OSS Tanbou
View on GitHubProject website

NetBird — combine WireGuard mesh networking with identity-aware access control

OSS scale score 276.8OSS health 100Update pace 111 commits/30d
About these scores

OSS scale score is an unbounded metric that log-compresses and weights Stars, Watchers, Forks, and Contributors. Discovery score is the current OSS scale score minus the score at discovery. Update pace is commits in the last 30 days, growth momentum is the OSS scale score difference within the recent observation window, and OSS health is a 0–100 rating based on available recency, Community Health, and release data.

Stars
29,392
Primary language
Go
License
Not determined
Repository last updated
Sep 18, 2026

Overview

NetBird is a zero-trust networking platform that connects devices, users, and agents through a WireGuard-based encrypted overlay while centrally managing SSO/MFA, policies, routes, and private DNS, with relay fallback when direct P2P is unavailable.

Features and best fit

Based on official documentation; not hands-on tested · Content checked:

Automate peer-to-peer WireGuard connectivity with NAT traversal

Agents use ICE/STUN to discover connection candidates, establish direct P2P when possible, and fall back to relays when necessary.

Sources: [2][3]

Manage identity, policy, DNS, and routes centrally

SSO/MFA, groups and rules, posture checks, private DNS, routing, SSH, and automation are exposed through the management plane.

Sources: [2][3]

For zero-trust private networking without hand-configuring VPN peers

It suits remote access, homelabs, multi-cloud networks, and private services that need identity-aware access policies.

Sources: [2]

Separate BSD client/common code from AGPL control-plane components

Most code is BSD-3-Clause, while management/, signal/, relay/, and combined/ are AGPLv3. Check licensing at the component level.

Sources: [2][4]

Official sources

  1. [1]netbirdio/netbird repository(2026-09-20)
  2. [2]NetBird README(2026-09-20)
  3. [3]NetBird documentation(2026-09-20)
  4. [4]NetBird mixed license notice(2026-09-20)
Supplemental curator note

NetBird goes beyond WireGuard tunnels by combining peer discovery, NAT traversal, relays, identity integration, and centralized access policy. Most repository code is BSD-3-Clause, while `management/`, `signal/`, `relay/`, and `combined/` are AGPLv3, so the repository should not be treated as a single BSD work.

Try it in 3 steps

  1. 1

    Get the source

    git clone --depth 1 https://github.com/netbirdio/netbird.git
  2. 2

    Enter the repository

    cd netbird
  3. 3

    Check the official steps

    Continue with the commands in the README Installation, Quick Start, or Getting Started section.

    find . -maxdepth 1 -iname 'README*' -exec sed -n '1,220p' {} \; -quit
Check the official README

Growth

Growth trends · Last 30 days

29,392 Stars

Trend data is still being collected.

Development activity

Last 90 days · weekly

Commits (last 30 days)
111
Open PRs
307

Development activity is still being collected.

Built with

Categories and tags

Categories

Tags

GitHub data

GitHub dataView detailed GitHub data
View on GitHub

GitHub Topics

  • wireguard
  • wireguard-vpn
  • vpn
  • nat-traversal
  • mesh-networks
  • mesh
  • golang
  • wiretrustee
  • zero-trust-network-access
  • netbird
Stars
29,392
Forks
1,688
Watchers
137
Open issues
1,218
Contributors
161
Primary language
Go
License
Not determined
Repository last updated
Sep 18, 2026
Write a related article

Share a guide or use case for this OSS in Markdown. Articles are published after administrator approval.

Report incorrect information

Tell us if any listing information is incorrect or outdated.