Netrinos Fact Sheet

Accurate claims and wording you can quote directly

Accurate product claims and wording you can quote directly in scripts, articles, and descriptions. If you need something that isn't covered, ask us and we'll get you an exact answer: info@netrinos.com

What Netrinos Is

Netrinos is a service that creates a private network where remote devices can talk as if they were on the same LAN. WireGuard underneath, with a control plane on top.

Who It's For

People who look after their own computers. A home office, a small business, the NAS and the cameras, a server shared with family or coworkers. You don't need to be a network engineer. If you can set up a Windows file share, you can set up Netrinos.

Netrinos connects the people you choose to the devices you choose. It's not a way to publish something to the general public.

Setup

Install the app, sign in. Two devices are connected in minutes. No port forwarding, DDNS, static IP, or router configuration required. Works behind CGNAT (Starlink, most cellular carriers). Apps for every platform are at netrinos.com/download.

Platforms

Windows, macOS, Linux, iOS, Android. Raspberry Pi or similar SBCs, on a 64-bit OS.

Reaching Devices That Can't Run the App

Any machine running Netrinos can act as a gateway for devices on its LAN. This allows you to reach devices that cannot install software (a NAS, NVR, camera, firewall, access point, or modem). The gateway projects them onto the private network. Each virtual device gets its own name and IP, reachable directly from anywhere on the network. Nothing installs on the devices themselves. A machine already on site works. A Raspberry Pi makes a great gateway.

The path works both ways. With a static route on the LAN, devices that don't run Netrinos can also reach the private network through the gateway. An Xbox can stream from a remote NAS without either end running VPN software.

Architecture

Netrinos is point-to-point first, encrypted with WireGuard. The Netrinos service is a connection broker. It sets up the peer-to-peer connections but cannot see what travels over them. Connections go direct whenever the network allows, the fastest path available. When layered NATs make a direct path impossible, traffic falls back to an encrypted relay, so the connection always works. The relay passes only encrypted packets and cannot read them. For added security, hosting your own private relay is supported.

Netrinos uses NAT rather than routing, which reduces network complexity. Subnet conflicts (two sites both on 192.168.1.x, for example) resolve without any renumbering.

Gateways and Routes can also send chosen connections through another site. While travelling, for example, you can reach your bank's website through your home connection. These are deliberate exceptions you configure. By default, connections go point to point.

Security

All the cryptography is WireGuard's. Netrinos only manages the connections. It is a dynamic configuration manager for WireGuard.

Traffic is encrypted end to end between your devices. Nothing is exposed to the public internet. You choose which devices join the network, never the whole LAN.

Access control is per user and per device. A grant can cover a single device or all of a user's devices, and it is enforced at the IP level. This includes virtual devices. Each member of the network sees only the devices they have been given access to.

Use Cases and Demo Ideas

Every one of these works today and makes a good on-camera segment.

  • Remote desktop to the home or office PC using the client already in Windows (or VNC), from a laptop on a phone hotspot.
  • Browse the NAS from a hotel. Any brand, no vendor portal, no ports opened.
  • Off-site backup between two homes, even when both LANs are 192.168.1.x.
  • Check the cameras from your phone with the vendor's native app in non-cloud mode. The NVR is a virtual device, and nothing installs on it.
  • A private game server for friends, behind CGNAT where port forwarding is impossible.
  • The setup itself. Two computers connected in under five minutes.
  • While travelling, reach your bank's website through your home connection.

Demo Environment

VMs work great, as do cloud servers and phones. If you use VMs, set their networking to bridged so each VM gets a DHCP address on your real network. The hypervisor's NAT mode adds an extra layer of NAT that complicates the demo and makes it unrealistic. A cloud VM makes a convincing "remote site," and a phone on cellular is the quickest one.

Testing Tips

  • Test from a different network. Two machines on the same LAN will connect, but the point only shows from outside. A laptop on a phone hotspot is easy to demo.
  • Expect direct connections most of the time. When a direct path is impossible, the encrypted relay carries the connection, and the apps keep working either way.
  • Try the things you already use. Remote desktop, a mapped drive, ssh, rsync, the NAS's web page, a camera app pointed at the virtual device's address.

Media Assets

Further Reading

Pricing

Plan Cost Includes
Personal Free 3 users, 100 devices, non-commercial
Pro From $10/month 10 users, 100 devices, then $1/month per extra user or 10 devices
Edge Custom Multi-site and multi-customer management, remote device management, central monitoring

Full details on the pricing page. How it works in depth: the technology page.