[HowardStark]

Nebula[0] addresses this and is IMO an improvement over WireGuard. Came out of Slack originally, and it supports peer discovery, NAT hole punching, and some other cool features. Also still uses the Noise Protocol.

In practice, the extra networking features + better first class peer config management baked in is very nice (Nebula’s “lighthouses” are configured with a tool similar to DSNet for Wireguard[1])

[0] https://github.com/slackhq/nebula [1] https://github.com/naggie/dsnet

[sneak]

I use Nebula but the relay config is somewhat clunky and the macOS port is pretty buggy.

[greenavocado]

What's the story with removing uncooperative endpoints from Nebula?

[halJordan]

So now we're back "tailscale but with different steps"

[justahuman74]

tailscale appears to be a paid product with a free tier, nebula (while DIY) is free