Self-hostable-by-design secure remote access platform built on WireGuard, with identity-based policies, device trust and audit logs.
- Stars
- 11,856
- Forks
- 667
- Open issues
- 216
- Last commit
- yesterday
What is it?
Netmaker is a platform for creating and managing WireGuard networks. It lets you set up mesh VPNs between machines, site-to-site connections between data centres and clouds, and remote access gateways for individual users, without configuring each WireGuard peer by hand.
The project provides a server with an admin UI, OAuth sign-in, private DNS and access control lists, along with a client called netclient that runs on Linux, Docker, Mac and Windows. The self-hosted open source version can be installed on a cloud VM with a quick install script, and a managed SaaS option is also offered.
Netmaker's README positions it for peer-to-peer, site-to-site and Kubernetes networking, and it uses kernel WireGuard for performance. Community projects extend it with integrations such as Traefik, CoreDNS, Terraform and OpenWRT.
Key features
- 01Creates WireGuard mesh VPNs, site-to-site networks and remote access gateways.
- 02Provides an admin UI with OAuth sign-in and private DNS.
- 03Supports access control lists to restrict which nodes can communicate.
- 04Ships a netclient agent for Linux, Docker, Mac and Windows.
- 05Includes a quick install script for self-hosting on a cloud VM.
Use cases
- Connecting servers across multiple clouds and data centres into one private network.
- Giving remote staff secure access to internal services without exposing them publicly.
- Linking a homelab or office network to cloud resources over site-to-site tunnels.
- Building overlay networking for Kubernetes clusters.
Quick start
- 1
Get a cloud VM with Ubuntu 24.04 and a static public IP
- 2
Allow inbound traffic on ports 443 and 51821 (TCP and UDP) in the cloud firewall
- 3
(Recommended) Point a wildcard DNS subdomain such as *.netmaker.example.com to the VM's public IP
- 4
Run the quick setup script to install the open source Netmaker server
sudo wget -qO /root/nm-quick.sh https://raw.githubusercontent.com/gravitl/netmaker/master/scripts/nm-quick.sh && sudo chmod +x /root/nm-quick.sh && sudo /root/nm-quick.sh
Things to know
- The quick install script is written for Ubuntu 24.04 on a cloud VM with a static public IP.
- The PRO version needs a separate setup process and is covered by a different license for the pro/ directory.
In collections
Topics
FAQ
- What is netmaker?
- Netmaker automates WireGuard-based virtual networks for mesh VPNs, site-to-site links, remote access and Kubernetes clusters. Netmaker is a platform for creating and managing WireGuard networks. It lets you set up mesh VPNs between machines, site-to-site connections between data centres and clouds, and remote access gateways for individual users, without configuring each WireGuard peer by hand.
- Is netmaker free to use? What license does it have?
- netmaker is open source under the Other license. Check the license terms before using it in commercial products.
- Is netmaker still maintained?
- Actively maintained. The last commit to netmaker was on Nov 5, 2026.
- What can I use netmaker for?
- Connecting servers across multiple clouds and data centres into one private network. Giving remote staff secure access to internal services without exposing them publicly. Linking a homelab or office network to cloud resources over site-to-site tunnels. Building overlay networking for Kubernetes clusters.
- How do I install netmaker?
- Get a cloud VM with Ubuntu 24.04 and a static public IP Allow inbound traffic on ports 443 and 51821 (TCP and UDP) in the cloud firewall (Recommended) Point a wildcard DNS subdomain such as *.netmaker.example.com to the VM's public IP Run the quick setup script to install the open source Netmaker server: sudo wget -qO /root/nm-quick.sh https://raw.githubusercontent.com/gravitl/netmaker/master/scripts/nm-quick.sh && sudo chmod +x /root/nm-quick.sh && sudo /root/nm-quick.sh
- Where can I get netmaker?
- The source code and installation instructions are on GitHub: https://github.com/gravitl/netmaker
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Open-source WireGuard-based mesh VPN that connects machines, people and AI agents over peer-to-peer encrypted tunnels with identity-based access control.
Open-source zero-trust networking platform that makes services invisible to unauthorized users, with identity-based access and end-to-end encryption.
A decentralized mesh VPN written in Rust that connects devices into a virtual LAN with NAT traversal and WireGuard support.
Self-hosted zero trust secure access platform combining remote access VPN, ZTNA, API/AI gateway, PaaS and ngrok-style tunnels on Kubernetes.
Self-hosted secure remote access platform combining WireGuard VPN, identity management, MFA and network access control.