Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

Post reply on HN
Print view View original

291–299 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#291

Post by jasona123 »

teruakohatu wrote: post #246
SebastianKra wrote: post #231

Earlier quoted context omitted.

We also had a bunch of problems. The DNS resolution didn't work, and support was unable to figure out the reason. A coworker reported domain access breaking when he went to office 1, but fixed itself when he went to office 2. For a while, when you logged in with the wrong account, it was near impossible to replace it. This on is fixed now, but the entire thing still feels very much like paying for beta software.

I have endless DNS problems with Tailscale. So I am guessing it’s a hard problem.

It's like the haiku says:

It’s not DNS

There’s no way it’s DNS

It was DNS

Re: Netbird – Open Source Zero Trust Networking

#292

Post by brnt »

jorams wrote: post #126
nebezb wrote: post #114

Earlier quoted context omitted.

Tailscales founders are Canadian, principled, and are very sensitive to Canadian needs. I very much trust Avery and team to do what’s necessary to keep US hands off the data. edit: someone pointed out they’ve signed new users on to a US co. 15 months ago. I made the statement without knowing this. they aren’t as capable as I originally claimed.

According to their ToS all customer accounts registered on or after September 3, 2024 are signed on to a US company, so no they're not doing what's necessary to keep US hands off the data.

So.... Any account from before then is always good? Or is it about the tailnet creation date?

Re: Netbird – Open Source Zero Trust Networking

#293

Post by vlovich123 »

teon wrote: post #287
vlovich123 wrote: post #18

How does this compare with Defguard? Also European but seems more featureful maybe?

Hi, Robert from Defguard here. Defguard is a *Secure by Design* solution, which means security is important (if not more) then functionality. Lower latency or peer-to-peer communication does not automatically mean better security often it means a larger attack surface. Defguard is also *the only solution that enforces MFA on every connection*, aligning with true Zero Trust principles never trust a user or device by d…

So would you say then that it’s perfectly safe to send plaintext traffic between services over Defguard instead of also using mTLS?

I still wish that Defguard had an option where peers only used the public gateway to retrieve their p2p ACLs from the control plane but otherwise traffic flowed directly.

Re: Netbird – Open Source Zero Trust Networking

#294

Post by egberts1 »

kolp wrote: post #273
chillfox wrote: post #254

Earlier quoted context omitted.

Does Tailscale/ZeroTier/Netbird provide anything beyond a GUI wrapper for Wireguard? How easy is it to make it manage an already configured Wireguard mesh network?

I had to use tailscale to bust through port forwarding on chained routers because, even with ports configured correctly, wireguard wasn't able to get through. My use case was for remote access into a home-hosted Nextcloud instance, via an ISP supplied fibre router (IPv4, not CGNAT), then my own Gl iNet router, then to my Nextcloud instance. Despite opening up port forwarding correctly, wireguard just couldn't get thr…

Tailscale's strength is getting through double CGNAT of big ISPs.

Still requires your self-hosted VSP that is NOT behind a CGNAT.

Re: Netbird – Open Source Zero Trust Networking

#295

Post by pranaysy »

pkulak wrote: post #263
pranaysy wrote: post #65

Long-time ZeroTier user here. Recently switched to NetBird (self-hosted on a Hetzner VPS) and it’s been seamless so far. DNS functionality is excellent (something ZeroTier lacked), and the access-control model is very well designed. It’s easy to understand what’s going on and to grant one-off access when needed. Only real and very minor gripe is the Android app: I wish it were on F-Droid and a bit more robust, as it…

But paid Tailscale is $5 a month right? So you gotta be paying more to self host and deal with all the problems yourself, not have derp servers all over the world, etc. Why?

tl;dr: because I can.

I already run a VPS for other things, this fits cleanly into that setup, NetBird’s been low-maintenance, and I don’t need global relays. That’s enough for me.

Re: Netbird – Open Source Zero Trust Networking

#296

Post by pranaysy »

chillfox wrote: post #254
pranaysy wrote: post #65

Long-time ZeroTier user here. Recently switched to NetBird (self-hosted on a Hetzner VPS) and it’s been seamless so far. DNS functionality is excellent (something ZeroTier lacked), and the access-control model is very well designed. It’s easy to understand what’s going on and to grant one-off access when needed. Only real and very minor gripe is the Android app: I wish it were on F-Droid and a bit more robust, as it…

Does Tailscale/ZeroTier/Netbird provide anything beyond a GUI wrapper for Wireguard? How easy is it to make it manage an already configured Wireguard mesh network?

As other have pointed out, Tailscale and Netbird are much more than wrappers around Wireguard. ZeroTier does not use Wireguard and they have their own lightweight tunnels, which in their recent multi-threaded implementations are more performant but not as fast as Wireguard in my testing.

I don't think there's a direct way to integrate any of them into existing mesh networks, but I could be wrong.

Re: Netbird – Open Source Zero Trust Networking

#297

Post by pranaysy »

mac-attack wrote: post #220
pranaysy wrote: post #65

Long-time ZeroTier user here. Recently switched to NetBird (self-hosted on a Hetzner VPS) and it’s been seamless so far. DNS functionality is excellent (something ZeroTier lacked), and the access-control model is very well designed. It’s easy to understand what’s going on and to grant one-off access when needed. Only real and very minor gripe is the Android app: I wish it were on F-Droid and a bit more robust, as it…

I've been using jetbird from fdroid. I have never tried the official app, but I have good experiences with Jet Bird.

Thanks! Will try asap

Re: Netbird – Open Source Zero Trust Networking

#298

Post by nagaiaida »

edentrey wrote: post #13

Tailscale is the only non-self-hosted part of my setup now and this has bugged me since. I use a custom Nameserver rule to point all my subdomains to a Caddy container sitting on my Tailnet. Caddy handles the SSL and routes everything to the right containers. I skipped Tailscale Funnel on purpose; since these are just family services, I’d rather keep them locked behind the VPN than open them up to the web. This proje…

you may also be interested in nebula (although you'd give up the nice management ui)
Post reply on HN