Swarm
Connect devices and operators in Denied, Degraded, Intermittent, and Limited (DDIL) environments.
Poolnet is a private mesh VPN for devices and operator laptops. It carries telemetry, operator sessions, and software updates across available radio, LTE, or satellite links. Devices can communicate locally when internet access or the command node is unavailable.
KEY FEATURES
- Private mesh VPN with stable virtual IP addresses
- Hybrid X25519 and ML-KEM-768 tunnel key exchange
- Signed membership, roster, and access rules
- Self-hosted coordination and relay infrastructure
- Unicast IP support for operator tools and telemetry
Continue using your existing tools over a private mesh network
Poolnet presents an ordinary network interface with a stable virtual IP address on each device. Applications such as SSH, TAK server connections, MAVLink telemetry, and gRPC can communicate over Poolnet without implementing their own mesh transport.
The network runs over the links your hardware provides. Poolnet maintains the private connection as available paths change, helping operators reach a device as it moves between networks.
Communicate with other nodes even when the coordinator is unreachable
Peers share signed rosters and policies locally, so every system can continue communicating even if the centralized coordinator node becomes unreachable.
An authorized operator can carry a prepared enrollment file forward or use a provisioned device as a local command node. Credentials still expire, so plan the renewal interval into disconnected operations.
Establish fine-grained access rules between peers and services
To establish a tunnel, each peer proves possession of its device key and signed membership credentials. Hybrid X25519 and ML-KEM-768 key exchange secures every tunnel.
Operators can set and update access rules that determine which peers and services can communicate. Separate mesh overlays maintain isolation between separate mission networks.
Deliver updates through reachable peers
Poolnet carries Poolboy deployment traffic to devices running GWOS. A lost internet uplink does not also remove working local connectivity.
An updated node can pass the release to air-gapped peers, so software spreads across the mesh without a separate coordinator connection for each device.
Use Cases
Procurement
Run the network on infrastructure you control, including isolated deployments. Poolnet integrates with a Linux fleet you already run, so adoption does not require an operating system replacement.
Scale
Provision membership in batches and distribute signed roster changes through reachable peers.
Security
Authenticate device keys locally and enforce signed membership and access rules. Multi-overlay support isolates traffic by role and mission.
Reliability
Reachable peers keep communicating during a backhaul outage. Separated groups exchange traffic internally and reconnect when a physical path becomes available.
Common questions
- Can Poolnet operate without internet access?
- Provisioned peers with valid credentials can communicate over available local links without internet access. Enrollment, policy signing, and credential renewal still require a coordinator node, but you can deploy that coordinator locally in air-gapped environments using Poolboy.
- Does Poolnet require GWOS?
- No, Poolnet can run on an existing Linux fleet.