HexaWAN

Zero Trust · Control-plane console

HexaWAN

No nodes have registered yet. Start a node agent and it will appear here.

VPN users

End users sign in from the HexaWAN client with these credentials and receive a config for each node they're entitled to.

No VPN users yet. Click “Add user” to create one.

Reverse proxy

checking…

nginx isn't deployed in this stack, so routes are stored but not served. Add the nginx service (see the README) and restart.

DNS credentials

Cloudflare API tokens (scoped Zone:DNS:Edit), stored encrypted and shared across routes for DNS-01 certificate issuance and renewal. Reference one from a route's “Cloudflare DNS credential” selector.

No DNS credentials yet. Click “Add credential” to store one.

No proxy routes yet. Click “Add route” to create one.

WAF activity

No WAF events in this window. Turn on the WAF (detect or block) for a route to start collecting.

WAF event

Client config


        
Scan in the WireGuard app

      

      

        
        
      

    

  


  
  

    

      

        
Add route

        
      

      

        
        
        
        
        
        
        
        
        

          
          
        

        
        
        

          
          

            Disabled rule categories — turn whole CRS groups off for this route
            

            
          

          
          
        

        
      

      

      

        
        
      

    

  


  
  

    

      

        
Add VPN user

        
      

      

        
        
        
        
        

          Entitled nodes
        

        

          Registered devices
        

      

      

      

        
        
      

    

  


  
  

    

      

        
Add DNS credential