Been meaning to do this. Tailscale was just there and easy to implement when I set my stuff up. Is it relatively simple to transition?

I mainly use Tailscale (and Zerotier) to access my CGNATED LAN, headscale will require me to pay a subscription for a VPS wouldn't it?

I really envy the guys who say only use them because they're lazy to open ports or want a more secure approach, I use them because I NEED them lol.

If (when?) Tailscale enshitify I'll stick with ZT a bit until it goes the same way lol, I started using it 1st, I don't know if ZT came before Tailscale though.

Bookmarking "headscale"!

I only recently started using Tailscale because it makes connecting to my local network through a Windows VM running in Boxes on Linux a hell of a lot easier than figuring out how to set up a networked bridge.

This sounds like a great alternative, and it looks like it can even work on a Synology NAS.

I can't unfortunately. They only feature I use is that fact I can access my ipv6 only server via an ipv4 only network.

Headscale is the tailscale backend server

We've implemented netbird at my company, we're pretty happy with it overall.

The main drawback is that it has no way of handling multiple different accounts on the same machine, and they don't seem to have any plans for ever really solving that. As long as you can live with that, it's a good solution.

Support is a mixed bag. Mostly just a slack server, kind of lacking in what I'd call enterprise level support. But development seems to be moving at a rapid pace, and they're definitely in that "Small but eager" stage where everything happens quickly. I've reported bugs and had them fixed the same day.

Everything is open source. Backend, clients, the whole bag. So if they ever try to enshittify, you can just take your ball and leave.

Also, the security tools are really cool. Instead of writing out firewall rules by hand like Tailscale, they have a really nice, really simple GUI for setting up all your ACLs. I found it very intuitive.

Is there an issue with Netbird's servers at the moment? In my testing devices are connected and reach eachother, but the web admin is missing a lot of functionality compared to what's in the docs. The peer devices section is there, but everything else, user settings, rules etc, isn't showing/says I don't have admin permission (of my own account.. Lol?)

For me personally, the next step is using Headscale - a FOSS replacement of the Tailscale control server. The Tailscale clients are already open source and can be used with Headscale.

Someone else could give other suggestions.

Wireguard if you're just using it yourself. Many various ways to manage it, and it's built in to most routers already.

Otherwise Headscale with one of the webUIs would be the closest replacement.

A bunch really, Headscale with Tailscale client, Nebula VPN, Netmaker, Zerotier.

I use the built in wireguard VPN in my router. If you just need local network access elsewhere it's usually really easy to setup if your router provides it. I would look into it!

ive been eyeing up netbird but havnt got around to trying it yet. its fully open source at least, and theyre based in germany is anyone cares about that

I use Nebula. It's lightweight, well-engineered and fully under your control. But you do need a computer with a fixed IP and accessible port. (E.g. a cheap VPS)

You can also use "managed nebula" if you want to enjoy the same risk of the control point of your network depending on a new business ;-)

Depends on your use case. If you're just looking to expose services and are ok having them publicly accessible, there's Cloudflare Tunnel, or you can run WireGuard on a cheap VPS

Yeah, as I said, it's a friendly reminder. I'm personally probably doing it this year. It's entirely possible that enshittification could come even years from now. It all depends on how their enterprise adoption goes I think. The more money they make there, the longer the individual users are gonna be left unsqueezed.

Netbird seemed to go in a similar way, though still good. I want to try zrok next, looks interesting

Nice to hear your experience with Nebula. I considered it when I went with Tailscale years ago. Now you gotta migrate off of lemm.ee as it's shutting down soon. :D

If you just have to talk from many devices to the one server sure, but Tailscale sure makes it easy for many to many. Also if a direct connection is impossible (e.g. firewall of china, CGNAT etc) tailscale puts a relay server in the middle for you.

Any helpful guids or links you feel like sharing for interested parties?

I did this was well awhile ago. Felt nice to completely control everything.

Can you elaborate how?

everything is open source except half of all things.

Lol

To be fair, anything the GUI clients do can be done with the CLI which is still open source and on all desktop platforms and headscale is literally their open source control server.

Huh, I actually didn't know this because I don't use Windows/macOS/iOS. Somehow completely missed this.

I spent an afternoon doing precisely that. Bought a domain, a vps, and setup pangolin. Can't believe how smooth it went.

I can recommend to take a look at netbird.io

Do you pay for a domain? They likely provide dynamic DNS (DNS). If you're lucky, they have an API for it, instead of an app, and you can configure a cronjob on your home server to run every 1-5 minutes (or more often, if your IP is super unstable!).

I use wireguard and have public DNS refer to private IPs.

For example if my server is accessible at 10.0.0.1 via wireguard then I point *.myserver.mydomain.com to that IP.

Sorry if I've misunderstood your question.

Nah, DNS is separate and these features are indeed pretty great. I think Headscale can also do them. I think I tested MagicDNS if I recall correctly.

It also doesn't cost them much of anything

Positive PR and little draw backs means that everyone is generally pretty happy