MacroVPN Enterprise
WireGuard & Headscale Powered

Zero-Trust Mesh VPN for Modern Enterprises

Unify branch offices, remote accountants, and mobile field teams into an ultra-fast, encrypted peer-to-peer network. Share TallyPrime Gold licenses and internal company data folders with zero static IPs and zero router port forwarding.

Explore Features ▾
ChaCha20
Kernel Encryption
9999 / 445
Tally & SMB Relay
< 10ms
Sub-Second P2P Mesh
Live Enterprise Mesh
Subnet: 100.64.0.0/10
👑
Headquarters Admin Gateway
100.64.0.2 • Tally Relay: Port 9999 Active
Gateway
Mumbai Branch — Accounts 01
100.64.0.5 • Borrowing License via Port 9999
Online
Delhi Office — Audit Team
100.64.0.8 • SMB Company Data Connected
Online
Field Rep — Android Mobile
100.64.0.12 • Mobile WireGuard App
Standby
Coordination: Headscale Coordinator Encrypted P2P
Built for Enterprises

Everything You Need to Manage Your Mesh Fleet

Complete web-based administrative command without relying on third-party cloud servers or third-party loggers.

Zero-Trust WireGuard Mesh

Every device is individually authenticated with pre-shared cryptographic keys. Traffic travels directly point-to-point without bottlenecking through slow centralized proxy servers.

TallyPrime Gold License Sharing

Share your TallyPrime multi-user license across branch offices and home setups. Remote machines enter your Admin Mesh IP on port 9999 to seamlessly lease licenses with full TSPL handshake.

Encrypted SMB Company Data Share

Expose company financial folders over Windows File Sharing (Port 445 SMB) strictly within the encrypted VPN subnet (100.64.0.0/10), safely protected from the public internet.

Employee Client Provisioning

Create dedicated login accounts for company staff or generate 10-minute QR code pairing invitations for zero-touch mobile and desktop enrollment.

Granular Port Firewall Rules

Manage client-specific port permissions. Allow accounts staff access to Tally on port 9999 while restricting general employees from sensitive database or SSH ports.

Duplicate Cleanup & Fleet Hygiene

Automatic identification of reconnect duplicates. 1-click cleanup to purge stale registrations and keep your Headscale device roster completely clean and accurate.

Simple 3-Step Setup

Up and Running in 2 Minutes

01

Create Admin Account

Sign up with your work email and organization name. Your tenant workspace and Headscale user ID are configured automatically.

02

Provision Clients or QR

Create client credentials for team members or generate a 10-minute pairing QR code for employees to scan from the mobile or desktop app.

03

Access Shared Services

Clients connect instantly to the mesh. Open TallyPrime or file explorer to access company files securely from anywhere in the world.

💼 Specialized TallyPrime Architecture

How MacroVPN Solves Multi-User TallyPrime Licensing

Normally, TallyPrime Gold multi-user licenses require all computers to be physically connected to the same local area network (LAN) due to UDP discovery broadcasts.

MacroVPN creates a virtual Layer-3 mesh overlay network across the internet. The Admin Machine acts as the Gateway Server listening on standard port 9999.

Remote accountants simply configure their TallyPrime Gateway Server to point to the Admin's Mesh IP (e.g. 100.64.0.2:9999).

MacroVPN routes the TSPL handshake directly over WireGuard, granting remote users license access just as if they were sitting in the main office.

Enterprise Security

Zero-Log Cryptographic Tunnels

MacroVPN coordinates routing via Headscale while cryptographic keys remain strictly on client endpoints. Traffic is authenticated using modern Noise protocol handshakes and ChaCha20-Poly1305 symmetric encryption.