all 11 comments

sorted by: hot top controversial new old
[+] 19 points 1 month ago* (last edited 1 month ago) (1 child)
[–] 4 points 1 month ago* (last edited 1 month ago)

Headscale is a good fit for individuals wanting to manage a work from anywhere private network and monitor via a GUI. Also I suspect for businesses wanting to avoid Tailscale's increased prices. Works fine with the regular tailscale client as well. It's all doable in docker containers for security. Does Saml identity etc so you can do the auth via an identity provider. Probably more secure than Tailscale's backend given their size and recent embrace of AI integration

  • source
  • [–] 3 points 1 month ago (3 children)
  • [–] 4 points 1 month ago

    It's nice to have alternatives but I don't understand why we can't have a fully FOSS implementation of overlay networking without needing a company trying to up-sell us to premium features. I don't like to rely on companies to maintain a product that's a critical part of my infrastructure.

  • source
  • parent
  • [–] 2 points 1 month ago

    I've been using netbird for couple of months now.

    The good:

    • I was able to do everything using the free version (exit node, DNS)
    • in theory you can self-host it (haven't tried)
    • it has an Android client app in f-droid
    • stable, everything works really nice

    The bad:

    • it eats up a lot of battery on Android. There's a bug open for it for months now. After playing around with some settings I got it to the point where the battery usage goes up on mobile data only. Once I'm back to WiFi it's ok. I have deployed netmaker locally and testing it is on my to do list but as things are now I can go through the day without issues with netbird and I'm kind of hoping they will fix it before I'll have the time to test netmaker

    Netmaker was easy to setup locally but I don't know if it can fully replace netbird.

    I tried headscale and it wasn't easy to set up. From what I read tailscale apps treat self-hosted solutions as an afterthought so it's not as easy to set up. I would be worried they will drop it and force you to use their servers at some point. Netbird at least is marketed as a self-hosted solution.

  • source
  • parent
  • [–] 2 points 1 month ago

    When I was going for a selfhosted mesh tunnel solution this year, I originally steered toward Netbird given that Tailscale (the client) is rather obtuse to connect with alternate control servers.

    I don't actively use Netbird, but rather did go with Headscale in the end. If you're satisfied with and your requirements for Netbird don't include anything that deviates from their setup scripts, I'd imagine your deployment would go fine. My requirements and my strong desire to have everything relevant in my selhost deployments be fully to mostly declarative, and be trackable via git had me finding out how incompatible Netbird is for me. I don't think I have seen an app more averse to being deployed declaratively, which as it turns out is likely the reason their deployment scripts exist in the first place.

    The there's the (at the time at least) really confusing and contradictory documentation that describe two different generations of potential deployment of the software. Good documentation is half of what makes software deployments maintainable, and Netbird had (and might still have) outright misleading documentation that will have you looping in circles attempting to figure out reasonably standard functionality like using external oidc for accounts.

  • source
  • parent
  • [–] 3 points 1 month ago (1 child)
  • [–] 2 points 1 month ago

    How about a client that isn't bloated and constantly being updated.

  • source
  • [–] 1 point 1 month ago

    Rayfish.xyz

    Its de-centralized and very simple to setup. It's alpha and the devs are breaking it all the time. But it's fun to play with and see where it goes.

    Forget that it is Ai generated. Imagine AI as your number one enemy and what you would do if you could get one of your enemy's swords. Since AI can't develop new ideas, just re-use old code, that means the results are actually ours. Now at some point we stop letting AI do all the work and then we take that work and make it do what we want. Like Ukraine flying tank mines on quadcopters. Yes! Ruzzia! Bring us more mines!

    Anyway, I think it's the easiest VPN network system I've tried so far.

  • source
  • 5 comments in c/opensource@lemmy.ml view that post
    [–] 37 points 1 month ago*

    Oh cool. I wonder how this is different than headscale. Let's take a look.

    Headscale

  • source
  • [–] 9 points 1 month ago

    I find it frustrating that Manny of these projects use discord for communication.

  • source
  • [–] 5 points 1 month ago

    Been following this project for a while but did it ever get a formal security audit?

  • source
  • [–] 4 points 1 month ago (1 child)

    tailscale wasn't open source? wtf, til.

  • source
  • hideshow 1 child comment
  • 4 comments in c/opensource@programming.dev view that post
    [–] 13 points 4 months ago (2 children)

    Fun fact none of you probably care about: I finally set this up last weekend.

    I really like it so far for keeping my phone sync'd up with my self hosted services. In the past I needed to flip between public and internal address if I wanted to bypass routing traffic up to my vps while laying in a bed 20ft from my server. Now, tail/headscale handles that for me.

    Glorious.

  • source
  • hideshow 2 child comments
  • [–] 6 points 4 months ago (1 child)

    So the main parts that you need aside from Wireguard support in your OS, is the Tailscale client and the Headscale hosted server?

    Is the client fully FOSS? Or are there still any parts of this typical deployment that could be rug-pulled if the company gets enshittified?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 4 months ago

    Great question! You use the Tailscale clients which are fully open source. Headscale is compatible with them, and if TS gets sketchy (which, very well may happen), those clients would need a fork.

    Tailscale's network is with paying for it you need enterprise features and they do have a free tier. I'm not going to lock myself in there though and prefer a full FOSS option.

  • source
  • parent
  • [–] 5 points 4 months ago

    Love seeing more self-hosted alternatives mature. Having control over your own infrastructure is worth the extra setup for a lot of people.

  • source