PRIVATE MESH
A WireGuard tunnel you operate. Keys stay on the device. Destinations and DNS never land in this control plane.
Live heartbeat only. Session traffic is not stored here.
The VPS is not registered yet.
What this server sees. On a working tunnel it should be the VPS exit IP.
X25519 is generated on the phone or laptop. Only the public key is sent here.
UDP 51820 on this VPS. One region is enough.
No store, no billing. Teammates join with a code.