Devices

Enrollment, monitoring, inventory, and device lifecycle management.

Device Enrollment Process Agent Configuration (agent.yaml) Supported Platforms (macOS, Linux, Windows) Device Groups & Labels Hardware & Software Inventory Agent Troubleshooting

Networking

Mesh networks, VL1 overlay, peer connectivity, and network topology.

Mesh Network Architecture VL1 Overlay Transport NAT Traversal & Hole Punching Relay Tickets & Fallback TUN Interface & SD-WAN Routing

Policies

Network and DNS policy actions, scoping, and evaluation order.

Policy Engine Overview Action Types: Allow, Deny, Route, NAT, Tunnel, Quarantine Scope & Targeting (Tenant, Network, Group, Device, User) DNS Policies (Block, Override, Forward, Rewrite)

Edge Endpoints

Promoted mesh nodes with anchor, relay, egress, DHCP, and print server capabilities.

Promoting a Node to Edge Endpoint Capabilities: Anchor, Relay, Egress, DDNS, Default Gateway DHCP Server & Bridge for Non-Mesh Devices Print Server & SNMP Discovery SNMP Asset Inventory

DNS & DDNS

DNS resolution, policy-based routing, mesh-assisted DNS, and dynamic DNS updates.

DNS System Overview Mesh-Assisted DNS Resolution DDNS Updates & Records Blocklists & Filtering

Identity & Access

Users, groups, SSO, and authentication configuration.

Managing Users & Roles Groups & Permissions SSO Configuration

Security

Key management, trust chain, TUF, and compliance.

Key Hierarchy (PR, TR, Agent) TUF Update Verification Noise Protocol & NodeID Binding

Jobs & Scripts

Remote execution, ScriptPack management, and job lifecycle.

Job Types (Run Script, Collect Logs, Live Query, etc.) ScriptPack & Manifest Verification Job Lifecycle & Status Tracking

Monitoring

Telemetry, alerts, health endpoints, and observability.

Telemetry & Metrics Alert Rules & Notifications

Billing & Plans

Subscription plans, usage, and billing management.

Available Plans & Features Usage & Metering

Frequently Asked Questions

Quick answers to common questions.

The ORBTR agent supports macOS, Linux, and Windows. On Linux it runs as a systemd service, on macOS as a launchd service, and on Windows as a Windows Service.
No. ORBTR uses UDP hole-punching via the VL1 overlay for direct P2P connections. If hole-punching fails, traffic is relayed through edge endpoints with relay capability. No static IPs or port forwarding are required.
The agent uses TUF (The Update Framework) for secure, verified updates. Artifacts are signed with root/targets keys and verified before installation. Updates are staged by channel (stable, beta, canary) with automatic rollback on failure.
Yes. Edge endpoints with DHCP Server capability can issue IP addresses to non-mesh devices on a local network adapter and bridge their traffic into the mesh network.