> Their self-hosted option is a joke. There is no webui.
There's a community developed one:
I had looked at this. It doesn't seem like they've implemented anything to handle firewall rules. They may not even be able to, seeing as how that part of ZT is closed source. Also, this doesn't solve the problem with mobile apps, so the whole thing was a moot point for me.
Re:Tailscale raises $100M
by benoliver999 on Thursday May 05, 2022 @02:02AM
(#31270067)
The mobile app does work with the self hosted option, we use it at work.
The official ZT docs* say, "The mobile apps don't support custom roots." And I don't see any setting in the Android app to point it to any server.
Re:Tailscale raises $100M
by benoliver999 on Saturday May 07, 2022 @04:16PM
(#31298146)
Ah, that's because we run a controller node not a root. So you just add an ID as normal.
The software linked in the parent works with the mobile apps.
Compare that to ZeroTier where I can just tell someone, "install this app and punch in this Network ID". Also, ZT lets me control the entire network firewall from a centralized place. Where Nebula is doing it on a per-client basis and requires new certs if device groups change.
I don't want to talk up ZT too much though. Their self-hosted option is a joke. There is no webui. You have to do everything via the API...including the firewall rules; And you have to write those rules in the non-human readable format that their webui abstracts away. Worse still, their mobile apps won't work with the self-hosted option. I used them to get something up and running quickly, but I'll probably end up on Nebula anyways.