NetBird

WireGuard peer-to-peer overlay with management and signal servers and a relay fallback for blocked peers.

Provider
default
Category
Edge
Properties · 5 set by this component
propertytypevaluesrequiredkind defaultthis component
activeActiveboolean—nofalse▸ false
bgpboolean—nofalse▸ false
hosting · component propertyenumcloud | self-hostednocloudinherited
idpIntegration · component propertyboolean—nofalseinherited
managedboolean—nofalse▸ true
peerTypeenumsite-to-site | point-to-site | cloud-to-cloudno—▸ point-to-site
relayFallback · component propertyboolean—notrueinherited
routingPeer · component propertyboolean—nofalseinherited
throughputMbpsinteger—no—inherited
tunnelTypeenumipsec | ssl | wireguardno—▸ wireguard
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "netbird", component: "netbird" }
Other VPN gateway products · 18
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# NetBird: WireGuard peer-to-peer overlay coordinated by management and signal servers
# with a Coturn relay fallback for peers that cannot connect directly. "How NetBird works"
# states the private key never leaves the machine, so relayed traffic stays encrypted.
schemaVersion: "1"
type: "component"
id: "netbird"
kind: "vpn-gateway"
provider: "default"
docs: "https://docs.netbird.io/about-netbird/how-netbird-works"
defaults:
  managed: true
  tunnelType: "wireguard"
  peerType: "point-to-site"
  bgp: false
  activeActive: false
properties:
  hosting:
    type: "enum"
    values: ["cloud", "self-hosted"]
    default: "cloud"
  relayFallback:
    type: "boolean"
    default: true
  idpIntegration:
    type: "boolean"
    default: false
  routingPeer:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/netbird.md