Mesh networking
How WarpKVM uses Tailscale to reach your machines with zero open ports.
The tailnet model
Every WarpKVM ships with Tailscale built into the firmware. When a device joins your tailnet it gets a stable identity and an end-to-end encrypted WireGuard® tunnel to every other node you own: your laptop, your phone, your other WarpKVMs.
That means:
- Zero open ports. Nothing listens on the public internet. There is nothing to scan, nothing to brute-force.
- No port forwarding or VPN ceremony. No router configuration, no jump hosts, no dynamic-DNS hacks.
- Works through CGNAT, hotel Wi-Fi, LTE, and anywhere else outbound connections work.
- You control access with your tailnet's ACLs, SSO, and device approval. WarpKVM honors whatever policy your network already has.
Daisy-chain Ethernet
WarpKVM 01 has two Gigabit Ethernet ports and can daisy-chain: run one cable to the first device, then hop device-to-device down the rack. One switch port can serve a whole column of machines.
Multi-device view
The companion app shows every WarpKVM on your tailnet in one place: thumbnails, status, and one-tap connect. Power states from paired WarpKVM ATX units appear in the same view.
Bandwidth guidance
| Scenario | Recommendation |
|---|---|
| 4K @ 60 Hz, LAN | 1 Gb Ethernet (daisy-chain friendly) |
| 4K remote over WAN | 25 Mbps+ uplink from the device site |
| 1080p remote | 8–12 Mbps uplink |
| Audio + control only | < 1 Mbps |
Latency figures quoted throughout the docs (15–25 ms) are measured glass-to-glass on a 1 Gb LAN. Real-world remote performance depends on the network path between you and the device.