1Create your network
Sign up and pick a network name. You get your own private network and admin console.
FreeUp to 3 machines, every feature →
Connect every device your team uses. Securely.
MAE Routing puts your computers, servers and containers on one private network, encrypted end to end with WireGuard. It works from any office, home or cloud, with no VPN server to run and no ports to open.
Windows · Linux · Docker
Use cases
One network for the way your organisation works
Start with a few laptops and a server, then add branches, data centres and containers as you grow.
Business VPN
Replace the office VPN server with direct, encrypted links between devices.
Learn more →Server access
Reach SSH, RDP and admin pages without exposing them to the internet.
Learn more →Branch offices
Join office LANs, printers, cameras and NAS through a subnet router.
Learn more →Remote work
Staff work from home or on the road as if they were at their desk.
Learn more →Containers & CI
Join Docker services and build jobs with an auth key, no browser needed.
Learn more →Product
Everything you need to run the network, in one console
Add machines, decide who can reach what, and keep an eye on every change, from a browser.
Decide who can reach what
Write access rules once and every machine follows them within seconds.
- Rules by user, group, tag and port
- HuJSON with comments, checked before you save
- Ready-made examples to start from
- Auto-approve routes from trusted routers
Names instead of IP addresses
Every machine gets a name like nas.yourorg.mae.internal that follows it wherever it goes.
- MagicDNS for every machine
- Split DNS for internal domains
- Global nameservers, with optional override
- Extra records for anything without the app
Bring your whole team
Invite people with a link. Members add their own devices; admins manage the network.
- Owner, admin and member roles
- Single-use invite links that expire in 7 days
- Members only see and manage their own machines
- Removing a user removes their machines too
Know who changed what
Every change to the network is recorded with the person, time and address it came from.
- Machines, users, rules, DNS and keys
- Kept for 400 days
- Full details of each change
Built on WireGuard. Run from Thailand.
Devices talk to each other directly. When a network blocks that, traffic passes through our relay in Bangkok, still encrypted.
0
ports to open
Machines only make outgoing connections, so nothing on your router or firewall changes.
1
command to install
One line on Linux, one installer on Windows, one variable in Docker.
3
machines free
Every feature and unlimited users on the Free plan. No credit card. More machines with a paid plan.
Teams
Made for IT, security and the people who build things
1Install once
A Windows installer, or one command on any Linux. Users sign in with their work email.
2Retire the VPN server
No concentrator to patch or scale. Devices connect straight to each other.
3Every branch, one network
A subnet router in each office brings printers, cameras and NAS along.
1Least privilege
Write rules by user, group, tag and port. Once rules are set, anything they do not allow is blocked.
2Keys that expire
Device keys expire after 180 days by default, so lost laptops drop off on their own.
3An audit trail
Every configuration change is logged for 400 days.
1Auth keys
Reusable, ephemeral and tagged keys for servers, containers and CI jobs.
2Containers
A Docker image for amd64, arm64 and armv7, with or without a TUN device.
3Routes and exit nodes
Route whole subnets, or send all traffic out through a machine you choose.
1Stable addresses
Every machine keeps its 10.77.x.x address and name, wherever it connects from.
2SSH with a check
SSH over the network, confirmed in the browser when the policy asks for it.
3Plays well with others
Its own address range, port and rules, so it runs next to other mesh VPNs.
Up and running in three steps
Most teams connect their first machines in under five minutes.
2Install the app
On Linux, one command installs the app and joins your network:
curl -fsSL https://routing.maesuaisystem.com/install.sh | sudo sh -s -- --org your-network3Sign in and connect
Open the link the app shows, sign in and press Connect. The machine gets its address and name.
See the guide