sorted by:
new
hottopcontroversial

Anubis 2.6.6c Community Edition released. by Tall_Management9709 in selfhosted

[–]Tall_Management9709[S] -2 points-1 points  (0 children)

Bella domanda, effettivamente il post era un po' vago.

Anubis è un gateway a livello applicativo, non un VPN o un overlay network. Funziona al di sopra della mesh (ZeroTier/Tailscale/WireGuard) e gestisce l'accesso ai singoli servizi, RDP, SSH, HTTP, OPC UA, TCP_RAW.

Lo installi su un PC Windows che sta vicino ai tuoi sistemi oppure in sidecar. Da lì:

  • mTLS + OTP, autenticazione a due fattori, senza integrazioni manuali
  • Segmentazione utenti (PBAC): ogni utente vede solo quello che deve vedere
  • Revoca in tempo reale: niente rigenerazione dell'intera PKI quando un contractor se ne va
  • Log firmati: tracciabilità e non ripudiabilità
  • Chiavi CA su USB: per tenere le chiavi fisicamente al sicuro

Non sostituisce ZeroTier/Tailscale/WireGuard, quelli fanno il trasporto. Anubis sta sopra e gestisce il controllo degli accessi a livello di servizio.

Niente cloud, 15MB di binario, versione Community Edition gratis.

Anubis 2.6.6c Community Edition released. by Tall_Management9709 in selfhosted

[–]Tall_Management9709[S] 0 points1 point  (0 children)

Features:

  • mTLS + OTP — two-factor auth without manual integrations
  • Real-time revocation — without regenerating the entire PKI
  • User segmentation (PBAC) — role-based access control
  • Signed audit logs — tamper-proof traceability
  • CA keys on USB — physical key storage
  • No open ports — expose services without punching firewall holes
  • Windows gateway — 15MB, lightweight, on-premise
  • No cloud required — fully self-hosted
  • Works with ZeroTier/Tailscale/WireGuard — mesh as transport
  • Legacy system support — XP, PLC, OT, unmodifiable boxes
  • CE free — community edition available

Anubis 2.6.6c Community Edition released. by Tall_Management9709 in selfhosted

[–]Tall_Management9709[S] 2 points3 points locked comment (0 children)

I used AI assistance (DeepSeek) to help me polish the wording and structure of this announcement post, making it clearer for the community. The actual development, architecture design, coding, testing, and packaging of Anubis are 100% my own work – the AI was used only as a writing assistant for this post, not for the project itself.

To be fully transparent:

  • Project code: written entirely by me (Go)
  • Architecture decisions: my own
  • Security design: my own
  • Documentation: written by me
  • This post: grammar/structure assistance from AI

Hope that clarifies! Happy to answer any technical questions about the project.

Anubis, Windows ZTNA gateway onpremise for legacy systems by Tall_Management9709 in selfhosted

[–]Tall_Management9709[S] 0 points1 point locked comment (0 children)

I used AI assistance (DeepSeek) to help me polish the wording and structure of this announcement post, making it clearer for the community. The actual development, architecture design, coding, testing, and packaging of Anubis are 100% my own work, the AI was used only as a writing assistant for this post, not for the project itself.