Getting started with Ciyora VPN

Ciyora VPN provides zero-trust network access over a WireGuard mesh. Its pages are under Network in Ciyora Console.

Plan your sites. List the networks people need to reach and pick a Linux VM or container host in each for a site gateway.
Create enrolment keys under Network > Enrolment keys: one for gateways and one for user devices. Copy each key when it is shown; it is not shown again.
Install gateways and wait for them under Network > Overview and gateways. Gateways connect outbound; no inbound ports are needed.
Approve routes under Network > Routes. Check the overlap warnings.
Write access controls under Network > Access controls. Start with groups and the hosts and ports each needs; everything else is denied. Review the diff before saving.
Configure DNS under Network > DNS: add split DNS for internal domains and your resolvers.
Set split tunnel rules under Network > Split tunnel if some traffic should stay off the tunnel.
Roll out Ciyora Client to a pilot group, then check Network > Devices and Network > Topology.