31–40 of 68 posts
Also consider Nebula: https://github.com/slackhq/nebula ZeroTier does not use an OSI approved open-source license. It is under a freedom-restricting "Business Source License". Nebula is MIT licensed. Nebula is much simpler and in most cases faster than ZeroTier.
How does Nebula compare to Wireguard?
EDIT: actually, they just use various I/O abstractions that WireGuard developed.
We used to have Hamachi, but the limited networks, the unintuitive UI and the need to create an account are all things that ZeroTier does best.
Need someone to join the network ? Just send them the ZeroTier download link, and the network ID. No account, no complicated prompts, nothing !
And you can customize everything on the backend, like ip addressing and routing.
And it's even self hostable ! (But then the users need to set the url to your server so this adds a bit of setup obviously)
I’m considering setting up a Digital Ocean virt with the static IP and then wireguard connection back to a host on my network. I want to connect a local bare metal k8s cluster to the internet but completely walled off from the rest of my network.
Could probably redo it and skip the double proxy but honestly it's fine.
Also consider Nebula: https://github.com/slackhq/nebula ZeroTier does not use an OSI approved open-source license. It is under a freedom-restricting "Business Source License". Nebula is MIT licensed. Nebula is much simpler and in most cases faster than ZeroTier.
How does Nebula compare to Wireguard?
I have tried Tailscale / Headscale and did not find the overhead worth it. Both can saturate a 10Gbps link and that's all I need right now. Nebula's much simpler to administer. The configuration's spelled out in the client configs and in the certificates you provision. If you're already using some form of configuration management, it's quite easy to make changes. If you require a Web UI, Tailscale / Zerotier / etc may be better. There is a company that provides a Nebula-based service with a Web UI but I haven't tried it.
Also consider Nebula: https://github.com/slackhq/nebula ZeroTier does not use an OSI approved open-source license. It is under a freedom-restricting "Business Source License". Nebula is MIT licensed. Nebula is much simpler and in most cases faster than ZeroTier.
How does Nebula compare to Wireguard?
I'd characterize it as such: Wireguard is more of a plumbing solution that gives you a point-to-point connection, either it's enough for you or you can use this to build what you need.
Nebula is more of an end-user ready-to-use solution, gives you features like NAT traversal, automatic selection of direction connections if possible, the nodes don't need to know other nodes' addresses ahead of time(x) etc.
(x) except for the lighthouse
Earlier quoted context omitted.
How does Nebula compare to Wireguard?
Nebula does use WireGuard, as per their go.mod file. EDIT: actually, they just use various I/O abstractions that WireGuard developed.
Nebula uses Elliptic-curve Diffie-Hellman (ECDH) key exchange and AES-256-GCM in its default configuration.
Hugged to death but what i like about zerotier is that I can access my Home Assistant instance (and other home services) with same ip address (resolved from dns and then TLS terminated with traefik) from home network and from zerotier. And it does not matter if I have ZT network connected when home. Not sure if that is possible with tailscale (from my understanding, it generates always tailnet ip for hosts).
Tailscale does support this. Using the Subnet routing feature you can expose other devices on the network to the Tailnet. I had to use this for a while with TrueNAS because of the way it handles TS integration (eventually I moved to using a reverse proxy).
Hugged to death but what i like about zerotier is that I can access my Home Assistant instance (and other home services) with same ip address (resolved from dns and then TLS terminated with traefik) from home network and from zerotier. And it does not matter if I have ZT network connected when home. Not sure if that is possible with tailscale (from my understanding, it generates always tailnet ip for hosts).
Also consider Nebula: https://github.com/slackhq/nebula ZeroTier does not use an OSI approved open-source license. It is under a freedom-restricting "Business Source License". Nebula is MIT licensed. Nebula is much simpler and in most cases faster than ZeroTier.