Do I need a static IP on the client site?
Do I need a static IP on the client site?
No. ProxyLink works with dynamic IPs. The WireGuard tunnel initiates an outbound connection from the client’s router to ProxyLink — no inbound ports need to be open. Even if the ISP IP changes, the tunnel reconnects automatically.
Do I need to install software on every device?
Do I need to install software on every device?
No — for network devices, cameras, NVRs, PBX systems, switches, and anything else accessible on the LAN. One WireGuard tunnel on the router is all you need. The only exception is Windows PCs: for VNC or the ProxyLink agent they use a one-time deploy script. (RDP alone works through a gateway tunnel with no script at all.)
How is this different from TeamViewer or AnyDesk?
How is this different from TeamViewer or AnyDesk?
TeamViewer and AnyDesk require software on every device. ProxyLink requires nothing on network devices — cameras, NVRs, PBX systems are unreachable by those tools without an agent. ProxyLink also routes VPN traffic directly through WireGuard to our own EU server — there is no third-party remote-access relay network (the web dashboard and HTTP proxy links are fronted by Cloudflare’s edge for TLS and WAF; see “Where is ProxyLink hosted?” below). Both TeamViewer and AnyDesk were breached in 2024.
Where is ProxyLink hosted?
Where is ProxyLink hosted?
Hetzner Germany (Falkenstein). EU infrastructure, EU data protection law applies. Session relay and storage run entirely on our own server — there is no third-party remote-access relay network. Web traffic (dashboard, browser sessions, HTTP proxy links) is fronted by Cloudflare’s edge for TLS and WAF; WireGuard tunnels and TCP links connect directly to the EU server.
What protocol does ProxyLink use?
What protocol does ProxyLink use?
WireGuard for the VPN tunnel. WireGuard is open-source, audited, and built into the Linux kernel. It is faster and more secure than OpenVPN or IPsec.
Can two clients have the same LAN subnet?
Can two clients have the same LAN subnet?
Yes. On gateways running the ProxyLink management agent (MikroTik or Linux), every NETMAP’d VLAN — the primary LAN and each additional VLAN — gets its own unique assigned range in the
10.128.0.0/9 range, so two clients both using 192.168.1.0/24 stay distinct with no reconfiguration on either site. On agentless routers the primary LAN is still NETMAP-isolated; additional VLANs route directly and are collision-checked — if you declare an additional VLAN that overlaps a subnet already in use by another account, the save is rejected and you give that VLAN a unique range.Is ProxyLink NIS2 compliant?
Is ProxyLink NIS2 compliant?
ProxyLink provides the tools needed to meet NIS2 Article 21 requirements — immutable audit log, session recording, and a client-facing compliance portal. It is EU-hosted on open-source infrastructure. Consult your legal advisor for your specific obligations.
What happens if the WireGuard tunnel drops?
What happens if the WireGuard tunnel drops?
PersistentKeepalive=25 keeps the tunnel alive. If it drops, WireGuard reconnects automatically within seconds. ProxyLink monitoring alerts you if a service becomes unreachable.
How many devices can I connect?
How many devices can I connect?
The WireGuard pool supports up to 65,534 peers. On the MSP plan, you get 300 tunnels and 1,000 proxy links. On the Custom plan, it’s unlimited.