Vexaro Mesh vs ZeroTier
ZeroTier is a Layer-2 overlay built on its own protocol (VL1/VL2, Salsa20+Poly1305 rather than WireGuard), licensed dual MPL-2.0 and Source-Available. It is priced on a flat tier plus per-device overage; peers find each other through planetary roots, with relaying as a fallback. Vexaro Mesh, now in development, is designed as a per-site, full-mesh SD-WAN: gateways linking whole locations directly, with a controller planned to run in your own perimeter on Enterprise.
| Capability | Vexaro Mesh (planned) | ZeroTier |
|---|---|---|
| Pricing unit | Per connected site | Flat tier + per device |
| What you connect | Sites & gateways | Devices / user agents |
| Self-hosted control plane | Planned, in your perimeter (Enterprise) | Self-host roots not SLA-supported |
| Source / license | Proprietary | MPL-2.0 + Source-Available |
| Tunnel protocol | Modern cryptography | Custom (VL1/VL2) |
| NAT traversal & relay model | Direct; relay fallback | Direct; roots/moons fallback |
| Access policy model | Roles & policies | Distributed rules engine |
| Platform reach | No client yet; gateway as VM / container | Desktop, mobile & NAS |
| Free tier / trial | Early access (in development) | 10 devices |
Each row shows how the products approach the same capability; the Vexaro Mesh column describes its planned design. A different value means a different model or unit (per-site versus per-seat billing, for example), not a weaker product. Competitor facts come from public vendor pages (read September 22, 2026).
What Vexaro Mesh is designed to offer
- Cost is planned per connected site rather than a flat tier plus per-device overage, so it stays predictable as the number of devices behind each gateway changes.
- The controller and keys are planned to run fully inside your perimeter on Enterprise. ZeroTier documents private moons (self-hosted roots) as no longer recommended and not supported under its SLA.
- Gateways are designed to build a direct full mesh between sites, with SIEM export planned from one console.
Where ZeroTier is a strong fit
ZeroTier is flexible and capable, with an original Layer-2 protocol, a distributed stateless rules engine, broad platform support including an embeddable SDK (libzt), and network controllers that are themselves ZeroTier nodes, for those who self-host. For Layer-2 emulation and device-level overlays, it is a strong, established option.