TunTunPrivate mesh networking for your infrastructure

Open-source alternative to Tailscale, ngrok, and Cloudflare mesh. One stack, fully open control plane.

Mesh Network

Encrypted P2P connectivity over QUIC (iroh). Every machine gets an internal IP and can reach every other - SSH, ping, curl, anything.

Expose local services to your mesh with internal TLS from your org's CA. ACL-protected, hostname-addressable. Like an internal load balancer.

Give any local port a public HTTPS URL through a relay - webhooks, demos, or permanent endpoints without touching firewall rules.

Transfer files peer-to-peer over the mesh. BLAKE3-verified, consent-based, with multicast to tagged machines.

Identity-based SSH with no keys to distribute. Session recording, re-auth policies, and full audit trails in the dashboard.

Run your own edge relay for public tunnels. ACME support, bring your own certs, full control over your tunnel infrastructure.