Every device,
one private network.
Connect laptops, phones, office machines and servers into one encrypted private network that follows them anywhere. WireGuard underneath, the Tailscale apps on every device, and your own control server in the UK.
A private network that goes where your devices go.
Install one app, and a laptop in a café, a phone on 4G, a NAS in the office and a server in our data centre sit on the same private network, as if they were plugged into one switch. No port forwarding, no VPN concentrator to run, no public SSH or RDP left open to the internet.
Closed to the internet
Keep SSH, RDP, databases and admin panels off the public internet. Only your own devices can reach them, over the private network.
Direct and encrypted
Every connection is WireGuard, device to device. When a direct path is blocked, a UK relay passes the traffic along, still encrypted end to end.
You decide who reaches what
Access rules say which person or device can reach which other, down to the port. Start from a template, change it any time.
Start free. Grow when you need to.
Priced per network, not per person. Prices in GBP. Every plan has every feature; only the size changes.
- Devices
- 10
- People
- 1
- Access rules
- Templates + editor
- Activity log
- 90 days
- Apps
- All platforms
- Devices
- 50
- People
- 10
- Access rules
- Templates + editor
- Activity log
- 90 days
- Apps
- All platforms
- Devices
- 250
- People
- Unlimited
- Access rules
- Templates + editor
- Activity log
- 90 days
- Apps
- All platforms
Three steps, about five minutes.
1 · Create your network
Pick a plan (Starter is free) and choose a name. Your private network and its own control server are ready in seconds, at name.mesh.uknode.net.
2 · Add your devices
Install the Tailscale app, then either paste a one-time key from your UKNode account or sign in from the app and approve the device in one click.
3 · Set who reaches what
Keep the default (each person reaches only their own devices) or pick a team template: members reach servers on SSH and web ports, nothing else.
Your network,
your controls.
Everything lives next to your servers and invoices. No second account, no separate console, no ticket needed.
- One-time device keys (15 minutes)
- Approve sign-ins from your account
- Access rules, checked before they apply
- Rule history, restore any version
- People and their devices
- Activity log of every change
- Rename, sign out or remove devices
- Approve subnet routes to reach a whole office
Depiction of the Mesh tabs in the client area.
What people connect with Mesh.
Servers without public SSH
Reach your VPS and dedicated servers over the private network, and close SSH, RDP and admin ports to the rest of the internet.
Remote and hybrid teams
Staff reach the office file server, printers and internal tools from anywhere, without a VPN box to maintain.
Office to cloud
One device in the office shares its whole network with your servers and your team, through an approved subnet route.
Databases kept private
Point your apps at a database that only answers on the private network. Nothing to firewall, nothing exposed.
Developers and staging
Reach staging, CI runners and internal dashboards by name, from a laptop or a phone.
Home lab and family
NAS, cameras and home servers, reachable safely from your phone. The free plan is made for this.
Private by design,
British by address.
Most hosted mesh VPNs run one shared control plane, often abroad, and charge per person. We give every customer their own control server, run it in our UK data centre, and price the network, not the headcount.
Your own control server
Each network runs its own isolated instance. No other customer shares your keys, your rules or your device list.
End-to-end encryption
WireGuard keys are made on each device and never leave it. Our relay only ever sees encrypted packets.
Keeps working
Connected devices keep talking to each other even if the control server is briefly unreachable.
Familiar apps
The standard Tailscale apps, pointed at your network. For Linux servers, packages come from our signed UK mirror.
Asked before connecting.
What is UKNode Mesh? +
A private network for your devices. Every laptop, phone and server you add gets a private address and can reach the others over encrypted WireGuard links, wherever it is, following the access rules you set.
Is the Starter plan really free? +
Yes. Every UKNode customer can have one free network with up to 10 devices for one person. It has the same features as the paid plans; only the size differs. Upgrade to Team or Business whenever you need more devices or people.
What do I install? +
The standard Tailscale app on Windows, macOS, iPhone, iPad or Android, pointed at your network address. On Linux servers, install the client from our signed repository; your account shows the exact commands.
Can UKNode see my traffic? +
No. Devices encrypt traffic end to end with keys that never leave them. When two devices cannot reach each other directly, our UK relay forwards the encrypted packets without being able to read them.
Does it work behind NAT, firewalls and 4G? +
Yes. Devices connect directly when they can and fall back to the UK relay when a network blocks direct connections. You do not need to open any port.
What happens if I upgrade or cancel? +
Upgrading changes the limits straight away and keeps every device connected. If you cancel, the network stops at the end of the paid period and every device is disconnected.
Is this Tailscale? +
UKNode Mesh uses the open-source Tailscale clients with our own control server, based on the open-source Headscale project, run by UKNode in the UK. It is not affiliated with or endorsed by Tailscale Inc.
Your private network, free to start.
Create it in a minute and connect your first device today. Need a site-to-site VPN designed and run for you instead? Our engineers build that too.