nuestra puntuaciónsin valoraciones de usuarios - valore →
Análisis de ZeroTier
Una red troncal, no una VPN de anonimato; y la categoría honesta que le corresponde es «sucesor de Hamachi con conciencia empresarial de SDN». ZeroTier conecta TUS dispositivos en redes virtuales planas de Capa 2 (o Capa 3 enrutada) con cifrado de extremo a extremo, funciona tras CGNAT, y su nivel gratuito Personal sigue siendo gratuito. Las preguntas sobre confianza tienen la misma naturaleza que en Tailscale, pero respuestas distintas: los cuatro servidores raíz planetarios son operados por ZeroTier Inc. y ven las identidades de los pares y los metadatos de IP (la carga útil está cifrada de extremo a extremo y los servidores raíz solo retransmiten texto cifrado), el controlador alojado es cerrado, y la investigación de Pulse Security de 2021 mostró que la confianza en los servidores raíz es una superficie de ataque real, corregida responsablemente, pero instructiva. La historia de 2025 es comercial: un nuevo CEO, una ronda Serie A de 13,5 millones de dólares, el nivel gratuito reducido a 10 dispositivos y 1 red, Essential aumentado a 18 dólares mensuales con 2 dólares por dispositivo adicional, y el código del controlador trasladado a un directorio de código disponible pero no libre, con restricciones para uso comercial. La comunidad de homelab que construyó la reputación de ZeroTier está migrando visiblemente hacia Tailscale, NetBird y Nebula; la tecnología (puente verdadero en L2, tráfico no IP, moons) sigue siendo genuinamente diferencial. La auditoría completa del código prometida por Trail of Bits «tras la versión 2.0» nunca apareció; la propia ZeroTier 2.0 sigue siendo efectivamente vapor en la versión principal del producto.
AuditoríaCódigo abierto4 señales de alertaHechos verified - operator pages (pricing + machine-readable pricing.md, platform, about, Terms of Service, privacy policy, docs security/protocol/controller pages, GitHub README plus all three license files, status.zerotier.com), Wikipedia, Pulse2 press, the Trail of Bits audit PDF, the Pulse Security 2021 advisory, an academic mesh-VPN performance thesis PDF, VPNSmith and OpenSourceForU editorial, and the arctic-shift + HN Algolia community archives were all fetched live by this site on 2026-11-03; arctic-shift body-search on r/selfhosted and r/VPN returned 422 and 429 (the known rate-limit failure mode), so community voices come from r/zerotier thread fetches and HN Algolia instead; businesswire.com returned 403 and the Series A facts are cited from Pulse2 and Wikipedia
September 2021 Pulse Security disclosure: root servers accepted unverified public keys and silently overwrote existing identities, and clients implicitly trusted WHOIS-learned identities - chained into certificate harvesting and packet injection into private networks. Root fix landed within one day of the report, collision detection and client 1.6.6 followed within days; the researcher estimated a funded attacker could enumerate the full 40-bit address space in about a year with roughly NZD 500k of GPUs
Post-investment pricing squeeze: $13.5M Series A and new CEO Andrew Gault (July 2024) were followed by successive price increases the community read as investor-driven ('enshittification of yet another service', November 2025 r/zerotier)
License churn: the repository now splits MPL-2.0 agent code from a nonfree source-available controller (2025 license text), narrowing what 'open source' means here without a clean public migration story on the fetched pages
+1 señales de alerta más - desplegar antes de registrarse
Legacy Central outages reported in October 2026 by r/zerotier users ('devices are going down very often') during the forced migration to the new Central platform
Análisis
Borrador de Qwen3, verificado por la redacción de serviciovpn · Versión del análisis 3 · Texto actualizado 2026-11-03 · Hechos a fecha de 2026-11-03 · cómo verificamos
Nota de honestidad: no hemos hecho tests propios de ZeroTier (fugas, velocidad, kill switch). Todo en esta página es metainvestigación basada en fuentes con enlaces fechados. En cuanto hagamos pruebas, los resultados aparecerán aquí y en el registro de cambios.
Overview
ZeroTier homepage - live capture 2026-09-29
ZeroTier is a self-hostable peer-to-peer virtual network fabric, not a consumer anonymity VPN. It creates flat Layer 2 or routed Layer 3 networks across your devices using end-to-end encryption, ideal for LAN gaming, homelab access behind CGNAT, or bridging non-IP traffic. Run by ZeroTier, Inc. in the U.S. (a Five Eyes country), it relies on four hosted root servers and a closed-source network controller. The free tier remains usable for small personal setups, but trust is centralized in the operator.
Logging & privacy
ZeroTier claims it collects minimal metadata - IP addresses of network members and admin access logs - but cannot see payload content due to end-to-end encryption. This claim is policy-only, with no independent audit or court test verifying it. The 2020 Trail of Bits audit reviewed only the cryptographic design, not actual logging practices. The 2021 Pulse Security disclosure revealed root servers could be exploited to overwrite identities and inject traffic, confirming the root layer as a real attack surface. No warrant canary exists, and while SOC 2 Type II is claimed, the report is gated. You must trust ZeroTier Inc. with peer metadata.
Pricing & the renewal trap
ZeroTier pricing page - live capture 2026-09-29
Pricing starts at $18/month for the Essential plan (10 devices, then $2.00 per extra device), with no introductory discount. The renewal rate is identical at $18/month, making the renewal ratio 1 - no hidden jump, but also no savings for long-term commitment. There is no refund window (0 days), and all payments are non-refundable per the ToS. The free Personal tier allows 10 devices and 1 network for non-commercial use. The derived three-year cash total is not computable due to lack of multi-year billing, but monthly payments continue indefinitely.
Features & performance
ZeroTier apps / download page - live capture 2026-09-29
ZeroTier uses its proprietary VL1/VL2 protocol with Curve25519, Ed25519, and Salsa20/Poly1305, offering true Layer 2 bridging, multicast, and broadcast - rare in mesh VPNs. It supports split tunneling and works on Windows, Mac, Linux, Android, iOS, and routers. No kill switch, multihop, or obfuscation is available. P2P is core to its design, with fallback relaying. Server and country counts are irrelevant - it’s a peer-to-peer system. Streaming geo-unblocking is not supported. No performance tests have been run by this site; real-world reliability reports vary, with some users citing instability on cellular networks or during Central migrations.
Ownership & track record
ZeroTier, Inc. is based in San Francisco, with no parent company disclosed. Founded in 2013 by Adam Ierymenko, it transitioned to CEO Andrew Gault after a $13.5M Series A in 2024. The 2025 pricing overhaul - cutting the free tier and raising costs - sparked community backlash, with users migrating to Tailscale, NetBird, and Nebula. Red flags include the 2021 root-server vulnerability, license changes moving the controller to non-commercial source-available terms, and ongoing outages during the Central platform migration. Despite technical respect, trust erosion is evident in community sentiment.
Censorship resistance
ZeroTier offers no obfuscation features. Its protocol does not disguise traffic, making it easily detectable and blockable on censored networks like those in China, Iran, or Russia. The lack of obfuscation means this tool is NOT for bypassing state-level firewalls. Users in restrictive regions should consider tools with proven obfuscation like Shadowsocks, Outline, or commercial providers with obfuscated servers.
Verdict
Use ZeroTier if you need true Layer 2 networking for LAN gaming, homelab access, or bridging legacy protocols - not for anonymity or streaming. The free tier still works for small setups, but the 2025 changes have damaged trust. You're betting on U.S.-based ZeroTier, Inc. staying online and honest. There’s no evidence this provider pays review sites, but its business model now leans heavily on enterprise customers, not the open-source community that built its reputation.
++ Qué se sostiene
Nivel Personal gratuito (10 usuarios, 10 dispositivos, 1 red) - verificado activo el 2026-11-03, aunque reducido desde el histórico nivel gratuito de 25 nodos según informes comunitarios
Emulación verdadera de Capa 2: broadcast, multicast, descubrimiento LAN, puenteo Ethernet y tráfico no IP que las mallas basadas en WireGuard no pueden transportar de forma nativa (documentación de protocolo + VPNSmith)
Cifrado de extremo a extremo con claves que nunca abandonan los dispositivos; los servidores raíz solo reenvían datos cifrados (documentación de seguridad del operador + declaración del fundador en HN)
El controlador autohospedable y los servidores raíz 'moon' definidos por el usuario reducen la dependencia de la infraestructura de ZeroTier Inc. (documentación del operador)
Dos auditorías independientes de seguridad realizadas y corregidas: revisión del diseño criptográfico por Trail of Bits (2020, resumen público) e investigación sobre la identidad raíz por Pulse Security (2021, corregida en la versión 1.6.6 en cuestión de días)
Variante validada FIPS 140-3 y SOC 2 Tipo II para la ruta empresarial; plataforma Quantum post-cuántica para cumplir con los requisitos CNSA 2.0
-- A qué prestar atención
La reestructuración de precios de noviembre de 2025 redujo el nivel gratuito a 10 dispositivos/1 red y aumentó el plan Esencial a 18 USD/mes más 2 USD por dispositivo adicional; r/zerotier documentó un aumento superior al 250 por ciento para clientes antiguos y una visible salida hacia Tailscale, NetBird y Nebula
Los cuatro servidores raíz planetarios son operados por ZeroTier Inc. en una jurisdicción de los Cinco Ojos y ven las identidades de los miembros y metadatos IP; el controlador Central alojado es de código cerrado
El código del controlador ahora se encuentra en un directorio 'nonfree' bajo una licencia de código disponible que prohíbe el uso comercial sin una licencia de pago; la opción de autohospedaje es más limitada que bajo la anterior posición de código abierto
No hay secreto hacia adelante en el protocolo estándar VL1 (documentado en la propia página de protocolo del operador); VPNSmith señala que el transporte propietario no ha recibido la misma amplitud de auditorías y pruebas independientes que WireGuard
No existe un informe SOC 2 público (acceso restringido al centro de confianza); la auditoría completa prometida por Trail of Bits nunca se materializó
Términos de Servicio: todos los pagos son no reembolsables, arbitraje individual obligatorio y renuncia a demandas colectivas, y 28 días de impago conducen a la desactivación de la suscripción y eliminación permanente de los registros de red
Prueba de realidad de precios
Precio inicial
18,00 US$ /mo · Renovación 18,00 US$/mes
Precio de renovación
18,00 US$/mes
Notas
Página de precios actualizada y pricing.md (vigente desde el 20 de octubre de 2026): Personal gratuita (10 usuarios, 10 dispositivos, 1 red, 1 administrador, solo uso personal no comercial); Esencial 18 USD/mes (incluye 10 dispositivos, luego 2,00 USD por dispositivo adicional al mes, 10 redes, 5 administradores, registros de auditoría de 30 días); Escala 179 USD/mes (incluye 100 dispositivos, luego 1,80 USD cada uno, redes ilimitadas, 10 administradores); cotizaciones personalizadas para Empresarial y Quantum (despliegue autohospedado y aislado, certificado FIPS 140-3 n.º 5424, registros de auditoría de 90 días). Precios en USD, facturados mensualmente mediante Stripe según los Términos de Servicio.
El flujo de dinero - lo que ganan los portales de análisis con esta recomendación
Estado de afiliación aún sin verificar
Si nos uniéramos a este programa, cada enlace de aquí llevaría rel="nofollow sponsored" y pasaría por /go/. Hasta entonces, nuestros enlaces apuntan directamente al sitio del proveedor, sin ningún rastreo. La lógica de ordenación no puede leer físicamente los campos de afiliación - aquí la prueba.
On the website
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
ZeroTier homepage - live capture 2026-09-29ZeroTier pricing page - live capture 2026-09-29ZeroTier apps / download page - live capture 2026-09-29
Antes de pagar: compruebe el precio de renovación, el plazo de reembolso y si un camino más barato o gratuito cubre su caso de uso - la lista honesta.
Estado de nuestras comprobaciones: 2026-11-03. ZeroTier alcanza 4.1/10 en nuestro análisis ponderado. Hemos registrado 4 señales de alerta (listadas arriba). Los reportes de usuarios, la propiedad y el historial de incidentes están documentados con fuentes fechadas en el metaanálisis de abajo.
What do I actually get with the free plan?
The Personal tier includes 10 devices, 1 network, 1 admin, and non-commercial use only. No API access, FIPS, or additional features. Designed for small personal setups, not large deployments.
What is the renewal price and total cost over three years?
The monthly rate is $18 with a renewal ratio of 1 - no price jump, but no discount either. The three-year cash total cannot be computed as only monthly billing is offered, with no multi-year option.
What evidence supports the no-logs claim?
None beyond policy. The claim is unverified by audit or court test. The 2020 Trail of Bits review covered crypto design, not logging. What ZeroTier can see - peer IPs, admin logs - is not independently audited.
Can I use this in a heavily censored country like China or Iran?
No. ZeroTier has no obfuscation and uses a proprietary protocol that’s easily detectable. It will likely be blocked on state-level firewalls. Use tools with obfuscation instead.
Can I pay anonymously?
No cryptocurrency options exist. You can sign up with just an email, but payments go through Stripe, which requires identity verification. True anonymous payment isn’t supported.
What happens if ZeroTier shuts down?
The network depends on its four root servers and hosted controller. If they go offline, peer discovery fails. You can self-host a controller ("moon"), but the default setup creates dependency on ZeroTier, Inc.
What’s an honest free or cheap alternative?
For self-hosted mesh networks, consider Nebula (fully open source, no central dependency) or Tailscale with Headscale. For simple WireGuard setups, Algo or PiVPN on a $5 VPS offer more control and lower cost.
El metaanálisis: lo que internet dice de ZeroTier
No esperamos que nos crea. Este análisis es un metaanálisis: abajo verá lo que afirman otros portales de análisis - con sus conflictos de interés señalados -, lo que reportan los usuarios en Reddit y foros y quién opera realmente ZeroTier. Cada afirmación enlaza su fuente para que pueda comprobarla usted mismo.
Lo que dicen otros testers (2)
Cada fuente lleva una etiqueta de conflicto de nuestra base de datos de portales de análisis. «Financiado por afiliación» significa: la web gana si usted compra lo que recomienda. Las voces críticas las incluimos deliberadamente.
Fetched 2026-11-03: independent editorial with disclosed affiliate links (Contabo VPS funnel). Honest scoping: ZeroTier emulates a Layer 2 LAN with a proprietary transport; Tailscale is Layer 3 on WireGuard; 'the proprietary protocol has not received the same breadth of independent audit and public benchmarking that WireGuard has'; notes the free Personal plan at 10 devices non-commercial, Essential $18/month; verdict - ZeroTier for flat LANs/LAN gaming, Tailscale for routed meshes, self-host the control plane (ZeroTier controller with ztncui, or Headscale) for sovereignty.
Fetched 2026-11-03: Open Source For You explainer describing ZeroTier as a global Ethernet switch where subscribers connect to an imaginary switch and communicate as if on the same local network, including its use as a network bridge - a period review of the technology before the enterprise pivot.
Lo que dicen los usuarios (6)
Reddit, foros, HN - parafraseado y enlazado, nunca fuera de contexto. Anécdotas, no pruebas - pero las quejas de reembolso y los reportes de fugas son el mejor sistema de alerta temprana que tiene este mercado.
Fetched 2026-11-03 (25 comments): texture of the subreddit in late 2026 - admin-visibility questions answered correctly ('no he cannot'), Legacy Central outages with devices going down often, Windows 11 apt-repository install breakage, Minecraft/LAN gaming help threads working out well, account-migration bugs after linking Microsoft/Google SSO to legacy accounts.
Fetched 2026-11-03: the November 2025 pricing backlash thread - >250 percent increase quotes, free plan nerfed to 10 devices, CEO Andrew Gault responding in-thread to a 600-endpoint customer, cancellations and migrations to Tailscale (OPNsense package), NetBird and Nebula, 'enshittification' framing, recognition that L2 bridging remains genuinely differentiated.
Fetched 2026-11-03: 111 story hits including the 2021 Pulse Security vulnerability disclosure thread (135 points), the 2014 launch thread (107 points), ZeroTier 2.0 Status (2019), the 2022 SSO/new-pricing announcement thread (62 comments), and 'ZeroTier - home VPN without a public IP address' (2025).
Fetched 2026-11-03: returned HTTP 422 - the known arctic-shift body-search failure mode on large subreddits; a follow-up body search on r/VPN returned HTTP 429 (rate limited). Community voices for this dossier therefore come from r/zerotier thread fetches and HN Algolia instead of r/selfhosted body matches.
Informe de hechos con IA - todo lo que sabemos, condensado
Generado por Qwen3 el 2026-11-03 a partir de nuestra base de datos de hechos y las fuentes enlazadas. Resume - no añade hechos. Contraste todo lo importante con las fuentes enlazadas.
Bottom line: ZeroTier is not a consumer VPN for anonymity or streaming. It’s a virtual Layer 2 network fabric that connects devices into a private LAN over the internet with end-to-end encryption. The free tier remains usable for small personal setups, but trust erosion from pricing changes and closed-source components has driven many users to alternatives.
The logging truth: The company claims minimal metadata logging - IP addresses of network members and admin access logs - but this is policy-only, not independently verified. The U.S. jurisdiction (Five Eyes) applies, and while traffic payloads are end-to-end encrypted and invisible to ZeroTier’s infrastructure, the four planetary root servers and hosted controller can observe peer identities and connection metadata. No court-ordered disclosures or logging contradictions are documented.
Pricing reality: Pricing starts at $18/month for the Essential plan (10 devices), with no introductory discount and no refunds. The free Personal tier was cut in 2025 to 10 devices and 1 network, triggering widespread backlash. Renewal is at the same rate, but the shift from prior pricing represented a >250% increase for some legacy users, and additional devices cost $2 each, creating a long-term cost trap.
What reviewers say vs what users say: Reviewers like VPNSmith acknowledge ZeroTier’s technical strengths in Layer 2 emulation and LAN gaming but note its proprietary protocol lacks WireGuard’s audit breadth. Users, especially on r/zerotier, report instability during the 2026 Central migration, frequent device dropouts, and frustration over the post-Series A commercialization. The conflict is clear: technical respect persists, but user sentiment has soured, with many migrating to Tailscale, Nebula, or NetBird.
Who runs it: ZeroTier, Inc., founded in 2013 by Adam Ierymenko, is now led by CEO Andrew Gault (ex-Gaikai, Oculus investor) after a $13.5M Series A in 2024. Ierymenko remains CTO. The shift from open ethos to investor-driven pricing and source-available (non-open) controller code under California jurisdiction signals a clear enterprise pivot, reducing sovereignty for self-hosted users.
Fuentes & cómo se hizo este análisis
Cada fuente externa usada en esta página, con su fecha de consulta y su clase de prueba [A]-[D] (A = fuente primaria/del operador, B = prensa seria/investigación, C = comunidad, D = mediciones propias). Metodología: cómo verificamos. Las fuentes desaparecen o cambian - si un enlace está muerto, avísenos por la página de contacto.
Evidence classes on this page:[A] A: 15[B] B: 8[C] C: 6[D] D: 0(D stays empty until our own test phase)
The most credible self-hosting on-ramp in the VPN space, built by and for people inside the censorship: the app is free and open source, you connect it to your…
auditadoCódigo abierto
Inicial: 5,00 US$ /mo
Cyprus (EUPHORIATECH LIMITED, Nicosia, reg HE 484287 per site footer, verified 2026-11-02; IP rights in Portugal with Amnezia LDA, ops in Estonia) - for self-hosted users the operative jurisdiction is wherever their own VPS is hostedvpn autohospedado hace 3 días
The gold standard for connecting your OWN devices, and a poor substitute for a consumer VPN - which is exactly what it says on the tin. Tailscale is a…
AuditoríaCódigo abierto
Inicial: 8,00 US$ /user/mo
Canada - Tailscale Inc., Toronto, Ontario (Wikipedia, Bloomberg); a Five Eyes member country; privacy policy names processing locations in Canada, Germany, the US and the UKvpn autohospedado hace 3 días
The incumbent of self-hosted business VPNs, and still a safe pick in 2026 - with one honest fork in the road. Access Server is the polished, supported way to…
AuditoríaCódigo abierto
Inicial: 7,00 US$ /mo
United States - OpenVPN Inc., Pleasanton, California (about page fetched 2026-11-03); a Five Eyes member countryvpn autohospedado hace 41 h
Aún no hay comentarios - sea el primero. Publicar pasa por una breve prueba de trabajo en su navegador (antispam), sin necesidad de cuenta.