Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

Post reply on HN
Print view View original

41–50 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#41

Post by matthewmacleod »

katdork wrote: post #31
tecleandor wrote: post #24

Earlier quoted context omitted.

You can manually disable key expiration for hosts in Tailscale, and I think you can do it with tags too... https://tailscale.com/kb/1028/key-expiry#disabling-key-expir...

The word "auth keys" meant nothing to you, I guess: https://tailscale.com/kb/1085/auth-keys

What would be your use-case for auth keys with long expiry times? Auth keys are only required for registering new nodes.

Re: Netbird – Open Source Zero Trust Networking

#42

Post by matthewmacleod »

edentrey wrote: post #25
tass wrote: post #19

Earlier quoted context omitted.

Tailscale allows you to disable the expiration time - I do this for my gateways. My other simplifier is having everything at home get a .home dns name, and telling Tailscale to route all these via tailnet.

can you please tell me how to disable expiration time? I see auth keys have an Expiration which says it "Must be between 1 and 90 days." I do use a custom domain name as well with a Nameservers rule to have all my services reachable as subdomains of my custom domain.

There is some confusion here because while you can disable node key expiration, you can’t disable auth key expiration. But that’s less of a problem than it seems - auth keys are only useful for adding new nodes, so long expiry times are probably not necessary outside of some specific use-cases.

Edit: in fact from your original post it sounds like you’re trying to avoid re-issuing auth keys to embedded devices. You don’t need to do this; auth keys should ideally be single-use and are only required to add the node to the network. Once the device is registered, it does not need them any more - there is a per-device key. You can then choose to disable key expiration for that device.

Re: Netbird – Open Source Zero Trust Networking

#43

Post by speedgoose »

I replaced Teleport by a bunch of various tools, and I had to chose between tailscale/headscale and netbird for the network connectivity. I’m pleased with netbird so far.

I had some weird bugs on a few old servers during the transition, and the support was helpful even though I am a small customer. We eventually switched to user space wireguard on those servers.

Re: Netbird – Open Source Zero Trust Networking

#44

Post by BoredPositron »

braginini wrote: post #34
BoredPositron wrote: post #21

Missing some technical bits to be a true contender for me but I bet they are getting there. That said I've seen so many shadcn based scam sites that my brain starts associating shadcn with scams.

For example? Curious what is missing

It funnels and lets encrypt certs for me and I am really not a fan of the android client.

Re: Netbird – Open Source Zero Trust Networking

#45

Post by inapis »

edentrey wrote: post #13

Tailscale is the only non-self-hosted part of my setup now and this has bugged me since. I use a custom Nameserver rule to point all my subdomains to a Caddy container sitting on my Tailnet. Caddy handles the SSL and routes everything to the right containers. I skipped Tailscale Funnel on purpose; since these are just family services, I’d rather keep them locked behind the VPN than open them up to the web. This proje…

Use tag-based node authentication. Login as a user and then switch the device to use a tag. I just recently did that and retained the usual 6 months expiry. I can also disable key expiry completely.

Re: Netbird – Open Source Zero Trust Networking

#46

Post by braginini »

BoredPositron wrote: post #44
braginini wrote: post #34

Earlier quoted context omitted.

For example? Curious what is missing

It funnels and lets encrypt certs for me and I am really not a fan of the android client.

Got you. We are on it. One feature that is coming very soon is a reverse proxy .Similar to cloudflare tunnels. With auth, TLs, etc. Would it suffice?

Re: Netbird – Open Source Zero Trust Networking

#50

Post by m_santos »

lwde wrote: post #3

But it's missing a tailscale funnel like feature, right? That's one of the main features that I use for some home assistant instances.

We are developing a similar feature and is scheduled to be available really soon. We've discussed some details in our public slack. Any feedback there will be helpful.
Post reply on HN