What is NetBird?
NetBird launched in 2021 and has grown to over 10,000 GitHub stars. In January 2026 the company closed a $10M Series A led by Pace Capital. The architecture is peer-to-peer: clients connect directly over WireGuard tunnels, brokered by a coordination server. Firewall traversal uses STUN/TURN when direct routing is not possible.
Read the full overview
The management plane provides SSO/OIDC user identity integration, access control rules, and activity logs from a single dashboard. NetBird operates in over 30 countries with teams in Europe, North America, and APAC relying on it for remote access and service-to-service connectivity.
Key capabilities
- Peer-to-peer WireGuard tunnels - automatic NAT traversal, no open inbound ports required.
- SSO integration - connect Okta, Azure AD, or Google for user-based access control.
- Network policies - group-based access rules defining which peers can reach which resources.
- Self-hosted control plane - run the management server and TURN relay on your own infrastructure.
- Activity logs - see which peers are connected and audit access events.
- Mobile clients - iOS and Android apps for remote workers.
- Remote access - replace legacy VPN for employees accessing internal resources.
- Service mesh (east-west) - encrypted channels between microservices without a sidecar proxy.
- IoT and edge connectivity - bring remote sensors and edge devices into a managed private network.
- Kubernetes networking - community operator and Terraform provider for cluster-to-cluster access.
NetBird sits between Tailscale (proprietary, usage-limited free tier) and raw WireGuard (powerful but manual). It gives you Tailscale's ease of use with the freedom to self-host the control plane, MIT-licensed clients, and no per-seat caps on the self-hosted plan. Compare with ZeroTier and Headscale for feature parity, then weigh the management overhead of each.
Traditional VPNs were designed for the hub-and-spoke enterprise of 2005, not distributed teams and cloud workloads. NetBird's mesh topology keeps latency low and limits the blast radius of a compromised node by access policy, not network perimeter. The WireGuard foundation provides modern cryptography with a minimal attack surface - roughly 4,000 lines of kernel code versus OpenVPN's 100,000+.
Technical details
- Access
- Self-hosted
- Source model
- Open source
- Founded
- 2021
- Headquarters
- Berlin, Germany
- Pricing model
- Freemium
- API
- Available
- Published release
- Stable — client, signal server, and management server 0.31.2 ↗ (checked )
- Website
- netbird.io ↗
Official resources
Reviews of NetBird
No published reviews yet.
Loading review form…
