NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
Repository Index
65,264 visible repositories in the index
1–19 of 19 · Most stars
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Cloudflare Tunnel client
- cloudflare
- reverse-proxy
- cloudflare-tunnel
- zero-trust-network-access
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
- openvpn
- dns-over-tls
- mullvad
- windscribe
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
- cybersecurity
- zero-trust
- zero-trust-network-access
- zero-trust-security
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.
Pomerium is an identity and context-aware access proxy.
- reverse-proxy
- iam
- beyondcorp
- identity
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
- networking
- vpn-2
- appsec
- network
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
- abac
- ai-gateway
- api-gateway
- beyondcorp
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
Open Source HTTP Reverse Proxy Cache and TSDB Query Accelerator
- prometheus
- dashboards
- caching
- accelerator
A rest application to update firewalld rules on a linux server
- firewalld
- firewalld-configuration
- golang
- rest-api
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
A routing client based on sing-box rule lists. Switch between multiple Tailscale networks and access the internet through your chosen Tailscale exit node.
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.
- audit
- bastion
- firewall
- networking