02 · How it works

03 / 12

Why every node finds its own path

Peer-to-peer by default, relay only when the network says no

NAT traversal happens automatically in most home and office networks. Relay servers kick in only for truly stubborn CGNAT and firewall combinations.

Modern tunnel keys under the hood, zero config at the surface

Each connection uses a modern Noise Protocol handshake with keys that rotate automatically. You never touch a config file.

A single network across laptops, phones, servers, and containers

One coordination server gives every device the same private IP, regardless of OS or cloud provider. No subnet juggling.

Access controls live in code, not in VLAN tags

Define who can reach what in a single ACL file. Changes propagate to every node in under a second — no switch reboots, no ticket queues.