tailscale VS netbird

I agree, it's a feature that I find sorely lacking in my tailnet.

These are the relevant Github issues to follow, hopefully they address these someday:

https://github.com/tailscale/tailscale/issues/465

tailscale runs a continuous netcheck to an unroutable IP (203.0.113.1:12345:UDP) [1] for whatever reason. This triggered Hetzner's ghetto-ass DDOS protection, thinking my server was compromised or something. They sent me an email saying my server was compromised and I had 24hrs to remedy it.

I responded to the email and filled out this attestation form declaring that my server was not under attack and it was a false positive etc. They still null routed my server and refused to turn it back on, and their arrogant support told me there was no way I was in control of this server etc.

Anyway, took my box offline during a peak user day, migrated to AWS and never looked back.

Don't do anything of importance on Hetzner. No wonder they only get people running pirated plex boxes.

[1] https://github.com/tailscale/tailscale/blob/94304819263b0553...

Fond memories of using DDNS on old Netgear routers at home in the aughts and port forwarding services with some rudimentary firewall rules and tcpwrappers to try and lock down access.

Now I use a combination of Tailscale[1] for private services only to me and Tailscale Funnels[2], and Cloudflare Tunnels[3] for public service exposure.

This accomplishes the same thing I was doing with DDNS and my ISP IP, but in a much more secure and stable manner.

1. https://tailscale.com/

2. https://tailscale.com/kb/1223/tailscale-funnel/

3. https://developers.cloudflare.com/cloudflare-one/connections...

Tailscale: Seems to have quite good NAT support and seems to do DNS resolution. Clients for most relevant platform - a well rounded package. But I find their plans to be prohibitive. Only 20 devices on the free plan. The first paid tier is 5 devices per 1 user, so 5 devices for me paying? A head scratcher. There is an open source control plane https://github.com/juanfont/headscale but given the clients are not open source it feels a bit scary to rely on. My knowledge of wireguard is not good enough, but I am also wondering if it is really meant for a mesh setup?

Ha van mindket modem mogott fixen szamitogep (akar egy olcso raspberry pi) akkor felrakod a tailscale-t, engedelyezed exit node-kent es kesz vagy. Gepenkent kb 5 perc melo

https://github.com/netbirdio/netbird/issues/1081#issuecommen...

It seems that they plan on open sourcing the app.

https://github.com/netbirdio/netbird#quickstart-with-netbird...

I'd add to that list Netbird, which is the one I ended up using after trying all of the above.

https://netbird.io/

Another option in this space is https://netbird.io/

Unfortunately they still don't have an iOS client (which e.g. Tailscale and ZeroTier has).

Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.

https://netbird.io/ https://github.com/slackhq/nebula https://docs.openziti.io/

Why OpenVPN? If the type is not important then use netbird.io it uses Wireguard and can have subnets