Application knowledge
NetBird: guides, comparisons and operations
NetBird connects devices, servers, sites and private services through a WireGuard-based zero-trust network. This hub brings together our technical fundamentals, cost and product comparisons, integration guides and practical migration paths for self-hosted NetBird environments.
Fundamentals & operations
What is NetBird?
Explainer · A clear explanation of architecture, WireGuard tunnels, the control plane, peers, policies and common use cases.NetBird self-hosting: Community Edition and Commercial Starter
Licensing · Which features remain free, what the commercial self-hosting licence adds and when it becomes relevant.NetBird updates: dashboard, SSH and self-hosting
Operations · New features and their implications for updates, high availability and production self-hosted environments.Architecture & integration
Connect NetBird to Authentik or Keycloak
Guide · OIDC, group sync through JWT claims, MFA responsibilities and common pitfalls with self-hosted identity providers.Expose internal services with the NetBird reverse proxy
Guide · Make internal applications available without port forwarding using TLS, SSO and WireGuard tunnels.Access Kubernetes privately with NetBird
Architecture · Connect the Kubernetes API and ClusterIP services through an operator, routing peer or sidecar without public endpoints.Comparisons & costs
NetBird vs. Tailscale vs. WireGuard
Comparison · A decision guide comparing control planes, self-hosting, identity, policies, licensing and operational effort.NetBird vs. Tailscale compared directly
Comparison · A direct comparison of self-hosting, cloud models, costs, control and suitability for business networks.NetBird vs. ZeroTier
Comparison · Architecture, security, self-hosting, costs and use cases for both mesh VPN approaches.NetBird vs. Twingate
Comparison · Self-hosted mesh VPN and cloud ZTNA compared by architecture, costs, control and security model.NetBird vs. Enclave
Comparison · Open-source self-hosting and managed ZTNA compared for control, operations and business requirements.Tailscale pricing: when self-hosting NetBird becomes cheaper
Costs · Seat pricing, self-hosting costs, sovereignty and the economic limits of a simple price comparison.Calculate VPN costs per user and device
Costs · Per-seat models, break-even points and fixed-price alternatives for growing user and device estates.Migration & replacement
Migrate OpenVPN to NetBird
Migration · Inventory certificates and access, connect an identity provider, build policies and migrate without a big-bang cutover.Migrate FortiGate SSL-VPN to NetBird
Migration · A traceable migration path covering inventory, IdP, peers, policies, routing peers and a controlled cutover.Tailscale alternative for enterprises
Migration · When switching makes sense and how cost, compliance, operations and data sovereignty affect the decision.Planning, integration and operations
Run NetBird in production
WZ-IT designs, installs and operates NetBird on your infrastructure. As an official NetBird Reseller Partner, we can supply Commercial Starter or Enterprise directly where required; Community Edition remains an option.
Free intro call
Let's talk about your project - no obligation
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.