Vexaro MeshGlossary

Mesh & SD-WAN glossary

Plain-language explanations of the networking concepts behind a modern mesh. They are neutral and factual: competitor and protocol details are attributed to their owners, and each entry shows how the idea relates to the design of Vexaro Mesh, now in development.

What is a mesh VPN?

A mesh VPN connects many devices or sites so each can reach every other directly over encrypted tunnels, instead of routing all traffic through one central server.

Read the definition

Hub-and-spoke vs full mesh

In hub-and-spoke, every site connects to one central hub and traffic between sites passes through it; in a full mesh, every site connects directly to every other.

Read the definition

What is SD-WAN?

SD-WAN is software-defined wide-area networking: it separates control of the WAN from the underlying links, steering and managing traffic centrally over any connection.

Read the definition

WireGuard vs OpenVPN

WireGuard is a newer, lean VPN protocol focused on speed and a small audited codebase; OpenVPN is a mature, highly configurable protocol with very broad compatibility.

Read the definition

What is NAT traversal?

NAT traversal is the set of techniques that let two devices behind routers (NAT) form a direct connection, even though neither has a public address the other can dial.

Read the definition

Site-to-site vs point-to-site

Site-to-site VPN links whole networks (e.g. two offices) so everything behind each can talk; point-to-site connects an individual device to a network.

Read the definition

What is microsegmentation?

Microsegmentation divides a network into small, isolated zones with policy controlling traffic between them, so a breach in one zone can't spread freely to others.

Read the definition

Overlay vs underlay

The underlay is the physical network and links that carry packets; an overlay is a virtual network built on top of it, abstracting away the physical paths.

Read the definition

What is ZTNA?

ZTNA (zero-trust network access) grants access to specific applications based on verified identity and policy, never trusting a user or device just for being on the network.

Read the definition

From concept to network.

When you're ready to apply these ideas, see what Vexaro Mesh is being built to do, or join early access.