Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

11–20 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#11

There's also https://pangolin.net/ which is kind of similar, and I believe a YC company.

Does that have ties to the US? If so it's not playing in the same ballpark.

US citizens may not be aware, but due to POTUS "made and maintained in Europe" is becoming more and more important to EU.

Re: Netbird – Open Source Zero Trust Networking

#13
Tailscale is the only non-self-hosted part of my setup now and this has bugged me since. I use a custom Nameserver rule to point all my subdomains to a Caddy container sitting on my Tailnet. Caddy handles the SSL and routes everything to the right containers. I skipped Tailscale Funnel on purpose; since these are just family services, I’d rather keep them locked behind the VPN than open them up to the web. This project looks promising as a replacement for my current setup and for its digital sovereignity of self hosting the server. I'm looking to manage several embedded devices remotely via Tailscale, but I've hit a major roadblock: the 90-day maximum expiration for Auth Keys. Constantly renewing these tokens is a significant maintenance burden, so I'm searching for a more permanent, 'set-and-forget' solution for my remote hardware.

Re: Netbird – Open Source Zero Trust Networking

#14

If the VPN connection would stay connected despite having it set up that way in the web UI.. It would be a good product. Still haven't figured out how to do Termux on Android with netbird ssh yet.

can you please elaborate on this? I use termux on android with tailscale and it works flawless, is it not possible on Netbird?

Re: Netbird – Open Source Zero Trust Networking

#15
post #7
post #5

Earlier quoted context omitted.

Out of curiosity, why? I use TS for all my homelab bits (including my HA instance), but connect to TS before opening the HA app. Is it just a case of making it easier/ possible to connect if you’re on another VPN? Are you not concerned with having something from your local network open to the internet?

I use funnels for things like Vaultwarden, that are secure enough to be exposed on internet, and would be cumbersome if behind the tailnet. I use serve for everything else, just for the clean SSL termination for things that should stay within the telnet, like *arr stacks, immich, etc.

After a decade with KeePass, I’ve finally moved to Vaultwarden. I’ll admit, self-hosting such a critical service still feels a bit scary, but the seamless syncing across all my devices is a huge upgrade. To balance the risk, I keep it tucked safely behind Tailscale for that extra peace of mind.

Re: Netbird – Open Source Zero Trust Networking

#16
post #10
post #7

Earlier quoted context omitted.

I use funnels for things like Vaultwarden, that are secure enough to be exposed on internet, and would be cumbersome if behind the tailnet. I use serve for everything else, just for the clean SSL termination for things that should stay within the telnet, like *arr stacks, immich, etc.

Ah neat, that makes sense. Thanks. Do you have anything that’ll trigger a notification if there’s suspicious traffic on your local network? I may be overly paranoid about exposing things on my local network to the internet.

Not really, but these stuff are in an isolated DMZ vlan, so theres not much to escalate to.

I fancy a bit upgrading to a smarter router like unify's with integrated firewall and stuff like like though.

Re: Netbird – Open Source Zero Trust Networking

#19

Tailscale is the only non-self-hosted part of my setup now and this has bugged me since. I use a custom Nameserver rule to point all my subdomains to a Caddy container sitting on my Tailnet. Caddy handles the SSL and routes everything to the right containers. I skipped Tailscale Funnel on purpose; since these are just family services, I’d rather keep them locked behind the VPN than open them up to the web. This proje…

Tailscale allows you to disable the expiration time - I do this for my gateways.

My other simplifier is having everything at home get a .home dns name, and telling Tailscale to route all these via tailnet.

Re: Netbird – Open Source Zero Trust Networking

#20
post #11

There's also https://pangolin.net/ which is kind of similar, and I believe a YC company.

Does that have ties to the US? If so it's not playing in the same ballpark. US citizens may not be aware, but due to POTUS "made and maintained in Europe" is becoming more and more important to EU.

I see Pangolin has a Self-Host Community Edition, doesn't that already give something over digital sovereignity for EU users? I am considering both for a migration from Tailscale, any suggestion on their differences?
Post reply on HN