WarpKVM

Mesh networking

How WarpKVM uses Tailscale to reach your machines with zero open ports.

The tailnet model

Every WarpKVM ships with Tailscale built into the firmware. When a device joins your tailnet it gets a stable identity and an end-to-end encrypted WireGuard® tunnel to every other node you own: your laptop, your phone, your other WarpKVMs.

That means:

  • Zero open ports. Nothing listens on the public internet. There is nothing to scan, nothing to brute-force.
  • No port forwarding or VPN ceremony. No router configuration, no jump hosts, no dynamic-DNS hacks.
  • Works through CGNAT, hotel Wi-Fi, LTE, and anywhere else outbound connections work.
  • You control access with your tailnet's ACLs, SSO, and device approval. WarpKVM honors whatever policy your network already has.

Daisy-chain Ethernet

WarpKVM 01 has two Gigabit Ethernet ports and can daisy-chain: run one cable to the first device, then hop device-to-device down the rack. One switch port can serve a whole column of machines.

Multi-device view

The companion app shows every WarpKVM on your tailnet in one place: thumbnails, status, and one-tap connect. Power states from paired WarpKVM ATX units appear in the same view.

Bandwidth guidance

ScenarioRecommendation
4K @ 60 Hz, LAN1 Gb Ethernet (daisy-chain friendly)
4K remote over WAN25 Mbps+ uplink from the device site
1080p remote8–12 Mbps uplink
Audio + control only< 1 Mbps

Latency figures quoted throughout the docs (15–25 ms) are measured glass-to-glass on a 1 Gb LAN. Real-world remote performance depends on the network path between you and the device.

On this page