Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

Post reply on HN
Print view View original

201–210 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#201

Post by SparkyMcUnicorn »

rpastuszak wrote: post #135
mittermayr wrote: post #47

I can only recommend giving headscale a try. It's free, works extremely well, and can be used with the official Tailscale clients. Was super easy to set up. https://headscale.net/stable/

Any luck using with with a VPN like Mullvad as an exit node?

I've done this a few different ways.

I started with a docker container that connected to both the VPN provider and tailscale. Now OPNSense is handing a few connections to the VPN provider at a couple locations around the world, and enforcing external traffic to be routed to the VPN connections via VLAN tags (untagged has direct internet access).

Using the VPN provider can either be adding a VLAN tag to a machine/container or connecting to a "vpn-{location}" tailscale exit node.

Re: Netbird – Open Source Zero Trust Networking

#202

Post by NewJazz »

jrm4 wrote: post #192
systemf_omega wrote: post #187

Earlier quoted context omitted.

This is a bot account spamming LLM-generated comments. Probably to advertise their website.

Thats kind of wild, mostly because -- presuming it's correct, what bot is saying is actually valuable here?

Honestly no it is kind of nonsense. Nothing requires you to microsegment with wireguard meshes, for example.

Re: Netbird – Open Source Zero Trust Networking

#203

Post by greenavocado »

benoliver999 wrote: post #146
pranaysy wrote: post #65

Long-time ZeroTier user here. Recently switched to NetBird (self-hosted on a Hetzner VPS) and it’s been seamless so far. DNS functionality is excellent (something ZeroTier lacked), and the access-control model is very well designed. It’s easy to understand what’s going on and to grant one-off access when needed. Only real and very minor gripe is the Android app: I wish it were on F-Droid and a bit more robust, as it…

Also long time zerotier user here, I run a controller for our company. I'm starting to experience infrequent but annoying drops in connection, and DNS is a headache. How is netbird on iOS?

I switched from Zerotier to Tailscale last year and Tailscale is far more performant and stable but Zerotier works better with multicast, specifically multicast video. I even ran a Zerotier moon to help but it was still worse than Tailscale.

Re: Netbird – Open Source Zero Trust Networking

#205

Post by k_bx »

matthewmacleod wrote: post #94
k_bx wrote: post #78

Earlier quoted context omitted.

I want my CI containers created per branch/PR to have their own Tailscale domain, so logging them in is useful via non-expiring key. Only good option I've seen previously is to notify every 90 days when key expires.

The best way to do that is using an OAuth client. These don't expire, and grant scoped access to the Tailscale API. You use this to generate access keys for the devices that need to authenticate to the network. We use this for debugging access to CI builds, among other things – when a particular build parameter is set, then the CI build will use an OAuth key to request an ephemeral, single-use access key from the Tai…

Thanks, I'll soon get to try this out hopefully!

Re: Netbird – Open Source Zero Trust Networking

#206

Post by hamandcheese »

xyst wrote: post #174
mittermayr wrote: post #47

I can only recommend giving headscale a try. It's free, works extremely well, and can be used with the official Tailscale clients. Was super easy to set up. https://headscale.net/stable/

headscale is an awesome project. And I love tailscale as a product. But this is where netbird beats tailscale: coordinator server open sourced out/self hosted out the gate. Headscale is currently maintained by a few tailscale employees on their spare time. Currently, Tailscale allows this to happen but clearly there’s some internal management of what gets downstreamed to headscale. What I don’t like about headscale i…

> What I don’t like about headscale is that you can only host a single coordinator server as well. If I need to do maintenance on the server, it means an impact to the tailnet. It’s rare but annoying.

Any p2p connections should keep working for some time even if the coordinator goes down... right?

Re: Netbird – Open Source Zero Trust Networking

#207

Post by ZoomZoomZoom »

nixosbestos wrote: post #197
ZoomZoomZoom wrote: post #125

Earlier quoted context omitted.

It's the only app from the ones I use that my friends and relatives who already use iOS can't even install due to geoblocking. If you don't see it as a problem means you're not affected and perhaps lack some empathy. Yes, I understand the Apple ecosystem is a problem. But it's not an insurmountable one. Builds of Free Software exist on Apple Appstore and none of them exhibit this problem, unless they are tied to a co…

I guess I'll just say that I hope you share the blame with the appropriate parties whenever you are suffering through iOS entitlements and provisioning to publish or self-load it on your iPhone, since Netbird's iOS client is open source. Though, maybe it's not doing business in the US, and maybe the app is not similarly geo-blocked. Actually can you not just pull the app and then side-load it anyway? That's what I wo…

I'm not sure where you saw ire. The only direct negativity was aimed at restrictions themselves, which is the product of foreign policy of specific countries and Apple politics. I'm not angry at Tailscale, just disappointed and annoyed.

> Actually can you not just pull the app and then side-load it anyway? That's what I would do if I couldn't get Tailscale from the Play Store...

The issue is, even if it's possible (which I doubt, since the users in question are not in the EU), it's technically challenging and the whole point of using a VPN solution was connectivity, which, besides other things, facilitates me technically assisting others. Besides, where do I even get the iOS client to side-load?

The point of my initial post was to ask if Netbird suffers from the same deficiencies as Tailscale (which are a fact). The question still stands, BTW.

Re: Netbird – Open Source Zero Trust Networking

#209

Post by PLG88 »

tjoff wrote: post #200
PLG88 wrote: post #144

Earlier quoted context omitted.

This problem has been brought up in the OpenZiti community many times. I like Nebula, but it's not 'truly open source'.

What do you mean?

Referring to the previous person's comment, that you need to manage a PKI and have to distribute the keys yourself, no auth/login etc.
Post reply on HN