Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

31–40 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#31

Tailscale is the only non-self-hosted part of my setup now and this has bugged me since. I use a custom Nameserver rule to point all my subdomains to a Caddy container sitting on my Tailnet. Caddy handles the SSL and routes everything to the right containers. I skipped Tailscale Funnel on purpose; since these are just family services, I’d rather keep them locked behind the VPN than open them up to the web. This proje…

You can manually disable key expiration for hosts in Tailscale, and I think you can do it with tags too... https://tailscale.com/kb/1028/key-expiry#disabling-key-expir...

The word "auth keys" meant nothing to you, I guess: https://tailscale.com/kb/1085/auth-keys

Re: Netbird – Open Source Zero Trust Networking

#37
post #19

Earlier quoted context omitted.

Tailscale allows you to disable the expiration time - I do this for my gateways. My other simplifier is having everything at home get a .home dns name, and telling Tailscale to route all these via tailnet.

can you please tell me how to disable expiration time? I see auth keys have an Expiration which says it "Must be between 1 and 90 days." I do use a custom domain name as well with a Nameservers rule to have all my services reachable as subdomains of my custom domain.

You can create an oauth client that can generate keys as you need them.

https://tailscale.com/kb/1215/oauth-clients#generating-long-...

Re: Netbird – Open Source Zero Trust Networking

#39

How does this compare with Defguard? Also European but seems more featureful maybe?

Defguard as of my knowledge is a traditional VPN with a central gateway. NetBird is an overlay network with a full mesh capabilities. Though you can set it up in a gateway-like style with NetBird Networks but without opening ports and with HA out of the box: https://docs.netbird.io/manage/networks

Re: Netbird – Open Source Zero Trust Networking

#40
F-droid inclusion seems to be stalled https://gitlab.com/fdroid/rfp/-/issues/2688

Having it in F-droid, vetted by their policies is kind of my benchmark for "software that is guaranteed to be not crapware."

That being said I'm rooting for the devs, having an alternative for tailscale+headscale would be nice, because as it stands it's kind of dependant on the goodwill of a for profit company (finite).

Post reply on HN