#metadata #nebula #response #host #totp #request #config #api #token

app trifid-api

Pure-rust Defined Networking compatible management server

10 releases

0.2.3 Oct 10, 2023
0.2.2 Sep 29, 2023
0.1.5 Aug 5, 2023
0.1.4 Jun 24, 2023

#68 in HTTP server

Download history 5/week @ 2023-07-26 19/week @ 2023-08-02 14/week @ 2023-08-09 6/week @ 2023-08-16 6/week @ 2023-08-30 11/week @ 2023-09-06 1/week @ 2023-09-13 33/week @ 2023-09-20 63/week @ 2023-09-27 23/week @ 2023-10-04 18/week @ 2023-10-11 35/week @ 2023-10-18 2/week @ 2023-10-25 10/week @ 2023-11-01 1/week @ 2023-11-08

53 downloads per month

GPL-3.0-or-later and AGPL-3.0-or-later

12K SLoC


trifid is an open-souce reimplementation of the Defined Networking management protocol for Nebula networks.

It includes a reimplementation of the API Server, the Web UI, dnclient, nebula-cert and dnapi - all fully API-compatible with the original versions.

We also include a Rust library for interacting with keys and certificates in the Nebula PKI. Find it in trifid-pki/, or on crates.rs as trifid-pki.

Want to make your own Defined Networking client? Check out dnapi-rs! dnapi-rs is a Rust port of the official dnapi Go library, to allow for easy interactions with Defined Networking-compatible API servers. Find it in dnapi-rs/, or on crates.rs as dnapi-rs.

The API implementation is tested with the official dnclient implementaiton, and the dnclient implementation is tested with the official API server, to ensure complete feature parity between the two.

The original Web UI does not work with trifid-api quite yet, as we haven't finished reverse engineering that API. Feature table below:


trifid-api feature table:

Feature trifid-api api.defined.net
Enroll in sites with dnclient Yes Yes
Automatic config update polling by dnclient Not yet Yes
Group-based firewalling Not yet Yes
SSO authentication Not yet Yes
Open-source server Yes No

tfclient feature table:

Feature tfclient dnclient
Enroll in trifid-api/api.defined.net sites Yes Yes
Automatic VPN profile setup Yes Yes
Poll the API server for config updates Yes Yes
Secure Ed25519 signing for API communication Yes Yes


~1M SLoC