EasyTier is an open-source P2P networking tool for seamless NAT traversal and remote LAN access. Features WireGuard, AES-GCM encryption, sub-net proxy, and zero-config setup.
Ever felt anxious about not being able to remotely access your home NAS? Struggled to build a virtual LAN for a cross-border team? EasyTier is a revolutionary open-source tool that redefines the boundaries of NAT traversal and remote networking with its decentralized architecture and ultra-simplified deployment process!
EasyTier is a simple, secure, and decentralized tool for NAT traversal and remote networking. It allows users to easily achieve secure interconnection between devices in different locations without a public IP, suitable for remote work, cross-region access, game acceleration, and many other scenarios. EasyTier can be used via command line or graphical interface, requires no additional dependencies, and works right out of the box after download.
🔍 I. Why Choose EasyTier? Redefining Networking Logic
1. Decentralized Architecture: No Single Point of Failure
Unlike ZeroTier, Tailscale, and other solutions that rely on central controllers or relay servers, EasyTier adopts a full peer-to-peer (P2P) network model. All nodes are equal and independent; even if some nodes go down, the network can maintain communication through other paths. This design dramatically improves service reliability.
2. Extreme Traversal Capability: Ignoring Complex Network Environments
Based on STUN-based UDP hole punching technology, combined with IPv6 support, it easily handles scenarios that traditional tools struggle with, such as multi-layer NAT and symmetric firewalls (like NAT444). Tests show that its hole-punching success rate is significantly higher than that of Tailscale and other tools.
3. Security First: Dual Encryption Engines
- WireGuard Integration: Can act as a WireGuard server, generating standard configuration files for clients to connect.
- AES-GCM Encryption: Provides additional protection for TCP/UDP relay traffic, eliminating the risk of man-in-the-middle attacks.
⚙️ II. Core Features: Beyond Traditional Networking Tools
1. Subnet Proxy (Point-to-Network)
A node can share its local physical network (e.g., 192.168.1.0/24) to the virtual network. For example, after exposing the Synology NAS subnet, remote devices can directly access the NAS management interface via 10.144.144.x without additional port mapping:
# Synology NAS deployment command example
docker run --network host --privileged easytier/easytier \
--ipv4 10.233.233.11 -n 192.168.1.0/24 -p tcp://publicIP:110102. Smart Routing & High Availability
- Multi-Path Transmission: Automatically selects the lowest-latency link (e.g., direct P2P > node relay).
- Failover: When packet loss exceeds the threshold, switches to the backup path within 0.5 seconds.
3. Public Nodes Assist Users Without Public IPs
The official project provides free public nodes (e.g., tcp://public.easytier.top:11010), allowing devices without public IPs to join the network without setting up their own server.
4. Full Cross-Platform Support
From x86 servers to ARM routers (such as OpenWRT) to Android phones, statically linked binaries are provided with no need to install dependency libraries.
📊 III. Comparison: EasyTier vs. Mainstream Competitors
| Tool | Architecture | NAT Traversal | Encryption | Deployment Complexity | Key Features |
|---|---|---|---|---|---|
| EasyTier | Decentralized P2P | ⭐⭐⭐⭐⭐ | WireGuard + AES-GCM | Minimal | Subnet Proxy / Public Nodes |
| ZeroTier | Star Topology | ⭐⭐⭐⭐ | Proprietary | Medium | Moon Relays (Paid) |
| Tailscale | Centralized Control | ⭐⭐⭐ | WireGuard | Medium | SSO Integration / ACL Policies |
| Ngrok | Central Server | ⭐ | TLS | Simple | HTTP Exposure / Domain Binding |
✅ EasyTier Advantages: High traversal success rate, no single point bottleneck, zero-config networking.
❌ Current Limitations: No ACL policy control yet (in development), basic Web panel features.
🛠️ IV. Advanced Tips: Unleash 100% of the Tool's Potential
1. Build a Pure Relay Server (No Business Traffic Forwarding)
Public nodes should disable traffic forwarding to avoid bandwidth abuse. Achieve this via the parameters --relay-network-whitelist "" --relay-all-peer-rpc:
easytier-core --relay-network-whitelist "" --relay-all-peer-rpc2. Hybrid Protocol Optimization for Complex Networks
- Prioritize UDP Direct Connection: UDP is used by default for the lowest latency.
- TCP Relay Fallback: Automatically switches to multiple concurrent TCP streams in UDP-blocked environments (e.g.,
-p tcp://node1:11010, tcp://node2:11010).
3. Windows Service Deployment
Use WinSW to register the core program as a system service for background running and auto-start on boot:
- Download
WinSW-x64.exeand place it in the installation directory. - Create
WinSW-x64.xmlto configure service parameters. - Execute
WinSW-x64.exe installto register the service.
4. Fully Automated Docker Compose Deployment
Integrate Watchtower for automatic image updates:
services:
easytier:
image: easytier/easytier:latest
network_mode: host
privileged: true
command: -i 10.144.144.1 --network-name my_net --network-secret my_pass
watchtower: # Auto-update container
image: containrrr/watchtower
volumes: [/var/run/docker.sock:/var/run/docker.sock]📥 V. Installation & Deployment Guide: 5-Minute Quick Start
Step 1: Download the Binary (Linux Example)
wget https://github.com/EasyTier/EasyTier/releases/download/v2.1.1/easytier-linux-x86_64.zip
unzip easytier-linux-x86_64.zip && chmod +x easytier-coreStep 2: Start the First Node (Assign IP 10.144.144.1)
./easytier-core --ipv4 10.144.144.1Step 3: Join the Second Node (Connect via Node 1 Public IP 22.1.1.1)
./easytier-core --ipv4 10.144.144.2 --peers udp://22.1.1.1:11010Step 4: Verify Connectivity
ping 10.144.144.2 # Should receive a reply
easytier-cli peer # View connected node list💡 No Public IP? Use the official public node to network instead:
easytier-core -i 10.144.144.1 --network-name abc --network-secret abc -e tcp://public.easytier.top:11010💎 Conclusion: A Networking Revolution for Everyone
With its decentralized design, military-grade traversal capability, and simple deployment process, EasyTier is becoming the new standard for remote networking. Whether you want to remotely access your home lab, build an office network for a cross-border team, or organize a low-latency online gaming session — one command, global connectivity — this is what modern networking tools should look like!
Project Links:
GitHub Repository: https://github.com/EasyTier/EasyTier
Official Documentation: Visit
Note: This is the English translation of the original Chinese version.