I’ve been running netmaker now for little over a year in conjunction with keycloak. This was back when tailscale didn’t have support for oicd SSO in their lower-tier offering. I’ve had some difficulty with upgrades and connectivity behind various NAT scenarios. One issue that I found difficult: If a client updated, it would not longer connect until the server side software was updated. This meant I had to exclude netclient from package upgrades. Overall, when it works, it works great. There have been some improvements. I would like to see networks statistics get included in their free/open source offering.

I struggled to get netmaker to work. Everything showed connected and green, yet nodes couldn’t ping each other. There is very little troubleshooting guides and I was stuck. The documentation is randomly outdated (I don’t think there is a single screenshot that matches the UI I was seeing) and the only tip I found on the website was to change the MTU which did nothing for me. The other tip on GitHub was “check your firewall” which I’m not sure what that means. I thought the entire point of netmaker was to bypass that.

Oh and I tried to signup for the cloud offering instead of self hosting it, and got a generic “Tenant failed setup” email. Again, no action to take…

I got headscale and Netbird to work, but I much preferred the latter. It just works.

Edit: to add, the default installer results in 2 broken containers in the generated docker compose file (coredns and TURN server) that I had to fix manually by changing their tags.

I used it about a year and a half ago and I had the same takeaway. When I got it working, it worked well and was reasonably stable. But I basically could not upgrade without performing a fresh install after a few months. I filed it away as something to revisit as the product matured and more guarantees around upgrades were able to be offered

Yeah, I’m definitely keeping an eye on it because I like the way it manages wireguard clients more, but it’s still pretty rough.

Blog post for context: https://www.netmaker.io/resources/netmaker-goes-open-source-...

Funny how they go from sspl which is a more "free" license to a less free license that is agpl in the name of "open source". Cool

They're moving to Apache, not AGPL?

Open Core at best:

> All content that resides under the "pro/" directory of this repository, if that directory exists, is licensed under the license defined in "pro/LICENSE".

Discord for Support? That would require me to either use my personal discord for work, or make a work discord.

Sure. Do the latter.