NetBird
Open-source Zero Trust Networking platform replacing traditional VPNs with WireGuard-based mesh overlay.
About NetBird
NetBird is an open-source Zero Trust Networking platform that replaces traditional VPNs with a WireGuard-based peer-to-peer mesh overlay. It combines configuration-free networking with centralized access control, enabling secure remote access for distributed teams and hybrid cloud infrastructure.
Every machine runs a lightweight agent that auto-connects over encrypted WireGuard tunnels. No open ports, no complex firewall rules, no VPN gateways. Includes SSO/MFA, device posture checks, DNS management, activity logging with SIEM streaming, and a Terraform provider for infrastructure-as-code. When direct P2P fails (e.g., carrier-grade NAT), connections fall back to relay servers. Licensed under BSD-3 with AGPLv3 for management/signal/relay components.
Key Features
- WireGuard-based P2P mesh overlay with automatic NAT traversal
- Granular access policies with SSO, MFA, and device posture checks
- IdP group sync (Okta, Azure, Google, GitHub) and periodic re-authentication
- Admin web UI, Terraform provider, Ansible collection, and REST API
Self-Hosting Notes
Go-based. Docker Compose quickstart. Requires Linux VM, public domain, ports 80/443/3478. 5-minute setup with getting-started script. Supports SSO (Okta, Azure, Google, GitHub), MFA, posture checks, and IdP group sync.
More in Security, Password, & IT Management
1Panel
Modern open-source Linux server control panel with web interface.
AdGuard Home
Network-wide software for blocking ads and tracking at the DNS level.
Authelia
Comprehensive single sign-on (SSO) and multi-factor authentication (MFA) portal.
Authentik
Flexible, open-source identity provider supporting SSO, MFA, and enterprise federation.