What is NetBird?
NetBird launched in 2021 and has grown to over 10,000 GitHub stars. In January 2026 the company closed a $10M Series A led by Pace Capital. The architecture is peer-to-peer: clients connect directly over WireGuard tunnels, brokered by a coordination server. Firewall traversal uses STUN/TURN when direct routing is not possible.
Read the full overview
The management plane provides SSO/OIDC user identity integration, access control rules, and activity logs from a single dashboard. NetBird operates in over 30 countries with teams in Europe, North America, and APAC relying on it for remote access and service-to-service connectivity.
NetBirdVPN & Remote AccessWireGuard-based mesh VPN and zero-trust network access
Key capabilities
- Peer-to-peer WireGuard tunnels - automatic NAT traversal, no open inbound ports required.
- SSO integration - connect Okta, Azure AD, or Google for user-based access control.
- Network policies - group-based access rules defining which peers can reach which resources.
- Self-hosted control plane - run the management server and TURN relay on your own infrastructure.
- Activity logs - see which peers are connected and audit access events.
- Mobile clients - iOS and Android apps for remote workers.
Where NetBird fits
- Remote access - replace legacy VPN for employees accessing internal resources.
- Service mesh (east-west) - encrypted channels between microservices without a sidecar proxy.
- IoT and edge connectivity - bring remote sensors and edge devices into a managed private network.
- Kubernetes networking - community operator and Terraform provider for cluster-to-cluster access.
Positioning and limitations
NetBird sits between Tailscale (proprietary, usage-limited free tier) and raw WireGuard (powerful but manual). It gives you Tailscale's ease of use with the freedom to self-host the control plane, MIT-licensed clients, and no per-seat caps on the self-hosted plan. Compare with ZeroTier and Headscale for feature parity, then weigh the management overhead of each.
Traditional VPNs were designed for the hub-and-spoke enterprise of 2005, not distributed teams and cloud workloads. NetBird's mesh topology keeps latency low and limits the blast radius of a compromised node by access policy, not network perimeter. The WireGuard foundation provides modern cryptography with a minimal attack surface - roughly 4,000 lines of kernel code versus OpenVPN's 100,000+.
“WireGuard-based mesh VPN and zero-trust network access”
Technical details
- Access
- Self-hosted
- Source model
- Open source
- License
- Verify license
- Founded
- 2021
- Headquarters
- Berlin, Germany
- Data location
- EU (self-hostable: any infrastructure)
- Pricing model
- Freemium
- Pricing details
- Software and service terms ↗
- API
- Available
- API documentation
- Read API documentation ↗
- Version reference
- 0.80.0 ↗
- Source checked
- October 3, 2026
- Website
- netbird.io ↗
- GitHub
- Source repository ↗
What to verify
Profile audiences: DevOps Engineers, System Administrators, IT Teams.
- Confirm current features, licensing and support terms.
- Validate deployment, data location and access control.
- Test integrations, exports and recovery workflows.
Reviews of NetBird
No published reviews yet.
Loading review form…
