mesh VPN / secure network access
Tailscale's open-source client daemon and CLI that build an identity-aware WireGuard mesh VPN with NAT traversal and a coordination service.
Solves the same problem with a different architecture or at a different layer. Expect to rewrite the integration.
Choose it when you must own the coordination control plane instead of Tailscale's SaaS, at the cost of running and maintaining your own server.
An open source, self-hosted implementation of the Tailscale control server
Choose it for a fully decentralized Rust mesh with no control-plane server, accepting a smaller client ecosystem and LGPL terms.
A simple, decentralized mesh VPN with WireGuard support.
Choose it when you need TCP/TLS hub-and-spoke VPN with a huge installed client base rather than NAT-traversing mesh peers.
OpenVPN is an open source VPN daemon
Choose it for a self-hosted zero-trust access platform that also covers API/AI gateways, accepting AGPL and a heavier stack.
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
Choose it for a compact self-hosted WireGuard mesh in Rust with file-based peer management when you don't need SSO or ACLs.
A private network system that uses WireGuard under the hood.
Choose it when you need audited SSH/Kubernetes/database access with short-lived certs rather than full mesh networking, under AGPL.
The easiest, and most secure way to access and protect all of your infrastructure.
An earlier or more limited way to do the job. Still the right call when you need something small, proven, or CPU-only.
Choose it when clients must use built-in OS IKEv2/IPsec support with zero install, accepting hub-and-spoke topology and an older crypto stack.
Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android.
Does the same job, but ships as an app. Useful to a person, not swappable into a codebase.
Choose it for a GUI commercial no-logs VPN service instead of running your own mesh.
The Mullvad VPN client app for desktop and mobile