Re-route your VPN egress on the fly.
A self-hostable control plane for WireGuard. Static client configs, dynamic server-side routing. No agents, no re-configs.
Any Device is an Exit Node
Dynamic Egress nodes can be spun up anywhere, allowing you to route traffic through virtually any connected device.
Mobile Devices
Route traffic through a cell phone on a 4G/5G network for unique IPs.
Home Routers
Utilize residential connections directly from compliant routers.
GSM Modems
Automate rotation of cellular IPs using attached modem hardware.
Cloud Servers
Traditional high-bandwidth egress through VPS or bare metal.
Android Egress Node
Turn any Android device into a mobile egress point.
Get it on Google PlayLinux Egress Node
Headless egress for servers, Raspberry Pis, and more.
Download for LinuxCommunity Extendable Network
Join a collaborative egress ecosystem where users contribute bandwidth to a global pool. Switchyard's community network allows for unprecedented geographic diversity and resilience, powered by thousands of individual nodes worldwide.
Collaborative Ecosystem
Share and utilize egress capacity across a trusted peer-to-peer network.
Global Footprint
Access residential IPs in over 150 countries through community-hosted nodes.
The Unified VPN Hub
Centralize your existing infrastructure into a single, powerful egress control plane.
VPN Aggregator
Connect once to Switchyard and route traffic through any of your existing VPN providers. Use them as egress nodes within a single control plane.
Bypass Device Limits
Eliminate device restrictions. Even if your provider limits you to one connection, Switchyard's hub architecture lets you share that egress across your entire network.
Pay Once, Use All
Simplify your stack. Manage and rotate between multiple providers without switching apps or managing separate client configs.
Protocol: AmneziaWG vs. WireGuard
Switchyard supports AmneziaWG, a modified version of the WireGuard protocol specifically designed to evade Deep Packet Inspection (DPI).
Standard WireGuard
Fast, modern, and lean, but easily identifiable by sophisticated firewalls due to predictable packet headers.
- Identifiable packet sizes
- Static handshake signatures
- Vulnerable to DPI blocking (e.g., Great Firewall)
AmneziaWG
Maintains WireGuard's speed while adding obfuscation layers to bypass active probing and DPI filters.
- Randomized Junk Packets
- Modified Magic Headers (S1/S2/S3/S4)
- Evades Deep Packet Inspection
Why Switchyard?
The technical precision you need, without the operational overhead.
| Feature | Traditional VPNs | Tailscale / ZeroTier | Enterprise IPSec | Switchyard |
|---|---|---|---|---|
| Deployment | Manual Configs | Heavy Client Agent | Complex Hardware/Software | Agent-less (WG/AmneziaWG) |
| Client Config | Static, hard to update | Dynamic, requires account | Managed via MDM | Static (Never changes) |
| Egress Control | Rigid | Exit Nodes (Agent req.) | Centralized Gateways | On-demand API-driven |
| DPI Evasion | None (OpenVPN/WG) | None (Standard WG) | Varies, often blocked | AmneziaWG Native |
| Server-side Re-routing | Complex network rules | Control server reliant | Slow convergence (BGP/OSPF) | Instant, Transparent |
The Path Ahead
We are building the definitive infrastructure for VPN control.
Multi-region Support
Seamlessly manage egress nodes across multiple cloud providers and geographic regions from a single pane of glass.
Advanced Billing Integration
Granular bandwidth tracking and cost attribution per user, department, or specific egress route.
Enhanced API Controls
Full programmatic access to routing tables, peer management, and real-time connection state.