A business VPN that reads like a map, not a maze
RSRouterZero Trust network management
A control plane for organizations that connect private services over peer links without flattening the network: tenants, projects, route policies and DNS — under centralized control.
Key features
Centralized management of a distributed network
Tenants and projects
Administration of tenants, projects, access groups and peers
RSLogin sign-in
OIDC/OAuth with Authorization Code + PKCE, audit events and login rate limiting
Route policies
Deterministic domain/CIDR route resolution — ambiguity is rejected, not guessed
Peer DNS zones
Zones and suffix-forwarding rules: overlapping subnets stay isolated
Node management
Enrollment, revocable credentials, desired-state polling and observed-state reporting
Interfaces for everyone
Web console, CLI/TUI and Tauri desktop/Android shells
Strict control-plane / data-plane split
RSRouter manages the desired state of the network: routes, access and nodes. Transport, SOCKS, DNS and host routing are built on Krasichka technologies — integration happens only through versioned OpenAPI 3.1 and JSON Schema contracts, with no shared databases or code dependencies.\n\nHTTP, SSE and WebSocket interfaces let you embed RSRouter into existing automation. It ships as a hosted or on-prem Docker Compose package with external PostgreSQL and a TLS proxy, complete with health/readiness endpoints and Prometheus metrics.
How it works
- 01
Create a tenant
Define projects and access groups
- 02
Connect peers
Set up peer links and DNS zones
- 03
Define policies
Describe routes by domains and CIDR
- 04
Enroll nodes
Nodes receive the desired state and report the observed one
Need a managed private network?
Tell us about your infrastructure — we'll propose an architecture for your tasks