Private WireGuard network for IoT & Linux

Reach every device. Securely, from anywhere.

Ideaxa Connect gives each Raspberry Pi, server and laptop a fixed private IP on an encrypted network. SSH into a Pi behind 4G from your desk, or straight from the browser.

curl -fsSL https://connect.example/agent/v1/install.sh | sudo IDEAXA_CONNECT_TOKEN=… sh

Debian, Ubuntu and Raspberry Pi OS · amd64, arm64, armv7

hub · 100.80.0.1rpi-greenhouse100.80.0.12build-server100.80.0.10nas-home100.80.0.11macbook-pro100.80.0.16vineyard-gw · 4G100.80.0.27pixel-8100.80.0.17sensor-hub-04100.80.0.23k3s-node-1100.80.0.14

How it works

From a fresh Pi to an SSH session in under a minute.

  1. 01

    Install

    Run one command on a Raspberry Pi or any Linux box. The agent installs as a systemd service and generates its WireGuard key on the device. The private key never leaves it.

  2. 02

    Enroll

    A short-lived, single-use token binds the device to your account. It gets a fixed private IP like 100.80.0.11 that stays with it for life.

  3. 03

    Connect

    Reach it from your other devices by IP, SSH or any port, or open a terminal right here in the browser. It shows up online within seconds.

Features

Everything you need to run a fleet of small devices.

WireGuard tunnels

Modern, audited cryptography with kernel WireGuard where available and a userspace fallback everywhere else.

Works behind any NAT

Devices always dial out, so home routers, 4G and carrier-grade NAT just work. No port forwarding.

Browser SSH

A full xterm terminal to any of your devices, with host-key pinning. Credentials are used once and never stored.

Per-user isolation

Each person's devices can only reach each other. Rules are enforced centrally on the hub.

Device quotas

Give each user a device allowance. Enrollment checks it atomically, so the last slot can't be taken twice.

Live status

Online, offline and tunnel-only states stream in live, with CPU, memory, disk and temperature history.

Audit log

Every enrollment, change and terminal session is recorded with who, what, when and from where.

Mac & phone too

Add a Mac, Windows PC or phone with the official WireGuard app: download a config or scan a QR code.

One line to join the network

Create a token in the portal, then run this as root on the device. The portal shows it online the moment it connects.

curl -fsSL https://connect.example/agent/v1/install.sh | sudo IDEAXA_CONNECT_TOKEN=… sh