The safest first real deployment is on one local network where you control all four machines.
Use that environment to prove:
- identities load correctly
- bootstrap works
- peer ownership matches config
- the TUN interface comes up
- traffic moves without relay unless needed
- prepare all four configs from
examples/multi-pc/ - generate one identity per machine
- replace placeholder peer IDs with real exported identities
- validate each config locally
- start
relay - start
alpha,beta, andgamma - inspect
vine status,peers,routes, andsessions
A LAN removes several variables at once:
- NAT complexity
- public reachability problems
- firewall uncertainty
That makes it easier to tell whether failure is caused by:
- wrong allowlist identity
- wrong prefix ownership
- bad config distribution
- TUN or route setup problems
The first LAN deployment should show:
- all peers enrolled into the same
network_id - expected prefixes installed
- at least one direct session
- observable relay fallback only when forced