar am f\u0103cut-o, deoarece doresc s\u0103 restric\u021bionez accesul la interfa\u021ba web din exterior. Am s\u0103 explic mai t\u00e2rziu.<\/li>\n<li><b>MyComp \u2014 10.10.10.2<\/b> \u2014 computerul meu de lucru \u2014 PC fizic<\/li>\n<li><b>Backup \u2014 10.10.10.3<\/b> \u2014 VDS \u00een alt DC.<\/li>\n<\/ol>\n<p>De aceea, de pe computerul meu de lucru, verific accesibilitatea celorlalte noduri cu comenzile:<\/p>\n<pre><code class=\"plaintext\">ping 10.10.10.1<\/code><\/pre>\n<p><code>Ping\u00e2nd 10.10.10.1 cu 32 de octe\u021bi de date:<br \/>\nR\u0103spuns de la 10.10.10.1: octe\u021bi=32 timp=14ms TTL=64<br \/>\nR\u0103spuns de la 10.10.10.1: octe\u021bi=32 timp=4ms TTL=64<br \/>\nR\u0103spuns de la 10.10.10.1: octe\u021bi=32 timp=7ms TTL=64<br \/>\nR\u0103spuns de la 10.10.10.1: octe\u021bi=32 timp=2ms TTL=64<\/code><\/p>\n<p>Statistici ping pentru 10.10.10.1:<br \/>\nPachete: Trimise = 4, Primite = 4, Pierdute = 0 (0% pierdere),<br \/>\nTimpuri aproximative de \u00eentoarcere \u00een milisecunde:<br \/>\nMinim = 2ms, Maxim = 14ms, Medie = 6ms<\/p>\n<pre><code class=\"plaintext\">ping 10.10.10.3<\/code><\/pre>\n<p><code>Ping 10.10.10.3 cu 32 de bi\u021bi de date:<br \/>\nR\u0103spuns de la 10.10.10.3: bytes=32 time=15ms TTL=64<br \/>\nR\u0103spuns de la 10.10.10.3: bytes=32 time=4ms TTL=64<br \/>\nR\u0103spuns de la 10.10.10.3: bytes=32 time=8ms TTL=64<br \/>\nR\u0103spuns de la 10.10.10.3: bytes=32 time=4ms TTL=64<\/code><\/p>\n<p>Statistici ping pentru 10.10.10.3:<br \/>\nPachete: Trimise = 4, Primite = 4, Pierdute = 0 (0% pierdere),<br \/>\nTimpuri aproximative de \u00eentoarcere \u00een milisecunde:<br \/>\nMinim = 4ms, Maxim = 15ms, Medie = 7ms<\/p>\n<p>Utilizatorul are dreptul s\u0103 utilizeze alte instrumente de verificare a accesibilit\u0103\u021bii nodurilor \u00een re\u021bea, at\u00e2t cele \u00eencorporate \u00een OS, c\u00e2t \u0219i instrumente precum NMAP, Advanced IP Scanner etc.<\/p>\n<h2>Restric\u021bion\u0103m accesul la GUI-ul controlerului de re\u021bea din exterior.<\/h2>\n<p>De fapt, pentru a reduce probabilitatea accesului neautorizat la VDS, pe care se afl\u0103 controlerul meu de re\u021bea, pot folosi un firewall \u00een cabinetul personal ProHoster. Aceast\u0103 tem\u0103 ar merita o articol separat. De aceea, aici voi ar\u0103ta cum s\u0103 asigur accesul la GUI-ul controlerului doar din re\u021beaua pe care am creat-o \u00een acest articol.<\/p>\n<p>Pentru aceasta, trebuie s\u0103 m\u0103 conectez prin SSH la VDS pe care se afl\u0103 controlerul, s\u0103 deschid fi\u0219ierul de configurare cu comanda:<\/p>\n<pre><code class=\"plaintext\">nano \/opt\/key-networks\/ztncui\/.env<\/code><\/pre>\n<p>\u00cen fi\u0219ierul deschis, dup\u0103 linia \u201eHTTPS_PORT=3443\u201d, care con\u021bine adresa portului pe care se deschide GUI, trebuie ad\u0103ugat\u0103 o linie suplimentar\u0103 cu adresa pe care va fi deschis GUI \u2013 \u00een cazul meu, aceasta este HTTPS_HOST=10.10.10.1.<\/p>\n<p>Apoi, voi salva fi\u0219ierul<\/p>\n<p><code>Ctrl+C<br \/>\nY<br \/>\nEnter\u00a0<\/code><\/p>\n<p>\u0219i voi execu\u021ba comanda:<\/p>\n<pre><code class=\"plaintext\">systemctl restart ztncui<\/code><\/pre>\n<p>\u0218i asta e tot, acum GUI-ul controlerului meu de re\u021bea este accesibil numai pentru nodurile re\u021belei 10.10.10.0\/24.<\/p>\n<h2>\u00cen concluzie<\/h2>\n<p>Aici vreau s\u0103 \u00eenchei prima parte a ghidului practic pentru crearea de re\u021bele virtuale bazate pe ZeroTier. A\u0219tept comentariile voastre.<\/p>\n<p>\u00centre timp, pentru a economisi timpul p\u00e2n\u0103 la publicarea urm\u0103toarei p\u0103r\u021bi, \u00een care voi explica cum s\u0103 combin\u0103m re\u021beaua virtual\u0103 cu cea fizic\u0103, cum s\u0103 organiz\u0103m modul \u201eroad warrior\u201d \u0219i c\u00e2teva alte lucruri, v\u0103 propun s\u0103 \u00eencerca\u021bi s\u0103 v\u0103 organiza\u021bi propria re\u021bea virtual\u0103 folosind un controler de re\u021bea privat cu GUI pe baza VDS din marketplace-ul de la <a href=\"https:\/\/prohoster.info\/ro\/vps\/abuzoustojchivye-vps\/\" rel=\"nofollow\">site<\/a> ProHoster. Mai ales c\u0103 to\u021bi clien\u021bii noi beneficiaz\u0103 de o perioad\u0103 de testare gratuit\u0103 \u2013 3 zile!<\/p>\n<p><b>P.S.<\/b> Da! Aproape uitasem! Pentru a \u0219terge un nod din re\u021bea, se poate folosi comanda din CLI a acestui nod.<\/p>\n<pre><code class=\"plaintext\">zerotier-cli leave<\/code><\/pre>\n<p><code>200 leave OK<\/code><\/p>\n<p>sau comanda Delete din GUI-ul clientului pe nod.<\/p>\n<p>-&gt; <a href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/484178\/\" rel=\"nofollow\"> Introducere. Partea teoretic\u0103. Switch Ethernet inteligent pentru planeta P\u0103m\u00e2nt<\/a><br \/>\n-&gt; <a href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/485914\/\" rel=\"nofollow\">Ghid practic pentru construirea re\u021belelor virtuale. Partea 1<\/a><br \/>\n-&gt; <a href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/485914\/\" rel=\"nofollow\"> Ghid practic pentru construirea re\u021belelor virtuale. Partea 2<\/a><\/p>\n<p><a href=\"https:\/\/ruvds.com\/ru-rub\/#order\" rel=\"nofollow\"><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/02\/fc1d4abf1f622ec115238a9ae76a9415.jpg\" alt=\"Creat de ZeroTier. Ghid practic pentru construirea re\u021belelor virtuale. Partea 1\" \/><\/a><\/p>\n<p>Sursa: <a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/485914\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0437 \u043e ZeroTier, \u043e\u0442 \u0442\u0435\u043e\u0440\u0438\u0438, \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u00ab\u0418\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440 \u0434\u043b\u044f \u043f\u043b\u0430\u043d\u0435\u0442\u044b \u0417\u0435\u043c\u043b\u044f\u00bb, \u043f\u0435\u0440\u0435\u0445\u043e\u0436\u0443 \u043a \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439: \u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0447\u0430\u0441\u0442\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043c \u043a \u043d\u0435\u0439 \u0443\u0437\u043b\u044b \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438 \u0417\u0430\u043a\u0440\u043e\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a GUI \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0438\u0437\u0432\u043d\u0435 \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u041a\u0430\u043a \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0440\u0430\u043d\u0435\u0435, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41743,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-41742","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Powered by ZeroTier. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-15T08:08:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-21T14:37:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Powered by ZeroTier. Ghid practic pentru construirea de re\u021bele virtuale. Partea 1 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Powered by ZeroTier. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/powered-by-zerotier-prakticheskoe-rukovodstvo-po-stroitelstvu-virtualnyh-setej-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-15T08:08:28+00:00","article:modified_time":"2026-05-21T14:37:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41742","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:11:43","updated":"2026-08-11 12:50:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/41742","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=41742"}],"version-history":[{"count":4,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/41742\/revisions"}],"predecessor-version":[{"id":181624,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/41742\/revisions\/181624"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/41743"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=41742"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=41742"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=41742"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}