The New Internet

• ziti

  95 2,637 9.8 Go

  The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti

  

  secured at the endpoints yes... I would argue you can go one step further, doing it at the application level. This is what we built (and open sourced) with OpenZiti (https://openziti.io/), the ability to embed an overlay network, built on zero trust and deny by default principles, directly into the app as part of the SDLC.

  If you do this, your application has no listening ports on the WAN, LAN, or host OS network and thus cannot be attacked from the external network/IP.

  The asymmetry of risk now favours the defender, not attacker. Oh, plus we also have pre-built tunnelers for endpoints if you cannot do app embedded.

• InfluxDB

  www.influxdata.com featured

  Purpose built for real-time analytics at any scale. InfluxDB Platform is powered by columnar analytics, optimized for cost-efficient storage, and built with open data standards.

  

• headscale

  224 21,981 9.3 Go

  An open source, self-hosted implementation of the Tailscale control server

  One of the lead devs is even paid by Tailscale to work on it, IIRC.

  I run it for my personal self-hosted infra, and it works really well. Setting a custom control server URL is relatively easy (at least on Windows and Android which I use).

  I use taildrop, I serve docker containers to the tailnet, etc. headscale works really well and is worth a go.

  1: https://github.com/juanfont/headscale

• tinc

  20 1,920 5.1 C

  a VPN daemon

• RAIT

  2 - -

  True, but you can make a L2 mesh network with a bunch of WG endpoints with tools built into the linux networking stack easily:

  https://gitlab.com/NickCao/RAIT

  https://github.com/m13253/VxWireguard-Generator

• VxWireguard-Generator

  4 147 2.6 Python

  Utility to generate VXLAN over Wireguard mesh SD-WAN configuration

  True, but you can make a L2 mesh network with a bunch of WG endpoints with tools built into the linux networking stack easily:

  https://gitlab.com/NickCao/RAIT

  https://github.com/m13253/VxWireguard-Generator

• tailscale

  1,018 18,500 9.9 Go

  The easiest, most secure way to use WireGuard and 2FA.

  

  Looks like it's due to this: https://github.com/tailscale/tailscale/issues/6999#issuecomm...

• Nebula

  144 14,296 8.7 Go

  A scalable overlay networking tool with a focus on performance, simplicity and security

  

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• sshuttle

  42 11,558 8.6 Python

  Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

  

  Hopefully referring to the (excellent) sshuttle:

  https://github.com/sshuttle/sshuttle

  ... which allows you to turn any system you have an ssh login on into a VPN endpoint.

• omniedge

  10 858 4.9 Dockerfile

  Bringing intranet on the internet with Zero-Config Mesh VPNs.

  

  NetBird is a promising option. OpenZiti is another. ZeroTier hasn't evolved much, IMHO. Would also love to see someone breathe new life into https://github.com/omniedgeio/omniedge

• sshuttle

  1 8,896 0.0 Python

  Wrong project! You should head over to http://github.com/sshuttle/sshuttle (by apenwarr)

• netbird

  110 10,484 9.7 Go

  Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

  

  Or https://netbird.io which is open-source. You can host the coordination server too :)

Suggest a related project