gravitl/netmaker

Features

• WireGuard Management - Provides a comprehensive platform for setting up and managing WireGuard-based peer-to-peer tunnels.
• Encrypted Tunneling Protocols - Uses high-performance kernel-level cryptographic primitives to establish secure, point-to-point encrypted tunnels.
• Software-Defined Perimeters - Hides network resources from the public internet to enforce a software-defined perimeter.
• Zero Trust Networking - Enforces granular, identity-based security policies to restrict communication and ensure zero-trust access.
• Mesh Overlays - Maintains a dynamic, decentralized mesh topology where nodes establish direct connections to minimize latency.
• Networking and Connectivity - Automates secure device connectivity across complex network environments without requiring manual port forwarding.
• Mesh Networking - Connects distributed devices directly using encrypted tunnels to create high-performance virtual private networks.
• Self-Hosted Infrastructure - Allows running the entire networking stack within private environments to maintain full data sovereignty.
• Cloud Application Connectivity - Links disparate on-premise data centers and public cloud environments into a unified, seamless private network.
• DNS Resolution - Provides internal hostname resolution to simplify service discovery by mapping hostnames to private IP addresses.
• Encrypted Relaying - Redirects traffic through intermediary nodes to maintain connectivity when direct peer-to-peer paths are blocked by firewalls.
• Management Dashboards - Provides a centralized interface for configuring, monitoring, and scaling secure tunnels and gateway connections.
• Automated Node Provisioning - Simplifies large-scale infrastructure deployment by automatically registering new devices using pre-authentication keys.
• Identity-Aware Infrastructure - Integrates external identity providers to enforce granular, role-based access policies across distributed device fleets.
• Network Access Control - Defines granular rules to control traffic flow and restrict communication between connected nodes.
• Network Segmentation - Creates isolated, encrypted network overlays to enforce security boundaries between departments, environments, or workloads without requiring separate physical infrastructure.
• Control Planes - Coordinates distributed network state and configuration across edge nodes from a centralized management server.
• VPN Clients - Provides a client interface for users to authenticate, manage their connection status, and tunnel internet traffic through secure network infrastructure.
• Overlay Networks - Self-hosted platform for managing peer-to-peer virtual networks.
• Container Networking Tools - Extends secure virtual networking directly into containerized clusters to enable private service access.
• Multi-Tenancy - Provisions and maintains isolated network environments for multiple customers through a centralized interface.
• DNS-Based Discovery - Automates internal hostname resolution by mapping network addresses to human-readable names across distributed infrastructure.
• Gateway Configuration - Configures network appliances and routers to act as entry points, bridging remote traffic into local infrastructure.
• High Availability Routing - Detects node failures and dynamically reroutes traffic to maintain continuous connectivity.
• Multi-Cluster Service Connectivity - Automates network configurations across distributed Kubernetes clusters to enable seamless cross-environment service communication.
• Service Discovery - Automates internal hostname resolution and DNS management to simplify service discovery across distributed networks.
• Subnet Gateways - Deploys specialized gateway nodes to bridge isolated private subnets and external resources into the virtual mesh.
• Centralized Identity Management - Provides a unified interface to oversee connectivity status, device configurations, and domain name assignments.
• Identity Provider Integrations - Integrates with external identity providers to manage user logins, automate device registration, and enforce multi-factor authentication.
• Just-in-Time Access - Provides temporary, time-bound network permissions to reduce the attack surface.
• Tag-Based Policies - Groups network nodes using metadata labels to apply consistent access policies across dynamic infrastructure without manual configuration.
• Static IP Enforcement - Assigns persistent network identifiers to remote devices to ensure consistent access control and simplify resource whitelisting across the network.
• Address Conflict Resolution - Maps virtual IP addresses to destination networks to allow communication between environments with overlapping address spaces.
• Tunnel Agents - Deploys background agents to automate the creation and maintenance of secure peer-to-peer network tunnels.
• Service Exposure - Enables secure access to internal cluster services via private IP or DNS addresses.
• Device Identity Management - Streamlines the registration of new devices using secure enrollment keys and supports token regeneration to maintain high security standards.
• Access Policy Automation - Manages network access rules programmatically to integrate security configurations into deployment workflows.
• Administrative Change Auditing - Maintains a verifiable history of all administrative configuration updates and management actions.
• Network Monitoring Systems - Tracks performance metrics and connectivity status across the network to ensure reliable operation.
• Endpoint Integrations - Connects diverse client types and legacy devices to ensure consistent communication across network infrastructure.
• Relay Selection Optimization - Monitors latency to dynamically assign the fastest available relay server for traffic.
• OAuth Authentication - Integrates external identity providers to manage user logins and enforce multi-factor authentication for network access.
• Embedded Secure Connectivity - Integrates networking libraries directly into software to establish zero-trust communication channels.
• Audit Log Exports - Forwards platform events and administrative actions to external security systems for centralized monitoring.
• Network Access - Logs individual user sessions and accessed resources to ensure visibility into internal network activity.

Star history