Documentation
How QuadScale Works
Understand the core concepts behind QuadScale mesh networking.
Control plane
The control plane manages identity, device enrollment, policy evaluation, route advertisements, and coordination between peers. It does not terminate encrypted WireGuard payload traffic.
Data plane
The data plane consists of QuadScale agents running on devices and infrastructure endpoints. Agents establish WireGuard tunnels directly when possible and fall back to relay nodes when NAT or firewall conditions require it.
Connection flow
- Agent authenticates and registers with the control plane
- Policy engine evaluates user, group, and device trust
- Agents attempt direct peer connection using NAT traversal
- Relay fallback is used only when direct paths fail
- Audit events are recorded for connectivity and policy decisions