Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

211–220 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#211
post #192

Earlier quoted context omitted.

This is a bot account spamming LLM-generated comments. Probably to advertise their website.

Thats kind of wild, mostly because -- presuming it's correct, what bot is saying is actually valuable here?

Doesn't matter. Generated comments are verboten here.

Re: Netbird – Open Source Zero Trust Networking

#212

Earlier quoted context omitted.

Could you give a brief description of your use case? I'm looking at all the tailscale buzzwords on their site, but am not really understanding what I would use this for in my home setup

Not sure about the parent, but here's what I use it for: A) easy access my other, older machines from my phone or work laptop to: - self-host a Coolify server (a "vercel-lite" control panel) - remote connect to my older laptop to run tests/longer coding tasks for work (e.g. large browser test suites, sandboxed claude running in bg to answer longer code questions, or build fire and forget spikes/experiments) - control…

Hamachi is still a thing, but LMI enshitified a decade ago.

Re: Netbird – Open Source Zero Trust Networking

#213
post #97

Earlier quoted context omitted.

Apparently they've deprecated Postgres support and now only recommend sqlite as the storage backend. I have nothing against sqlite but to me this looks like Tailscale actively signaling what they think the expected use of headscale is.

https://headscale.net/stable/about/faq/#scaling-how-many-cli... > Scaling / How many clients does Headscale support? > It depends. As often stated, Headscale is not enterprise software and our focus is homelabbers and self-hosters. Of course, we do not prevent people from using it in a commercial/professional setting and often get questions about scaling. > Please note that when Headscale is developed, performance is…

> Headscale is not enterprise software

I mean this is a great advertisement in and of itself. Something being considered "enterprise software" means it will have 90% more features than needed, the code will be a combination of dozens of different mid-level devs new perfect abstractions and will only test code paths through all those features that the original enterprise valued. I.E. it is great if you work in an enterprise as it will generate a lot of work with an easy scapegoat.

Re: Netbird – Open Source Zero Trust Networking

#215

Earlier quoted context omitted.

Could you give a brief description of your use case? I'm looking at all the tailscale buzzwords on their site, but am not really understanding what I would use this for in my home setup

I have one VPS node that I use as a connector, where the headscale app is installed. I have this on a domain (for convenience), so think something like: hs.mygreatplace.com Now, when I install Tailscale client on any device (phones, tablets, Linux machines, proxmox nodes, etc.), I simply say: don't use the tailscale network for this, please route this over my own network, so you point it to hs.mygreatplace.com as a c…

tailscale were based in Canada last time i checked. has this changed recently?

Re: Netbird – Open Source Zero Trust Networking

#216
post #36

A bit lower level than most things discussed here but on the topic of overlay networks, I’ve used nebula for years and can recommend it https://github.com/slackhq/nebula

What about DNS integration? As far as I know, you can't resolve nodes by name (http://media-server), you have to use node's internal IP.

Nebula uses lighthouses instead of DNS for finding other nodes.

https://github.com/slackhq/nebula?tab=readme-ov-file#2-optio...

Re: Netbird – Open Source Zero Trust Networking

#217
post #216

Earlier quoted context omitted.

What about DNS integration? As far as I know, you can't resolve nodes by name (http://media-server), you have to use node's internal IP.

Nebula uses lighthouses instead of DNS for finding other nodes. https://github.com/slackhq/nebula?tab=readme-ov-file#2-optio...

Yes, but when you connect your phone to a Nebula network, and go to http://media-server in your browser, the DNS won't resolve it to your desired node, because the phone client (same on desktop) didn't update DNS of the phone, so you'll have to use node's IP address.

That's what I've read (when evaluating Nebula), at least.

Re: Netbird – Open Source Zero Trust Networking

#218
post #209
post #200

Earlier quoted context omitted.

What do you mean?

Referring to the previous person's comment, that you need to manage a PKI and have to distribute the keys yourself, no auth/login etc.

How does that make it not "truly open source"?

I made a shell script that does most of that for my needs.

Re: Netbird – Open Source Zero Trust Networking

#219

I was previously using headscale and was finding it a bit finicky. Recently switched to self hosted netbird and its been great so far. However, if the Netbird teams sees this, please implement a built-in updater for the client apps! needing to download and install the package again is a bit annoying

Why not use a package manager? It seems way better than letting every app auto-update itself

Re: Netbird – Open Source Zero Trust Networking

#220

Long-time ZeroTier user here. Recently switched to NetBird (self-hosted on a Hetzner VPS) and it’s been seamless so far. DNS functionality is excellent (something ZeroTier lacked), and the access-control model is very well designed. It’s easy to understand what’s going on and to grant one-off access when needed. Only real and very minor gripe is the Android app: I wish it were on F-Droid and a bit more robust, as it…

I've been using jetbird from fdroid. I have never tried the official app, but I have good experiences with Jet Bird.
Post reply on HN