What is Data Relay Link?
Data Relay Link is a lightweight secure-connectivity gateway for small isolated, restricted, and NAT/firewall-protected environments. It is designed around a simple rule:Do not connect entire networks. Relay only the connections that are actually needed.It has two product pillars:
- Secure Remote Access — outside → inside. Publish only selected services from systems behind NAT/firewalls.
- Controlled Egress — inside → Internet. Allow restricted hosts to reach only policy-approved external destinations.
The intended scale is a few systems to a few dozen clients. The product is intentionally not a large-fleet orchestration platform, full VPN mesh, SWG, or SASE stack.
The problems it solves
Remote support often becomes a chain of infrastructure requests: Restricted networks have the opposite problem: an internal server may need package updates, source repositories, APIs, or vendor services, but administrators do not want to grant broad Internet access. Data Relay Link addresses both cases without turning the environment into one flat connected network.Secure Remote Access model
Install a public Data Relay Link Server once. Remote clients enroll and initiate outbound relay-control sessions toward it. A client can publish its own services or selected services on other LAN hosts that it can reach.Controlled Egress model
A restricted host uses the Data Relay Link Server as an HTTP/HTTPS forward proxy. The host itself does not require a Data Relay Link agent for this v1 model. The policy model includes source CIDR, FQDN, destination port, controlled wildcard rules, default deny, fail-closed behavior, and protections against unsafe destinations.Who is it for?
System administrators
Reach remote Linux, Windows, or macOS systems without building a full VPN/RMM stack.
Technical support engineers
Give customers or partners a controlled one-command onboarding path for remote support.
Restricted-network operators
Permit only approved outbound HTTP/HTTPS destinations instead of granting broad Internet access.
Small infrastructure teams
Operate a few to a few dozen systems with persistent identity, service ports, policy, diagnostics, and a CLI.
What Data Relay Link manages
What it intentionally does not manage
- cloud security groups
- external firewall or NAT/DNAT rules
- host firewall policy
- DNS provider records
- operating-system accounts, passwords, or SSH keys
- application authentication
- application TLS certificates
- TLS inspection, DLP, malware inspection, CASB, browser isolation, or full SWG/SASE functions