this post was submitted on 17 Nov 2025
65 points (95.8% liked)

Selfhosted

53030 readers
2021 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
65
Headscale vs Netbird vs Pangolin - How do you like selfhosting them? (podcast.james.network)
submitted 2 days ago by kiol@discuss.online to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
 

cross-posted from: https://discuss.online/post/30666278

Headscale - The main objective of Headscale is to provide a non-proprietary implementation of the Tailscale protocol & control server for hobbyists and self-hosters. Acts as a replacement for the listening servers while allowing you to continue using your existing clients applications. Funnel functionality is currently considered in beta status. Does not include a web ui by default.

Netbird - Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls. You can try their hosted service or selfhost it, or whatever.

Pangolin - is a self-hosted tunneled reverse proxy server with identity and context aware access control, designed to easily expose and protect applications running anywhere. Pangolin acts as a central hub and connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports or requiring a VPN. Combines traefik reverse proxy with Single Sign On and Wireguard. Meant to be selfhosted, but they do offer a hosted instance.

Pin codes, temporary links, password links for exposing services as a “funnel”. Similar to cloudflare tunnels, where users cannot be bothered to sort things out and just want a service exposed.

you are viewing a single comment's thread
view the rest of the comments
[–] vividspecter@aussie.zone 8 points 1 day ago* (last edited 1 day ago)

I've used both Headscale and a while ago, Netbird. Some of this will be in comparison to raw Wireguard, which I'm also using.

I'm currently using Headscale, but it does have some annoyances. There were breaking changes fairly often for a while, although it looks to have mostly stabilised now. Tailscale itself is pretty invasive with its routing rules and DNS which can break things or cause unexpected behaviour, which doesn't occur with raw Wireguard which is more predictable once you understand it. The Tailscale android client has been somewhat unreliable and clunky, although getting better, although third party Android clients for Wireguard, in turn, have also improved Wireguard usage dramatically. On the other hand, Headscale (or Netbird) are pretty much necessary if you are on a CG-NAT and need ipv4 access, and more usable if you want to build a mesh network.

I can't remember if I tested the service Netbird or the self-hosted version (I think both) but the main thing I remember is that it had poor support for ipv6, which I consider mandatory. Otherwise, the Android client seemed solid and it felt well-designed overall. And maybe the ipv6 support is better now.