Tunnet

Open-source private mesh. Install an agent on each machine and it gets an overlay IP; SSH, ping, and internal HTTP then work as usual. Two modes. Direct is a zero-server P2P mesh: membership lives in an iroh-docs CRDT, peers find each other on the Mainline DHT, transport auth is a pre-shared secret plus signed grants. No control plane. Managed is the same agent plus a self-hostable control plane, dashboard, SSO/OIDC, Policy as Code, and audit logs. Agent, control plane, dashboard, and edge ship in one repository. Direct has no dashboard or public tunnels; upgrade to Managed when you need those.