Overlan: remote access without opening router ports

Field notes

The described workflow separates three roles: a central VPS hub, a Gateway installed inside the client’s network, and a technician endpoint that receives approved routes. The page says the Gateway detects LAN ranges such as 192.168.1.0/24 and reconciles route changes in roughly 30 seconds. Its implementation notes name a WireGuard-first design with wintun, gVisor netstack, and SOCKS5 fallback paths, while the visible monitoring example lists 12 organizations and 48 devices.