braginini

Have you seen NetBird? Can be fully self-hosted https://github.com/netbirdio/netbird#quickstart-with-self-ho...

Hey!

Thank you for the feedback! Could you please elaborate on the issues that you are facing? We have quite a few multi-user cases both on the managed and self-hosted version with no issues.

Thank you!

It is coming :)

Maintainer here.

NetBird is one of these p2p private networking solutions that is truly open-source. Actually, I haven't seen any comparable yet.

We haven't yet published the Android code simply because we have coding standards to meet before we open the code to the public. This is mainly about the code structure and tests. We are working on it.

We are a tiny team of engineers with a vision to make private networking simple and secure, which is challenging. Therefore, we should prioritize some things over others. But we are getting there! With your support :)

There is a new quick NetBird self-hosting guide available :) https://github.com/netbirdio/netbird#quickstart-with-netbird...

You could also try an updated self-hosted Netbird :) https://github.com/netbirdio/netbird#quickstart-with-netbird...

NetBird maintainer here.

We did a few improvements recently. When did you try netbird for the last time? Happy to follow-up on the DNS issues in our Slack channel https://join.slack.com/t/netbirdio/shared_invite/zt-vrahf41g...

Hey folks, You've probably heard of NetBird - an open source and fully self-hosted peer-to-peer private network based on WireGuard. It features full mesh capabilities, SSO, user management, DNS and access controls.

We've developed a one liner script that provisions the whole setup including an IDP integration in just a few minutes.

We use Zitadel IDP for SSO and user management. It is self-hosted and open source too :)

Check it out!

I wanted to share a new feature we just released - NetBird Network Routes that allows access to your private LAN, VPC, or corporate network from a WireGuard-based overlay network. And, of course, 100% Open-Source :)

See the documentation for more details: https://netbird.io/docs/how-to-guides/network-routes

Try out NetBird. Happy to help and answer any questions! https://netbird.io/docs/getting-started/quickstart

Thank you for the kind words and feedback!

Access controls are in progress and will be released in June. We are building a tagging system for peers (endpoints) so that you could create peer groups and assign access rules to them. Check the mockups https://github.com/netbirdio/dashboard/blob/main/media/taggi...

We will reduce ports for Management (merge gRPC with HTTP) so it will be just port 443. AS for TURN and Signal, these are separate components and require open ports. You could also use any public TURN server - your traffic will be p2p encrypted, just the IP of your peer will be exposed to that services. If it is not a concern, then it is a good option :)

We also rely on a central Management layer which holds the network map. But it is open source.https://github.com/netbirdio/netbird/tree/main/management

FYI: Network still be working in case the management service is down.

See architecture overview: https://netbird.io/docs/overview/architecture

Every component can be self-hosted.

This looks interesting! Thank you very much for sharing.

Thank you for the feedback, Sean!

And a separate Thank you for Pion - it is just awesome :)

https://github.com/pion/ice

There is a very neat implementation of a TURN from Pion

https://github.com/pion/turn

Well done!

Disclaimer: I'm author of netbirdio - a similar project.

Using WebRTC makes it possible to have a tunnel from the browser directly. Combined with a virtual terminal it just makes it even cooler!

@pojntfx what do you think about that? Feasible with your implementation?

I've been playing with such functionality in Netbird but since it depends on Wireguard it is a bit tricky :)

Would love to have your feedback as well on our project

https://github.com/netbirdio/netbird

that is indeed a performance decrease. But the idea of this project is just great!

There is another way of combining WebRTC and Wireguard.

Netbird uses ICE protocol (used in WebRTC) for NAT traversal and then reuses that punched holes to establish a direct Wireguard tunnel.

https://github.com/netbirdio/netbird

P.S. I'm author of Netbird (formerly know as Wiretrustee)

I think that Wiretrustee network might be something to support in Kubesail as an app. We could have a look into the integration possibilities.

Give it a shot :)

https://github.com/wiretrustee/wiretrustee

Awesome project, guys! Best of luck with the further development.

P.S. Wiretrustee Author

Originally, the project was about hardware with storage capabilities and a software layer that would allow to access your data without configuring a router, leveraging Wireguard peer-to-peer capabilities. That is what the second part is about - the networking software.

We will post the design files soon. We just need to organize them a bit.

P.S. I'm a Wiretrustee author

Good answer! Wiretrustee uses kernel Wireguard if available, therefore the performance is the same as plain Wireguard.

There are some caveats though. We use a fixed mtu value of 1280 to be on a safe side while wg-quick dynamically detects the best value. We will improve it.

If the Wireguard kernel module isn't available (true for older Linux, Mac and Windows) then userspace implementation is used (wireguard-go) which is slower.