Top 11 Go mesh-network Projects

netbird

37 6,304 0.0 Go

Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.

Project mention: Netbirdio/netbird: Connect devices into a single private WireGuard mesh network | /r/hypeurls | 2023-08-31
yggdrasil-go

8 3,065 0.0 Go

An experiment in scalable routing as an encrypted IPv6 overlay network

Project mention: Tinc, a GPLv2 mesh routing VPN | news.ycombinator.com | 2023-06-27

> The next version will make it much simpler to deploy isolated networks by using TLS roots to prevent accidental peerings.
Is that PR #1038 [1]? Any info on how to use that feature and whether it works over multicast as well?
I noticed this PR uses SHA-1 for matching fingerprints. SHA-1 has been broken for 13 years now. Is it possible to use something more secure?
> It's also worth noting that Yggdrasil doesn't have the equivalent of "peer exchange" — only directly connected peers would ever find out your public IP address. Yggdrasil will not form new peerings automatically, with the single exception being multicast-discovered nodes on the same LAN.
Right, my worry is that by having a server with a public IPv4 address and Yggdrasil running on an open port (so that my other nodes can connect to it) will allow someone to connect to it (either on purpose or accidentally) and cause my traffic to route over their node(s) and/or the public mesh.
Thanks!
[1] https://github.com/yggdrasil-network/yggdrasil-go/pull/1038
Mergify

blog.mergify.com
sponsored

Updating dependencies is time-consuming.. Solutions like Dependabot or Renovate update but don't merge dependencies. You need to do it manually while it could be fully automated! Add a Merge Queue to your workflow and stop caring about PR management & merging. Try Mergify for free.
drago

0 1,065 0.0 Go

☁️ Securely connect anything with WireGuard® and manage all your networks from a single place.
wesher

3 823 0.0 Go

wireguard overlay mesh network manager

Project mention: Does a fully featured WireGuard-protocol based corporate VPN software exist? | /r/WireGuard | 2023-02-09

Maybe take a look at Wesher https://github.com/costela/wesher
wgsd

3 669 0.0 Go

A CoreDNS plugin that provides WireGuard peer information via DNS-SD semantics

Project mention: Mesh VPN - WireGuard admin | /r/selfhosted | 2023-04-01

if your looking at setting up coredns aswell then i would highly suggest checking out wgsd https://github.com/jwhited/wgsd
hyprspace

3 460 0.0 Go

A Lightweight VPN Built on top of IPFS + Libp2p for Truly Distributed Networks.

Project mention: CVE-2022-41924 – tailscaled can be used to remotely execute code | news.ycombinator.com | 2022-11-21
edgevpn

2 396 0.0 Go

:sailboat: The immutable, decentralized, statically built p2p VPN without any central server and automatic discovery! Create decentralized introspectable tunnels over p2p with shared tokens

Project mention: Blockchain : Création de réseaux privés décentralisés avec EdgeVPN et application à l’opérateur… | dev.to | 2022-11-20

EdgeVPN
SonarLint

www.sonarlint.org
sponsored

Clean code begins in your IDE with SonarLint. Up your coding game and discover issues early. SonarLint is a free plugin that helps you find & fix bugs and security issues from the moment you start writing code. Install from your favorite IDE marketplace today.
awl

5 333 10.0 Go

Securely connect your devices into a private network

Project mention: Gravitational Teleport alternatives - netbird, ZeroTier, and awl | libhunt.com/r/teleport | 2023-06-29

Anywherelan (awl for brevity) is a mesh VPN project, similar to tinc, direct wireguard or tailscale. Awl makes it easy to connect to any of your devices (at the IP protocol level) wherever they are.
tinc-boot

0 149 0.0 Go

Bootstrap your Tinc node quickly and easy
inet256

3 126 0.0 Go

Identity Based Network API with 256-Bit Addresses

Project mention: Show HN: A version control system based on rsync | news.ycombinator.com | 2023-01-19

My approach to hosting with Got has been to make it easy and secure for users to host from any machine.
INET256 solves that problem nicely. If you have access to an INET256 network, then all you have to do is swap addresses and two Got instances can communicate.
https://github.com/inet256/inet256
Also, end-to-end encryption is table stakes. Any data that leaves the user needs to be encrypted in transit, and if it hangs around away from the user, at rest.
yggmail

1 116 10.0 Go

End-to-end encrypted email for the mesh networking age

Project mention: Yggmail: End-to-end encrypted email for the mesh networking age | news.ycombinator.com | 2022-10-01

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2023-08-31.