innernet

Project Overview

innernet is a private network system that uses WireGuard under the hood. It is similar in goals to Slack's nebula or Tailscale, but takes a different approach — taking advantage of CIDRs and the security properties of IP networking to build more powerful ACL primitives.

Key Features

• WireGuard-based private networking
• CIDR-based access control
• Client-server architecture with a coordination server to manage peers
• Invitation file support for peer initialization
• Admin CLI for managing networks and CIDRs

Target Audience

• Teams who need private network infrastructure
• Network engineers and system administrators
• Users seeking alternatives to Tailscale/nebula

Quick Start

1. Create a server: sudo innernet-server new
2. Add a CIDR: sudo innernet-server add-cidr
3. Add a peer and generate an invitation: sudo innernet-server add-peer
4. Client initialization: sudo innernet install /path/to/invitation.toml
5. Start the server: innernet-server serve

Core Advantages

• Built on WireGuard for security and reliability
• Leverages existing CIDR concepts for a gentle learning curve
• Fine-grained access control
• Open-source and free (MIT/BSD-style)

System Requirements

• OS: Linux, macOS, Windows
• Architectures: x86_64, arm64
• Additional Dependencies: WireGuard

Notes

• Has not received an independent security audit; should be considered experimental
• Not an official WireGuard project
• Home networks require port forwarding configuration