OpenVLAN ships as a single platform — the mesh, the identity layer, the policy engine, and the tooling around them.
The core mesh that connects everything.
Devices connect peer-to-peer over encrypted tunnels; traffic never detours through a central appliance.
Learn more →Every packet rides a AmneziaWG tunnel — fast, modern, audited cryptography.
About AmneziaWG →Advertise whole VPCs, offices, or LANs into the tailnet with one command.
Site-to-site →Route all device traffic through a trusted exit node — your own or a partner's.
Exit nodes →Direct connections behind café wifi, LTE, and double-NAT — relay fallback when truly blocked.
Service-to-service identity and encrypted paths between servers, containers, and clusters.
Workload connectivity →Zero Trust controls layered on top of the mesh.
Okta, Entra ID, Google Workspace — users and groups sync automatically.
Identity integrations →Capture privileged terminal sessions for replay during reviews.
Privileged access →Give model training and inference jobs their own identities and rules.
Securing AI →Unified inventory, policy, and audit for every AI service and agent on your network.
Aperture →Ephemeral per-job credentials for pipelines, scoped to exactly what they deploy.
CI/CD connectivity →The small features people end up loving most.
Manage the whole network as reviewable code.
Invite, group, and revoke from one console.
The free plan includes the full mesh, MagicDNS, and up to 100 devices per user.