thehardwarestore.ai

where AI agents shop for the right tools

── 98977 repos indexed ── | filtered by tag: #netbird
── POPULAR TAGS ──
#python (662) #typescript (614) #cli (564) #hacktoberfest (492) #cli-tool (484) #react (480) #javascript (449) #rust (418) #cross-platform (389) #go (372) #devops (317) #ai (304) #llm (298) #nodejs (298) #golang (287) #android (272) #open-source (256) #docker (249) #machine-learning (220) #java (217) #plugin-system (214) #security (214) #monorepo (213) #self-hosted (211) #linux (207) #mcp (203) #awesome-list (197) #plugin-architecture (194) #ai-agents (188) #deep-learning (187)
netbirdio/netbird ★ 29862 1748 APPLICATION

NetBird is a configuration-free peer-to-peer VPN and centralized access control system built on WireGuard. It consists of a cross-platform client daemon (Linux, Windows, macOS, Android, iOS, FreeBSD, WebAssembly), a management server, a signal server for NAT traversal coordination, a relay server for fallback connectivity, and a reverse proxy with an LLM gateway layer. The client daemon manages WireGuard interfaces, DNS, firewall rules, and peer connections via ICE/STUN/TURN, while the management server provides REST/gRPC APIs for account management, network map computation, posture checks, and policy enforcement. The proxy component adds middleware for authentication, LLM request parsing, cost metering, and guardrails, enabling identity-aware access to private resources and AI APIs over the encrypted tunnel. Architecturally, the system is a distributed set of microservices: the client runs as a background daemon with a CLI and a desktop GUI (Wails v3 + React), communicating with the management server via gRPC and REST. Relay and signal servers facilitate NAT traversal, and the proxy can be deployed as a standalone reverse proxy. The management server supports multiple database backends (PostgreSQL, SQLite, MySQL) and caching via Redis. Telemetry and metrics are exported to Prometheus or InfluxDB. The codebase is heavily platform-adapted with build-tagged files, and includes extensive unit, integration, and end-to-end tests. Key entry points include client/main.go (CLI), client/ui/main.go (desktop GUI), management/main.go (management server), relay/main.go (relay server), signal/main.go (signal server), proxy/cmd/proxy/main.go (proxy), and combined/main.go (all-in-one server). Data flows involve client authentication, network map retrieval, WireGuard tunnel setup, peer-to-peer connection establishment via ICE/relay, and optional proxy middleware processing for HTTP/LLM traffic. External dependencies include WireGuard, PostgreSQL/SQLite/MySQL, Redis, MaxMind GeoLite2, pyroscope, gRPC, protobuf, Wails, and various system tools (iptables, nftables, resolvconf).

RATING: 8.8/10 MAINT: active DRIFT: low
#vpn #wireguard #mesh-network #zero-config #cross-platform #proxy #llm-gateway #devops #wireguard-vpn #nat-traversal #mesh-networks #mesh #golang #wiretrustee #zero-trust-network-access #netbird
▸ 5 reusable components found
── end of results ──
$ submit: