Nebula: A Mesh Overlay When Tailscale Isn't Enough

Fri, 16 Feb 2024 14:45:00 +0000

Tailscale is the right answer for most people who want their devices to reach each other over an encrypted mesh without port-forwarding. I recommend it constantly. It’s WireGuard underneath, the client is excellent, and the magic that lets two devices behind separate NATs find each other just works. There’s one thing it asks of you that some of us eventually stop wanting to give: trust in a coordination server you don’t run. Tailscale’s control plane — the thing that tells your devices about each other and hands out keys — is hosted by Tailscale. For a homelab that’s usually fine. But if you want the entire system to keep working when a company’s servers don’t, or you simply want to own the control plane end to end, you reach a point where you want something else. That something is Nebula.

Nebula - vo.rs

Nebula: A Mesh Overlay When Tailscale Isn't Enough