Every office in one direct network
Vexaro Mesh, now in development, is designed to link your offices and data centers into a single full-mesh network. Each site will talk to any other directly, with no transit through a single concentrator and no per-box hardware, and pricing is planned to follow locations rather than headcount.
Why classic site-to-site VPNs get painful
Tunnel-by-tunnel WANs were built for a handful of offices. They strain as you grow.
Hub-and-spoke routing hairpins every branch through one concentrator, which becomes both the bottleneck and the single point of failure for the whole WAN.
Each new office means another pair of tunnels to configure, another device to license, and another set of routes to maintain by hand on hardware at every site.
When a link drops, traffic doesn't reroute on its own. Someone has to notice, diagnose and fail over by hand while the sites stay disconnected.
How a full mesh will link your sites
Four planned steps from a single office to one network across all of them.
- 1
A gateway per site
Each office and data center will run a lightweight gateway as a VM or container on hardware you already have. There is no appliance to buy or rack.
- 2
Gateways find each other
Each gateway is designed to join your network and connect to the other sites by itself, over encrypted tunnels, with no port forwarding or public addresses.
- 3
A full mesh forms
Every site is designed to end up with a direct tunnel to every other site, so traffic takes the shortest path between any two locations instead of routing through a central box.
- 4
Policy stays central
Access rules for the whole network are planned to be set from one console, instead of configuring routers site by site.
What is planned across the network
The same managed capabilities are planned to apply uniformly to every site you connect.
Direct site-to-site paths
Branch-to-branch and branch-to-data-center traffic is designed to go directly between the two sites, not through a third location, keeping latency low.
One console, full audit
Sites and access rules are planned to be managed centrally, with a record of who connected that you can export to your SIEM.
Why Vexaro Mesh is designed for site-to-site
Planned pricing per connected site or gateway ($49 per site for up to five sites, $39 per site on the unlimited plan), so linking more offices would be priced by location, not by the number of users or devices behind each one.
No VPN concentrator and no dedicated hardware: gateways are planned as software, so a new office won't need an appliance.
A full mesh means no central hairpin. Every pair of sites gets a direct path, which removes the classic hub bottleneck and single point of failure.
Cloud or self-hosted: the controller is planned to run in the cloud or, on Enterprise, inside your own perimeter with your keys.