Identity before access
Account-authenticated registration uses an Ed25519 device key and a single-use signed challenge. The private identity key stays on the device.
Native connects authorized devices to YuraNetwork’s private services. Account ownership, device identity and encrypted transport form one deliberate access path.
An account registers a device identity. Signed admission binds it to a WireGuard key; private routing then connects that device to names and services.
Account-authenticated registration uses an Ed25519 device key and a single-use signed challenge. The private identity key stays on the device.
WireGuard carries traffic between the device and the network gateway. A separate admission exchange authorizes the connection.
Private destinations use the Native route. Public Internet traffic stays on the ordinary interface under the documented split-routing contract.
Device listing, revocation, session expiry and heartbeats make access manageable. Service authorization remains a separate boundary.
An account registers a device identity. Signed admission binds it to a WireGuard key; private routing then connects that device to names and services.
Enroll your device, connect to private services and revoke access when a device leaves your control.
Use the preserved setup guides for the existing Tunnel tools; OS Native activation follows its account and device workflow.