shane@ixtj.dev:~$ cat blog/secure-bidirectional-network.md

How I Created a Secure, Bidirectional Network Without Installing Extra Hardware

· 2 min read
Cover image for How I Created a Secure, Bidirectional Network Without Installing Extra Hardware

For a recent project, I needed a secure way to access a development environment running on a mobile setup, while still allowing that environment to communicate back with a client system at home. The catch? I couldn’t rely on traditional port forwarding or dynamic DNS, and I didn’t want to set up or maintain a dedicated device like a Raspberry Pi, VPN server, or Pi-hole.

After exploring several networking solutions, I found a surprisingly simple and elegant answer: ZeroTier.

🛠 The Problem

I had two devices:

  • One at home, behind NAT and a dynamic IP.

  • Another on the go, where I had no control over the router or firewall.

Both needed to connect to each other reliably — and in both directions.

Traditional methods like reverse SSH tunnels or manually configuring a VPN were either fragile, high-maintenance, or required additional hardware acting as an always-on relay.

✅ The Solution: ZeroTier

ZeroTier creates a virtual LAN over the internet. Once both devices are joined to the same virtual network, they can communicate as if they were on the same local network — regardless of where they are in the world.

In less than 10 minutes:

  • I installed the ZeroTier client on both devices.

  • Authorized them through ZeroTier’s web dashboard.

  • Got instantly assigned private, routable IPs.

  • And… that was it. I could access services securely between the two devices with no further configuration.

🔄 Compared to Tailscale

Tailscale is a great tool, especially for teams already using Google or Microsoft logins. However, there were a few reasons I opted for ZeroTier:

  • Fewer dependencies: Tailscale relies on the WireGuard protocol and a coordination server model, which can introduce friction if you’re not using their full ecosystem.

  • More flexibility: ZeroTier gives more control over network topology (bridging, routing, etc.), which was helpful for my setup.

  • No third device needed: Tailscale often works best with an always-on relay node (like a Pi), especially for subnet routing — something I specifically wanted to avoid.

Both are great choices, but ZeroTier gave me the flexibility and simplicity I needed for this case.

💡 Bonus: No Extra Hardware Required

The best part? I didn’t have to install or configure an extra device like a mini PC or a Raspberry Pi to act as a VPN server or gateway. Everything runs directly on the devices I was already using — even my mobile device.

This meant lower power usage, less clutter, and zero maintenance.