Skip to content
  • MangoFly

    A self-hosted WireGuard mesh. Devices connect straight to each other; the coordination server is one binary and a SQLite file, and never sees their traffic.

    encrypted WireGuard · peer to peerLaptopbehind home NATServerin a datacentrePhoneon mobile datacoordination serverone binary · one SQLite filecontrol plane only (TLS)keys · tunnel addresses · peer lists · sealed ICE candidatesholds no private keys · carries no traffic · cannot decryptdatacontrol
  • MangoDock

    Docker management with nothing on the hosts. Reaches each daemon over an ordinary SSH session — no agent to install, no port to open.

    The MangoDock dashboard showing three host cards with container state counts, CPU and memory gauges, a usage history and recent events
  • MangoWiFi

    A Wi-Fi 6/7/8 test bench. One binary runs as Console or Agent either side of the access point under test, measuring latency under real load.

    AP under testWi-Fi 6 / 6E / 7Agentstation side · real radioLAN receiveriperf3 -sConsoleUI · orchestrates · probes
  • Blog
  • Nothing phones home

    No telemetry, no analytics, no crash reporter, no account login. Check it with a packet capture on your own network.

    Download MangoSSH
  • Project
  • Download
  • Operations

    Backups, metrics, upgrades and the failure people hit.

    Day two

    • Backups — The state is a SQLite file. Backing up the deployment means backing up that file.
    • Prometheus metrics — Exported by the server.
    • Admin API over the mesh — The admin API can be restricted to the mesh itself, so it is not reachable from the public internet at all.
    • Configuration as a file — The deployment can be described in a file rather than clicked together.
    • Several servers in one client — Work and home, or a customer's mesh and your own. One connected at a time.

    Devices that stop showing up

    The usual cause is the reflector: if UDP 8788 is not reachable, enrollment and TLS both look healthy while peers silently never connect. Check that before anything else, because every other symptom points the wrong way.

    Disposable devices

    Short-lived machines can be enrolled and reaped without leaving stale peers in everyone's list.