wgsd
netbird
Our great sponsors
| wgsd | netbird | |
|---|---|---|
| 8 | 105 | |
| 763 | 8,888 | |
| - | 10.9% | |
| 2.8 | 9.7 | |
| 4 months ago | 4 days ago | |
| Go | Go | |
| MIT License | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
wgsd
-
Mesh VPN - WireGuard admin
if your looking at setting up coredns aswell then i would highly suggest checking out wgsd https://github.com/jwhited/wgsd
- DNS System for storing WireGuard IPs
-
CVE-2022-41924 – tailscaled can be used to remotely execute code
https://github.com/jwhited/wgsd does NAT traversal with Wireguard, but you need to operate a CoreDNS server to do it.
More info on how it works: https://www.jordanwhited.com/posts/wireguard-endpoint-discov...
-
For CGNAT peers - is there an alternative which is open source and as simple to use as Tailscale?
Another one which looks promising is wgsd, a dns like plugin to discover peer's endpoints that sit behind a NAT. For me this is part of the solution, however not a complete one, as my client devices are also on Android and Android TV.
-
Wireguard with holepunching and DNS
that guide is literally someone promoting their CoreDNS plugin, so I'm confused as to what you mean: https://github.com/jwhited/wgsd
- Wiretrustee: WireGuard-Based Mesh Network
-
traceroute between two clients, server is always in the middle
If they are behind a NAT that you can't do port-forwarding on then you may need to run some additional software like https://github.com/jwhited/wgsd so 10.10.0.2 and 10.10.0.3 know where to look for each other by asking 10.10.0.1
-
Yet Another Mesh Overlay Tool
Our current implementation just has the nodes configured with PersistentKeepAlive by default, which works well enough for our small setup. In future iterations our plan is to incorporate another service. Our inclination is to use WGSD: https://github.com/jwhited/wgsd
netbird
-
Using NetBird for Kubernetes Access
NetBird simplifies Kubernetes access with its zero-configuration approach, leveraging WireGuard's simplicity and strength. It seamlessly integrates with various tools, offering transparency and high reliability as an open source solution.
- JIT WireGuard
- Nebula is Not the Fastest Mesh VPN (But neither are any of the others)
-
A word of caution about Tailscale
Netmaker (https://www.netmaker.io/) Netbird (https://netbird.io/)
-
Free Tech Tools and Resources - Multi-clock Display, Networking Tools, Digital Forensics & More
NetBird is a configuration-free, peer-to-peer private network combined with a centralized access control system. Utilizing a WireGuard-based overlay network, it ensures encrypted connections between machines without the need for complex configurations such as port openings, intricate firewall rules, or VPN gateways. Prioritizes security with intuitive management of granular access policies for secure remote access, applicable universally across any infrastructure. petr205 explains, "Their SaaS version is free up to 100 machines and 5 users, but the self-hosted version is exactly the same and has very low requirements."
-
Show HN: WireHub – easily create and share WireGuard networks
It is always great to see another solution using Wireguard, which is a great technology for modern private connectivity.
I built https://github.com/netbirdio/netbird, which can be self-hosted and offers an option to run Wireguard without managing firewalls for P2P connectivity.
- Would we still create Nebula today?
-
Netbirdio/netbird: Connect devices into a single private WireGuard mesh network
https://github.com/netbirdio/netbird#quickstart-with-netbird...
What are some alternatives?
Netmaker - Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
tailscale - The easiest, most secure way to use WireGuard and 2FA.
headscale - An open source, self-hosted implementation of the Tailscale control server
innernet - A private network system that uses WireGuard under the hood.
ZeroTier - A Smart Ethernet Switch for Earth
cjdns - An encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing.
wireproxy - Wireguard client that exposes itself as a socks5 proxy
Nebula - A scalable overlay networking tool with a focus on performance, simplicity and security
dsnet - FAST command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation.
firezone - Open-source VPN server and egress firewall for Linux built on WireGuard. Firezone is easy to set up (all dependencies are bundled thanks to Chef Omnibus), secure, performant, and self hostable.