Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Netbird – Open Source Zero Trust Networking

netbird.io

Post reply on HN
Print view View original

81–90 of 299 posts

Re: Netbird – Open Source Zero Trust Networking

#81

Post by braginini »

oriettaxx wrote: post #74
braginini wrote: post #46

Earlier quoted context omitted.

Got you. We are on it. One feature that is coming very soon is a reverse proxy .Similar to cloudflare tunnels. With auth, TLs, etc. Would it suffice?

+1 from me. In general I would keep an eye on the path CF is following with warp: which is great, but since they are so big and in fast evolution, it is a bit of a mess (their doc is outdated and changes too frequently) not to count (literally) their support (free version, and our company's opinion only, of course) since on warp it is totally useless.

Roger that!

Re: Netbird – Open Source Zero Trust Networking

#82

Post by alturp »

Always my problem with Tailscale and similar solutions is that I already run VPNs in my personal devices and especially with android devices, I need to switch between two VPNs, which I find a friction that I do not want. Does anybody know a solution to this?

Re: Netbird – Open Source Zero Trust Networking

#83

Post by ksynwa »

alturp wrote: post #82

Always my problem with Tailscale and similar solutions is that I already run VPNs in my personal devices and especially with android devices, I need to switch between two VPNs, which I find a friction that I do not want. Does anybody know a solution to this?

Tailscale has some integration with Mullvad. If you have a Mullvad subscription you can use their servers as exit nodes without dropping your Tailscale connection: https://tailscale.com/kb/1258/mullvad-exit-nodes

Outside of the particular combination of Mullvad and Tailscale I don't think there is any other way apart from switching between the two.

Re: Netbird – Open Source Zero Trust Networking

#84

Post by BoredPositron »

m_santos wrote: post #49
BoredPositron wrote: post #44

Earlier quoted context omitted.

It funnels and lets encrypt certs for me and I am really not a fan of the android client.

Would love to learn more around your android experience

Battery usage is like 10% higher than with tailscale over a day.

Re: Netbird – Open Source Zero Trust Networking

#85

Post by mlrtime »

alturp wrote: post #82

Always my problem with Tailscale and similar solutions is that I already run VPNs in my personal devices and especially with android devices, I need to switch between two VPNs, which I find a friction that I do not want. Does anybody know a solution to this?

Not elegant or performant but:

You could have a exit node that is setup only for that vpn that advertises it's routes. So connecting to tailscale gives you access to that network.

Re: Netbird – Open Source Zero Trust Networking

#86

Post by nszceta »

geoctl wrote: post #70

(Shamless plug) I am also working on a similar FOSS, self-hosted project called Octelium https://github.com/octelium/octelium that you might find interesting if you are interested in this space. Octelium is, however, more of a generic/unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure. It pro…

It took me too long to understand the difference between the two so I'll leave it here for others. Octelium operates on OSI Layer 7 and Tailscale operates on OSI Layer 3 and 4.

Re: Netbird – Open Source Zero Trust Networking

#87

Post by c0balt »

ysleepy wrote: post #77
aaronds wrote: post #36

A bit lower level than most things discussed here but on the topic of overlay networks, I’ve used nebula for years and can recommend it https://github.com/slackhq/nebula

I've used it for some time, it feels very much like it is in maintenance mode. You manage a PKI and have to distribute the keys yourself, no auth/login etc. it's much better than wireguard, not requiring O(N) config changes to add a node, and allowing peoxy nodes etc. iirc key revocation and so on are not easy.

Nebula does not require O(n) config changes for adding a node.

O(n) is only required for:

- active revocation of a certificate (requires adding the CA fingerprint to the config file)

- adding/removing a lighthouses (hub for publishing IPs for p2p) or relay (for going over p2p)

- CA rotation

Re: Netbird – Open Source Zero Trust Networking

#88

Post by CommanderData »

Most of the self-hosted zero trust solutions require opening 80/443. It would be nice if they could adopt Wireguards approach of using UDP only, and only responding if the request is valid.

Maybe it's possible without modification to Netbird to setup a staging network.

Re: Netbird – Open Source Zero Trust Networking

#89

Post by gnufx »

I've looked without success for external audit reports of either Tailscale and Netbird, like Mullvad gets. While I don't approve of the sort of auditor box-ticking we get at work, it would be reassuring to see a report from a proper security consultancy.

Re: Netbird – Open Source Zero Trust Networking

#90

Post by markonen »

mittermayr wrote: post #47

I can only recommend giving headscale a try. It's free, works extremely well, and can be used with the official Tailscale clients. Was super easy to set up. https://headscale.net/stable/

Apparently they've deprecated Postgres support and now only recommend sqlite as the storage backend. I have nothing against sqlite but to me this looks like Tailscale actively signaling what they think the expected use of headscale is.
Post reply on HN