Private Connect
Route office Internet traffic through a Loclix WireGuard gateway.
Private Connect sends your office's IPv4 Internet traffic through an encrypted WireGuard connection to Loclix. You can configure DNS policies and review usage by office IP address.
Office setup
Connect an office to set up router keys, subnets, and routing. You need a compatible router and an available gateway in your account. Contact support if no gateway is available.
Use Office subnet and DHCP to plan client addresses. Each interconnect connects one office router to one gateway. Different interconnects can use overlapping private subnets.
DNS responses
DNS policies let you block domain lookups or return a chosen IPv4 address. Policies apply to ordinary DNS requests through the tunnel. Encrypted DNS over HTTPS requires separate controls on your devices.
Traffic visibility
Analytics shows transferred bytes, source and destination IPs, and recent DNS queries. Preserve client source addresses on your office router to see usage per IP.
Service boundaries
Private Connect supports IPv4 Internet access. It blocks private destinations and unsolicited inbound connections. Each interconnect uses one gateway, without automatic failover.
It does not connect offices to one another or publish local services. Use Tunnels to publish HTTP applications and Zero Trust to require sign-in.
WireGuard encrypts the office-to-gateway connection. HTTPS remains encrypted between your devices and the websites they visit; Private Connect does not inspect that content.