
Zscaler
Cloud-based zero trust security platform providing secure access to applications without traditional VPNs
Discover top open-source software, updated regularly with real-world adoption signals.

Zero-config peer-to-peer VPN with centralized access control
NetBird creates a WireGuard-based overlay network that auto-connects devices, provides granular policies, SSO/MFA, and a web UI, simplifying secure private networking for teams and homes.

NetBird delivers a configuration‑free, WireGuard‑based overlay that automatically connects machines across any infrastructure. By handling NAT traversal, peer discovery, and fallback relays, it eliminates the need for manual VPN gateways, port forwarding, or complex firewall rules.
A unified admin web UI lets you define granular access policies, groups, and device posture checks, while supporting SSO, MFA, and IdP integrations. The platform includes a public API, setup keys for bulk provisioning, and a Terraform provider for automated deployments. Agents run on Linux, macOS, Windows, Android, iOS, OpenWRT, and Docker, ensuring broad compatibility.
Start instantly with NetBird Cloud or self‑host using a Docker‑compose script on a Linux VM (1 CPU, 2 GB RAM) with ports 80/443 TCP and 3478, 49152‑65535 UDP open. The quick‑start script configures the management service, TURN relay, and required dependencies, enabling you to scale from a home lab to a distributed team.
When teams consider NetBird, these hosted platforms usually appear on the same shortlist.
Looking for a hosted option? These are the services engineering teams benchmark against before choosing open source.
Remote development environment
Developers connect laptops to office resources securely without VPN configuration.
IoT device mesh
Devices communicate over an encrypted peer‑to‑peer network without opening inbound ports.
Multi‑cloud connectivity
Bridge workloads across AWS, GCP, and on‑premise data centers via seamless tunnels.
Home office network
Family members access shared drives and printers as if on the same LAN.
Yes. The server must be reachable on TCP ports 80 and 443, and UDP ports 3478 and 49152‑65535.
Yes, NetBird is released under the BSD‑3‑Clause license.
Yes, it supports SSO integrations and JWT group synchronization with popular IdPs.
Agents run on Linux, macOS, Windows, Android, iOS, OpenWRT, Docker, and serverless environments.
NetBird uses WebRTC ICE with STUN servers to discover candidates and falls back to a TURN relay when direct peer‑to‑peer connections fail.
Project at a glance
ActiveLast synced 4 days ago