Description
You want to run a Minecraft server with a friend across town, or reach your home NAS from outside, and you end up stuck on public IPs, port forwarding and firewalls, fiddling with each device for hours with no guarantee it works. P2WLAN gives every device a private virtual IP and pulls devices scattered across home broadband, phone hotspots, campus networks and cloud hosts into one virtual LAN, so you reach a peer by its virtual IP as if you were plugged into the same router.
It takes the direct whenever possible route: LAN direct first, then public UDP hole punching, and only when neither works does it fall back to an encrypted relay, with the same virtual IP the whole time and no per-device ports or dynamic DNS to maintain. Traffic is end-to-end encrypted and the relay only forwards ciphertext. To bring a group together, create a room; members, online status, whether each link is direct or relayed and the latency are all visible in the client at a glance. It is still in Preview, and the author notes it has not had an independent security audit.
Virtual LAN:Private virtual IPs let remote devices talk as if on one network, so SSH, remote desktop, databases and any other service are reachable directly.
P2P first:Tries LAN direct and public UDP hole punching first, with no guarantee under complex NATs.
Automatic relay fallback:Switches to an encrypted relay when direct is unavailable to keep the link up.
Rooms:Organize a set of devices with a room code and password for game nights, collaboration or private services, each room on its own network and virtual IPs.
End-to-end encryption:Devices use encrypted sessions with a Noise-style handshake and ChaCha20-Poly1305, so the relay cannot see your traffic.
Cross-platform clients:GUI for Windows, macOS, Linux and Android, an experimental iOS preview, and a CLI plus daemon for servers and headless machines.
Self-hostable:Run the Control plane and Relay on your own Linux server; a fresh install ships with no operator addresses prefilled.
It takes the direct whenever possible route: LAN direct first, then public UDP hole punching, and only when neither works does it fall back to an encrypted relay, with the same virtual IP the whole time and no per-device ports or dynamic DNS to maintain. Traffic is end-to-end encrypted and the relay only forwards ciphertext. To bring a group together, create a room; members, online status, whether each link is direct or relayed and the latency are all visible in the client at a glance. It is still in Preview, and the author notes it has not had an independent security audit.
Features
Virtual LAN:Private virtual IPs let remote devices talk as if on one network, so SSH, remote desktop, databases and any other service are reachable directly.
P2P first:Tries LAN direct and public UDP hole punching first, with no guarantee under complex NATs.
Automatic relay fallback:Switches to an encrypted relay when direct is unavailable to keep the link up.
Rooms:Organize a set of devices with a room code and password for game nights, collaboration or private services, each room on its own network and virtual IPs.
End-to-end encryption:Devices use encrypted sessions with a Noise-style handshake and ChaCha20-Poly1305, so the relay cannot see your traffic.
Cross-platform clients:GUI for Windows, macOS, Linux and Android, an experimental iOS preview, and a CLI plus daemon for servers and headless machines.
Self-hostable:Run the Control plane and Relay on your own Linux server; a fresh install ships with no operator addresses prefilled.
