Nebula is the only completely self hosted option I think. But I couldn't get NAT traversal to work and it's the main reason I want a system like this. Tailscal

Nebula is the only completely self hosted option I think. But I couldn't get NAT traversal to work and it's the main reason I want a system like this. Tailscale hosts all the auth and coordination stuff and uses SSO. Zerotier lets you host an auth server, which also handles connections, but when required some already-established connections go through zerotier servers (encrypted). We use the latter option at work