Full disclosure: I work for one of the companies building such tooling (enclave.io). So while this is a bit of a shameless plug for https://enclave.io, as an architecture and technology it's a a perfect fit to mature your beyond OpenVPN while maintaining feature parity like network level access, MFA and AAD integration. Source: almost 2 years ago

There's a lot of marketing noise in the VPN replacement and ZTNA space atm. We (https://enclave.io) have made a small microsite to try and help shine a light on the different architectures, vendors and options available, let us know if it's helpful. Source: about 2 years ago

This comment is also a bit of a plug for https://enclave.io (sorry!) but getting easy, private access to internal systems on AWS is a perfect fit, especially as a start-up. Enclave is one of several new tools that build a different kind of tunnel - an overlay network directly between hosts, not the traditional hub and spoke VPNs (like OpenVPN). Source: over 2 years ago

If you're looking for a list of ZTNA vendors, we (https://enclave.io) put a vendor directory together based on architecture rather than marketing https://zerotrustnetworkaccess.info/ which you mind find useful. Source: over 2 years ago

Damn it, great spot - thank you https://enclave.io * (that's pretty funny :p). Source: over 2 years ago

I tried Nebula, but ended up with Yggdrasil instead. https://yggdrasil-network.github.io/ Unlike Nebula, it gives you an IPv6 address (actually, millions of them per node, if needed). They now also have a userspace only SOCKS 5 proxy server that can connect your app to the whole network without forcing user to install drivers or to mess with their network configuration. - Source: Hacker News / 3 months ago

Yggdrasil is p2p ipv6 e2ee. https://yggdrasil-network.github.io/ Last I checked, it hasn't solved DNS yet (there are unofficial projects trying to do that). I tested a small private network with a few devices and it worked very well. - Source: Hacker News / 9 months ago

Isn't yggdrasil[1] supposed to be the New Internet? If not, why Tailscale specifically, and not Netbird, Nebula, Netmaker or some other competitor? The article is indeed very well written, but gives the wrong vibes, like something's coming: acquisition, pivot, split, shutting down, etc. Also, "we're re just getting started", the famous last words. Just to balance my healthy mistrust, I'd like to add that I'm a... - Source: Hacker News / 9 months ago

Yggdrasil can use WiFi on Android, I haven't tried it yet - https://yggdrasil-network.github.io/. Yggdrasil gives you the ability to use TCP/IP applications over its mesh network but doesn't offer any end-user functionality itself. Manyverse can use WiFi for decentralised social networking - https://www.manyver.se/. They're currently in the middle of a rewrite of the backend and a protocol switch away from Secure... - Source: Hacker News / over 1 year ago

There are more state-of-the-art routing protocols working to solve this problem for mesh networks. A couple examples of projects I have been involved in: https://yggdrasil-network.github.io/ https://github.com/matrix-org/pinecone. - Source: Hacker News / over 1 year ago