Top 4 Go zero-trust-network-access Projects

netbird

104 8,805 9.7 Go

Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.

Project mention: JIT WireGuard | news.ycombinator.com | 2024-03-13

cloudflared

100 7,844 8.8 Go

Cloudflare Tunnel client (formerly Argo Tunnel)

Project mention: How Does FreeBSD Compare to Linux on a Raspberry Pi? | news.ycombinator.com | 2024-01-07

I run a RaspberryPi 3 with FreeBSD 13 booting off an SD card and a USB SSD for storage [1]. Coincidentally today (1/7/2024) is its one year anniversary.
It runs a jail with my single user GotoSocial ActivityPub server [2] reasonably well with cloudflared [3] handling incoming traffic and acting as CDN to take some of the load. Originally it was only using an SD card, but there was too much IO contention so a USB-SSD adapter is used to offload the IO.
I choose FreeBSD over Linux since I have other Rpis with Linux already and wanted more experience with *BSD, jails, and ZFS. Unfortunately ZFS wasn't the best choice on an Rpi since it's more cpu intensive and switched back to UFS.
Overall it's been solid, multiple GTS updates and have it on my list to update to FreedBSD 14 but not really in a rush.
1. https://social.ecliptik.com/@micheal/statuses/01GP860MYM2CGH...
2. https://gotosocial.org/
3. https://github.com/cloudflare/cloudflared

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
ziti

83 2,036 9.8 Go

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti

Project mention: Has anyone tried OpenZiti? | /r/selfhosted | 2023-07-07

If you are not aware of what OpenZiti is, this is the description available on their website:

kubeztl

1 4 3.7 Go

A zitified kubernetes client

Project mention: Kubernetes Exposed: One YAML Away from Disaster | news.ycombinator.com | 2023-08-08

https://github.com/openziti-test-kitchen/kubeztl/tree/main
disclosure: i am a maintainer and the software overlay in the middle (helps enforce outbound-only, pre-authorized connects only) needs to be managed (self-hosted foss or hosted saas), so there are still trade-offs.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2024-03-13.