Skip to main content
WideWired
Docs

Connectivity and paths

Path priority, link-state inspection, and cloud relay configuration and availability.

Path selection order

A device link considers paths in this fixed order:

  1. Direct: an end-to-end encrypted connection between the devices. Free.
  2. Peer relay: forwarded through another device in the same network. Free.
  3. Cloud relay: forwarded over WideWired's backbone. Metered by successfully forwarded traffic.

A disabled path is excluded. When link quality changes, the system reselects automatically.

Direct connectivity requirements

Devices behind NAT probe mutually reachable addresses and attempt traversal. Direct commonly fails when:

Falling back to a relay is normal path selection. Traffic remains end-to-end encrypted, and a relay cannot read the payload.

Inspecting the current path

wwnet

The status table prints one peers row per peer, in the form <name> (<network address>) - <path type>, <state>. The path type is direct, peer relay or cloud relay; the state is healthy, needs attention or checking.

In the console:

Configuring cloud relay

Under Configuration → Links, configure each link's:

Cloud relay is the only metered path; see the billing model.

Confirm that both endpoints report status connected, then reach the peer's network address:

ping <peer overlay IP>

To separate network-layer reachability from an application-port issue, test the relevant TCP or UDP port afterwards.

Quick troubleshooting

Symptom Check and action
A relay is used instead of direct Check NAT type, outbound UDP policy and host firewalls; relay fallback itself is not a fault
Cloud relay says credit is initializing Wait for balance sync and refresh
Cloud relay says credit is exhausted Top up; direct and peer relay remain available
Cloud relay says the schedule is inactive Check the plan, timezone and current time
Cloud relay says the region is unknown The rate cannot yet be selected; wait for recovery and contact support if it persists
Cloud relay says the relay is unavailable Check free paths; cloud relay rejoins selection automatically after recovery
ping fails while the path is healthy Check whether the target firewall allows ICMP on the virtual adapter, then test the application port