Full-Mesh VPN
Every site holds a direct tunnel to every other site.
How widely is it used?
Adoption is rising quicklyIncreasingly practical now that WireGuard mesh tooling automates key distribution.
How it works
Each node peers directly with all the others, so traffic takes the shortest path with no hub in the middle. The cost is tunnel count: n sites need n(n−1)/2 tunnels.
Connects
Every site ↔ every other site
Protocols
WireGuard, IPsec, SD-WAN
Typical users
Enterprises, Distributed engineering teams
Main use case
Low-latency direct traffic between all locations.
Advantages
- No hub bottleneck
- Shortest path between any two sites
Limitations
- Tunnel count grows quadratically
- Key rotation across every pair is a chore