[Bug][macOS] ZeroTier adds unwanted default route to 127.0.0.1 on latest macOS

[3k2s]

Title:
[macOS] ZeroTier adds unwanted default route to 127.0.0.1 on latest macOS

Description:
Hi,

After upgrading macOS to the latest version, I noticed a serious routing issue with ZeroTier when allowManaged=true.

Even though I have no 0.0.0.0/0 route configured in the controller, ZeroTier still installs an extra default route pointing to 127.0.0.1.

---

Environment:

• macOS version: [e.g. macOS 15 Sequoia / macOS 14 Sonoma]

• ZeroTier version: [e.g. 1.14.x]

• Network config:

  • allowManaged=true
  • Only a subnet route (e.g. 10.100.0.0/16) is pushed
  • No default route (0.0.0.0/0) is configured

---

Observed behavior:
When joining the ZeroTier network, macOS adds this unexpected route:

$ route -n get default
route to: default
destination: default
mask: default
gateway: 127.0.0.1
interface: lo0

At the same time, my normal default route (192.168.1.1 via en0) is overridden.
This causes all internet traffic to be broken with error No route to host.

---

Expected behavior:
ZeroTier should only add the managed subnet route(s) (e.g. 10.100.0.0/16) and should not inject a default route unless explicitly configured in the controller.

---

Notes:

• This issue only happens on macOS.
• On Linux and Windows clients, no unwanted default route is added.
• On older macOS versions (before [Ventura/Sonoma]), this problem did not occur. It seems Apple changed routing behavior, and ZeroTier’s injected default route is no longer ignored but treated as active.

---

Impact:

• Breaks all internet connectivity when connected to ZeroTier.
• Workaround: manually delete the default route to 127.0.0.1 and re-add the local gateway.

---

👉 Could you please confirm if this is a known bug, and whether ZeroTier for macOS can avoid injecting the default 127.0.0.1 route when not explicitly configured?

Thanks!

---

[xingxiuyi]

+1

[glimberg]

🤔 I've been running macOS 26 since it was released with ZeroTier. Have not seen this one

 $ route -n get default
   route to: default
destination: default
       mask: default
    gateway: 10.0.0.1
  interface: en7

[3k2s]

🤔 I've been running macOS 26 since it was released with ZeroTier. Have not seen this one

$ route -n get default
route to: default
destination: default
mask: default
gateway: 10.0.0.1
interface: en7

Environment: macOS 26 (latest), ZeroTier 1.16.0

When toggling allowManaged = true, macOS always creates an unexpected default route:

default → 127.0.0.1 (lo0)

This never happened on macOS 25 and earlier.

On Linux/Windows clients, enabling allowManaged works fine, only macOS shows this extra "dirty" route.

This leads to loss of connectivity until the wrong default route is removed manually.

Once the route is removed and the system reverts to DHCP gateway, everything works again.

Looks like a regression introduced in macOS 26’s routing stack. Possibly ZeroTier’s route injection triggers the bug.

Question: Is ZeroTier explicitly pushing a 0.0.0.0/0 route, or is this an Apple bug in route management?

[chevacheva]

Reporting the same issue!

[chevacheva]

Once the route is removed and the system reverts to DHCP gateway, everything works again.

I am encountering another issue: even after removing the incorrect route, I continue to experience Internet disconnections, unless toggling allowManaged = false.

I have checked the routing tables, there is no default lo1 route after manually delete it.

[snachx]

+1, I lost Internet connection unless toggling allowManaged = false.

[tianzc2002]

+1 My macOS version is 26, and I'm experiencing the same issue, which remains unresolved at this time.

[happyharryh]

Once the route is removed and the system reverts to DHCP gateway, everything works again.

I am encountering another issue: even after removing the incorrect route, I continue to experience Internet disconnections, unless toggling allowManaged = false.

I have checked the routing tables, there is no default lo1 route after manually delete it.

Have you checked your DNS when you were encountering the issue?

[tianzc2002]

Once the route is removed and the system reverts to DHCP gateway, everything works again.

I am encountering another issue: even after removing the incorrect route, I continue to experience Internet disconnections, unless toggling allowManaged = false.
I have checked the routing tables, there is no default lo1 route after manually delete it.

Have you checked your DNS when you were encountering the issue?

Because of the gateway error, my network failed. I could access the internal IP of zerotie, but I couldn't access the public IP. The DNS was messy and wrong.

[ldfandian]

same here

[GlebGilev]

Same issue on MacOS26 and ZT 1.14.2.
WiFi re-enabling/network switching is fixing issue for some time though.

[wizcheu]

The Same, how could we fix?

[crazyi]

Same here, is there any fix?