Conntrack
Sign in

INFRALOCK SYSTEMS

The private network between your machines.

Conntrack is a WireGuard mesh. Laptops, phones, servers, and the subnets behind them take stable names and addresses, and stay off the public internet.

Start a fabricSee the product

Your fabric

name.conntrack.net

Devices
None yet
Plan
Personal

No devices enrolled

The first address is issued when you add a device. Nothing is preloaded.

WireGuard
The data path is a peer mesh
0
Public ports required
100.104.12.0/24
Stable fabric addresses
180d
Default key expiry

Three moves. Then a name.

  1. 01

    Create an account

    Email, Google, or X. The fabric starts empty, on the Personal plan, owned by you.

  2. 02

    Add a device

    Interactive sign-in, or an auth key for a fleet. Approval can be required on Enterprise.

  3. 03

    Call it by name

    laptop.your-fabric.conntrack.net. The address stays with the key, not the network you are on.

What the console controls

Exit nodes

Choose one device and send the fabric’s internet traffic through it. Everything else stays on the mesh.

Subnet routers

Advertise a CIDR from a device that can already see it. An admin approves the route before it propagates.

Mesh SSH

Open a shell by device name. The policy file names the source, the tag, and the user.

Grants

Identity to identity, with ports. Groups, tags, and tests live in one policy file.

Fabric DNS

Every device gets a stable name on your fabric domain. Split DNS keeps private zones private.

Ingress

Publish a service name without punching an inbound hole in the host firewall.

A policy you can test

A new fabric lets every machine reach every other machine, on any port. That is what makes Remote Desktop, file shares, and SSH work by address. Narrow it afterwards with groups, tags, and tests.

Read the model
{
  "grants": [
    { "src": ["*"], "dst": ["*"], "ip": ["*"] }
  ]
}

Pricing

Every new fabric starts on Personal. Raise the plan in settings when you need the next control.

Personal

$0

Starts with every new account

  • 3 users, 1 group, 6 machines
  • Fabric DNS and exit nodes
  • One-time auth keys
  • 1-day flow logs

Standard

$10

per user / month

  • 50 users, 20 groups, 50 machines
  • Mesh SSH, ingress, certificates
  • Reusable keys and API keys
  • 30-day flow logs

Enterprise

$300

per month

  • 500 users, 100 groups, 200 machines
  • Approval, posture, auditor
  • SCIM and log streaming
  • 90-day flow logs