bash_cli_zt VS nebula-mesh-admin

or my personal favorit, with a colletion of bash scripts: https://github.com/thedunston/bash_cli_zt

Basically, you create your own moons and then block the IPs of the ZT servers. Then use your own tools to manage nodes or my bash_cli_zt scripts: https://github.com/thedunston/bash_cli_zt or the ZTN CUI project's web interface: https://github.com/key-networks/ztncui-aio

https://github.com/thedunston/bash_cli_zt I hope someone finds this useful. I'm always on the cli in Linux so thought I'd play around with creating a controller using bash. I like ztncui, but like the cli a lot and wanted to have the ACL editing all in one place.

Nebula is great - super simple to set up and get started if you have a VM to use as a lighthouse. Lots of cloud providers free tiers are have enough resources to host a lighthouse as well.

Certificate management is its one weakness at the moment. There are a growing number of projects floating around attempting to solve that though:

* https://github.com/unreality/nebula-mesh-admin

As other have suggested, Nebula (https://github.com/slackhq/nebula) is pretty elegant. It has groups-based access built in which is extremely convenient.

You can bolt-on SSO fairly easily - just create a certificate signing service. I created https://github.com/unreality/nebula-mesh-admin in a weekend, so its fairly easy to add a SSO flow in.