Command Palette

Search for a command to run…

ZarynZaryn
Zaryn documentation

Private networks and proxy

A WireGuard mesh for your machines, and Zaryn on a filtered internet.

Connect laptops, servers and CI into one encrypted WireGuard network through any NAT, and reach Zaryn through your own proxy when the internet is filtered.

For Developers and AI teamsFor Infrastructure and virtualization
Learning path

Get started with private networks and proxy

A guided path from "my devices can't see each other" and "Zaryn is blocked here" to a self-healing setup: a private WireGuard network for your devices, your own proxy for zev, every app or the whole computer, failover, and leak checks. Pictures first, every step explained.

⏱ About 30 minutes◔ From zero to advanced

What you can do

  • Join devices to a private mesh in one command
  • Share an app with teammates privately
  • Use your own proxy and find what’s blocked
  • Get honest DNS on a network that lies
  • Measure your line and fix jitter and bufferbloat
  • Find why the internet doesn’t work, and fix it

Start here

Read these in order; the rest you can open when you need them.

  1. 1Get started with private networks and proxyA guided path from "my devices can't see each other" and "Zaryn is blocked here" to a self-healing setup: a private WireGuard network for your devices, your own proxy for zev, every app or the whole computer, failover, and leak checks. Pictures first, every step explained.
  2. 2Private networksConnect your laptops, servers, CI runners and apps into one private network, so they reach each other directly and securely, wherever they are.
  3. 3Your own proxy (zev proxy)When sites are blocked, use your own VLESS, VMess, Trojan, Shadowsocks, Hysteria2 or WireGuard servers for zev, every app or the whole computer; zev learns per network which sites need it, says why each goes the way it does, counts the data and shows a server as a QR code.

Every guide in Private networks and proxy

Get started with private networks and proxy

A guided path from "my devices can't see each other" and "Zaryn is blocked here" to a self-healing setup: a private WireGuard network for your devices, your own proxy for zev, every app or the whole computer, failover, and leak checks. Pictures first, every step explained.

Your own proxy (zev proxy)

When sites are blocked, use your own VLESS, VMess, Trojan, Shadowsocks, Hysteria2 or WireGuard servers for zev, every app or the whole computer; zev learns per network which sites need it, says why each goes the way it does, counts the data and shows a server as a QR code.

DNS that works on any network (zev dns)

zev dns finds which DNS resolvers really work from your network and how (encrypted, another port, TCP, through your proxy), throws away a censor's answers, checks DNSSEC signatures itself, and falls back to the network's own DNS so names never stop.

A better internet line (zev tune)

zev tune measures your internet line in full (latency, jitter and loss to the router and beyond, speed both ways, bufferbloat, DNS, path MTU, IPv6, Wi-Fi), then fixes what holds it back one change at a time, keeps only what measurably helped, and never leaves you without a connection.

Other products for you