innernet is a private network system that uses WireGuard under the hood.
innernet solves the problem of establishing secure, controlled connectivity between machines by layering access control primitives on top of WireGuard's cryptographic foundation. It organizes networks using CIDR blocks to define security boundaries and peer groups, then enforces access rules based on these network segments. A coordination server manages peer registration, distributes endpoint information to enable direct peer-to-peer connections, and maintains the network's access control policies. Peers initialize by redeeming single-use invitation files, which bootstrap their connection to the server and allow them to register their cryptographic keys.
innernet suits teams or organizations building private networks where fine-grained access control based on network topology is valuable. It works well for scenarios where you want to leverage standard IP networking concepts rather than abstract them away. The README positions innernet alongside nebula and Tailscale as alternatives pursuing similar goals but with different design philosophies. Unlike those projects, innernet emphasizes CIDR-based access control and direct integration with WireGuard's security model rather than providing a simplified overlay abstraction. The tool is suitable for operators comfortable thinking in terms of subnets and IP ranges.
The project is marked as experimental software that has not received an independent security audit. Development activity shows consistent engagement with bug fixes and incremental improvements to core functionality. The maintainers respond to issues and merge contributions addressing both operational concerns and feature requests. Work focuses on stability and usability of the server and client components rather than rapid feature expansion.
