Unified private access and secure connectivity
Your office computer. Your private services. Your whole team. Bring them closer—with access you control.
Made for the way work actually happens
Work from home. Reach a private database. Bring a partner into a project. Start with what you need to do.
Explore all scenariosSelect an authorized NSGW in the current Space for the IPv4 default route or approved IPv4 CIDRs. IPv6 is not routed through NSGW and is fail-closed by default.
Explore enterprise exitReach an office computer, NAS, or server from home or on the road. Cross-account access uses a directional L3 Grant; your own Nodes remain accessible, subject to the destination firewall.
Explore remote accessDeclare the protocol, host, and port as a private Service, then share it across accounts with only the users, groups, or source Nodes that need it.
Explore private servicesConnect Nodes and declared Services across offices, clouds, and data centers while keeping each access path explicit.
Explore hybrid connectivityPlace identity-aware L7 protection in front of a web application, or use source-IP policy for public TCP and UDP endpoints.
Explore public ingressFor public L7 access, pair workload identity with an enabled compatible Consumer Grant. For cross-account sharing, scope a Grant from selected people, groups, or source Nodes to the approved Node or private Service—without sharing a flat network credential.
Explore workload accessP2P A more direct way to connect
Connect your computers, reach a home NAS, or pair with a trusted collaborator. Send an invitation, confirm each other’s identity, and bring your devices together.
sudo ns quick inviteShare the invitation code or generated join command. Keep this terminal open.
sudo ns quick joinPress Enter, enter the invitation code, then press Enter again. Input is hidden.
Follow the terminal prompts. Pairing completes once both devices confirm.
No configuration file or manual relay choice to get started.
Direct paths first; a common usable relay when needed.
Each device pair is approved separately. Your peers do not automatically gain access to one another.
P2P is available through the NS CLI. On the same device, disconnect an active account connection before starting P2P. Team access policies remain managed in the console.
Cross-account sharing, two scopes
Give a teammate access to a whole device, or just one database. Cross-account Grants make the scope explicit; each account retains access to its own resources.
Directional cross-account whole-node access for SSH, administration, or protocols the destination host already controls.
A narrower path to an explicitly declared protocol, host, and port—without exposing the rest of the Node.
For people. For teams. For builders.
People connect in the App. Administrators shape access in NSD. Servers and automation use ns and the API.
Use the active Space to connect, then consume authorized Nodes, private Services, and an Exit.
Manage Organizations, Networks, resources, Gateways, ingress, and directional Access Grants.
ns CLI & APIConnect servers, inspect machine-readable state, and integrate operational workflows through supported interfaces.
Trust & control
NetSeed makes the identity, direction, scope, and state of an access path visible—without turning every user into a network operator.
Explore the architectureBrowser authorization creates or restores the device identity used by that App or ns profile.
Directional Grants define who can reach which Node or Service across accounts. Each account keeps built-in access to its own Nodes and private Services.
Activity events expose administrative changes and important state transitions for review.
Built for the devices your team already uses
Connect your first device. Give your team a clearer way to work together.
统一的私有访问与安全连接平台
办公室的电脑、内网的服务、分散各地的团队。用 NetSeed 安全连接，让距离不再影响协作，让访问始终有据可控。
在当前空间选择已授权的 NSGW，承载 IPv4 默认路由或指定 IPv4 CIDR。IPv6 不经由 NSGW，并且默认按失败关闭处理。
了解企业出口公网 L7 访问必须同时使用工作负载身份和已启用的兼容 Consumer 授权；跨账号共享则把人员、用户组或来源节点的授权范围限定到获批节点或私有服务，无需共享扁平网络凭据。
了解工作负载访问P2P 更轻量的设备连接
连接自己的电脑、访问家里的 NAS，或与可信的伙伴建立连接。通过邀请配对与双方确认，让设备安全互通。
sudo ns quick invite将邀请码或生成的加入命令发给对方，保持此终端打开。
sudo ns quick join回车后输入邀请码，再回车；输入时不会显示字符。
按终端提示，双方确认后完成配对。
内置默认配置，无需编写配置文件或手动选择中继。
优先建立直接连接，必要时通过双方可用的共同中继连接。
配对按设备分别授权，你的不同伙伴不会因此自动互通。
P2P 通过 NS 命令行使用。同一设备启动 P2P 前，请先断开正在运行的账号连接。团队访问策略仍在控制台管理。
跨账号共享的两种范围
给同事一台设备的访问权限，或只开放一个数据库。跨账号共享按需授权，同账号可继续访问自己的资源。
适用于 SSH、设备管理，或由目标主机自行控制协议的跨账号单向整机访问。
只连接明确声明的协议、主机和端口，不暴露节点上的其他资源。
连接、管理与自动化
用户在 App 中连接，管理员在 NSD 中管理访问，服务器和自动化使用 ns 与 API。
在当前空间中连接，然后使用已经获得授权的节点、私有服务和出口。
管理组织、网络、资源、网关、公网入口和单向访问授权。
ns CLI 与 API连接服务器、检查机器可读状态，并通过受支持的接口接入运维流程。
浏览器授权会创建或恢复当前 App 或 ns Profile 使用的设备身份。
方向明确的授权规定跨账号时谁能访问哪个节点或服务；每个账号仍可使用自己的节点和私有服务。
活动事件会呈现管理操作和重要状态变化，便于回看与核对。
支持团队正在使用的设备
从一台设备开始，让整个团队的连接与协作更简单。