[{"data":1,"prerenderedAt":131},["ShallowReactive",2],{"home":3},{"id":4,"contact":5,"extension":9,"facts":10,"features":23,"hero":98,"meta":104,"seo":105,"status":108,"stem":129,"__hash__":130},"home\u002Fhome.yml",{"title":6,"intro":7,"email":8},"Follow the project","Write to us with questions or to talk about using Tetherloom in your product. To hear when testing builds are ready, see the download page.","info@tetherloom.com","yml",[11,14,17,20],{"value":12,"label":13},"Self-hosted","one management service, database built in",{"value":15,"label":16},"In-app peers","applications join without a system VPN",{"value":18,"label":19},"Active-active","two gateways on independent uplinks",{"value":21,"label":22},"Rust","from the management service to the peers",{"title":24,"intro":25,"items":26},"What it is built for","A single system instead of a VPN per use case. Each part is designed to be used on its own and to work with the rest.",[27,36,44,52,59,66,74,82,90],{"title":28,"icon":29,"text":30,"tags":31},"Peers that do real work","nodes","A peer is the unit of the network. One peer can be an exit, publish a subnet, offer SSH and several services, and prove which application a connection belongs to.",[32,33,34,35],"Exit nodes","Subnets","Services","SSH",{"title":37,"icon":38,"text":39,"tags":40},"Networks inside your applications","code","An SDK embeds a rootless peer into your own application. Installations of the app form their own network, with no system VPN on the device and no change to its routes.",[41,42,43],"SDK","Rootless","App mesh",{"title":45,"icon":46,"text":47,"tags":48},"Several isolated networks per device","layers","Personal, work and embedded networks can live on one device at once, each with its own identity and policy, without leaking routes or names into each other.",[49,50,51],"Profiles","Isolation","Policy",{"title":53,"icon":54,"text":55,"tags":56},"Gateways that keep connections","shield","Two gateways run active-active on independent Internet uplinks. Firewall and NAT state is synchronized under an explicit continuity contract, so the flows the contract covers survive a failed uplink instead of reconnecting.",[18,57,58],"Multi-WAN","State sync",{"title":60,"icon":61,"text":62,"tags":63},"Your own management service","servers","The management service is one process with its database embedded and its interface built in. No external database, broker or cache; it runs on your own server.",[12,64,65],"Embedded DB","One binary",{"title":67,"icon":68,"text":69,"tags":70},"Identity you already have","user","Sign in with any OpenID Connect provider, or with a local account on a standalone installation. A provider confirms who signs in; device keys stay with the device.",[71,72,73],"OIDC","Local accounts","Device keys",{"title":75,"icon":76,"text":77,"tags":78},"Connectors to existing VPNs","globe","Reach networks that still sit behind a corporate VPN through a connector, installed only when you choose it, so the rest of your network stays unchanged. Planned after the first release.",[79,80,81],"Connectors","Corporate VPN","Planned",{"title":83,"icon":84,"text":85,"tags":86},"Every connection explained","eye","Diagnostics answer why a connection works or does not, which policy allowed it and which path it takes, instead of leaving you to guess from logs.",[87,88,89],"Diagnostics","Policy trace","Paths",{"title":91,"icon":92,"text":93,"tags":94},"Built to fail safely","clock","Every change has a durable identity and a recoverable outcome; limits are applied before untrusted work is accepted; revocation stops access that is no longer allowed.",[95,96,97],"Recoverable","Bounded","Revocation",{"eyebrow":99,"title":100,"titleAccent":101,"lead":102,"primary":6,"secondary":103},"Secure overlay network · Self-hosted · Rust","One network for your devices,","your applications and every connection between them.","Tetherloom joins your laptop, phone, home server, office network, cloud machines and the applications you build into one secure network. Personal and work resources share one identity and one policy, keep their own boundaries, and every connection can be explained.","Where it is today",{},{"title":106,"description":107},"Tetherloom · One network for your devices and applications","Tetherloom connects laptops, phones, servers, office networks, cloud machines and your own applications in one secure overlay network. Self-hosted management, peers inside applications, two active gateways on independent uplinks. Written in Rust.",{"title":103,"intro":109,"steps":110},"Early, and honest about it. Nothing here is ready for production use yet.",[111,115,118,122,125],{"title":112,"state":113,"text":114},"Management service","In progress","The self-hosted service runs with its embedded database, serves HTTPS with an imported or automatically issued certificate, and lets the first owner claim the installation and sign in.",{"title":116,"state":113,"text":117},"Peers","The first Linux peer. Its privileged network helper is in place; connection paths are under review.",{"title":119,"state":120,"text":121},"Gateways","Next","The two active-active gateways with synchronized state.",{"title":123,"state":120,"text":124},"SDK and apps","The embedded peer for your own applications and the desktop interface.",{"title":126,"state":127,"text":128},"Testing builds","Later","Downloads for the client systems, published here as they become ready.","home","XFBakTBbuUro2vvqaNqC1wtdM5mF4N46IipipQ8Wzok",1792126213585]