Mesh VPN

A revolution in virtual networking.


A Mesh VPN is the main feature of Netmaker, and is created by default.

Also called an “overlay network” or “SD-WAN”, a mesh network means direct, peer-to-peer connections between every device.

Virtual Subnet

The mesh network acts as a sort of virtual, distributed LAN. All the connections are direct and secure, over a private subnet, similar to a VPC, office, or home network. And yet, the devices can be anywhere. This makes managing scattered devices and servers easier than ever.

Super Speed

By creating direct, peer-to-peer connections, the speed is greatly enhanced, compared to traditional VPN’s. WireGuard make it even faster, and our connections are often nearly as fast as a direct, over-the-line connection. This makes a Netmaker mesh network ideal for data-intensive and infrastructure-based workloads.

Base Camp

Text: The mesh network serves as a base to build up (or down) the rest of your network. You can optionally switch off mesh networking, so no devices are connected by default. You can use ACLs to customize connections, and create gateways into and out of your network.

How the Mesh VPN works


Hosts register with public keys, ports, and endpoints. This gives Netmaker all the information it needs to send to the full network, to make the machine a part of the mesh.


Netmaker sends out this information about the host to all the other hosts in the network with secure messaging.


The netclient running on the hosts receives the message, and reconfigures WireGuard and networking rules to add a direct connection to the new peer.


A WireGuard® VPN that connects machines securely, wherever they are.

Star us on GitHub
By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.