NetBird joins phones, laptops and the home server to one WireGuard network without opening a port per device. Peers connect directly, fall back to your own relay when NAT blocks them, and access follows the rules you set in the admin UI.
How NetBird stacks up against other networking apps. Add or remove apps to change the comparison.
| Requirement | NetBird | |
|---|---|---|
| Price | Free + Paid | Free |
| Web UI | Yes | Yes |
| Architecture | x86 + ARM | x86 + ARM |
| Min hardware | 1 CPU · 2 GB RAM | Not stated |
| Containers | 3Plus Dashboard, Traefik | 1The app alone |
| Database | SQLite | SQLite |
| Runtime | Go | Node |
| Docker | Yes | Yes |
| Linux package | Yes | – |
| iOS | Yes | – |
| Android | Yes | – |
| macOS | Yes | – |
| Windows | Yes | – |
| Linux | Yes | – |
| Full comparison | This app | NetBird vs wg-easy |
Official client for phone and desktop.
Yes for the self-hosted setup. The server has to be reachable on TCP 80 and 443 and UDP 3478, so the quickstart script issues a Let's Encrypt certificate for a public domain and peers connect to it before setting up a direct tunnel. You can avoid that with the Cloud version, which you do not host.
No. Only the server's ports need opening. Clients use STUN and ICE to find each other, and when that fails the traffic goes through the relay in the netbird-server container over an encrypted WireGuard tunnel.
Yes. The self-hosted server is free, under BSD-3-Clause for most of the repository and AGPL-3.0 for the management, signal and relay code. NetBird Cloud and the commercial plans are the paid options.
More apps in Networking.
wg-easy runs a WireGuard VPN and its web admin page in a single container. Create a client in the browser, scan its QR code or download the config file, then watch which clients are connected and how much traffic each one moves.
Block ads and trackers across a household network by routing DNS requests through a server you control.
Manage two to four Pi-hole v6 instances from one page, using a lightweight homelab dashboard with no backend or database.
A homelab diagram goes stale the moment it is drawn. Homelable rebuilds it from what is running on the network: an nmap scan of your subnets, a Proxmox or Unraid import, the Zigbee and Z-Wave mesh from your MQTT broker. Everything lands on a canvas you drag into shape, with a markdown document per device and a status dot that keeps refreshing.
Block ads and unwanted content for every device on your network with a DNS sinkhole, no client software required.
Updated