Type the name.
Not the address.
Every device, every app.
Every device and internal app in your network gets a simple name, like db-prod or grafana. It works the moment a device joins, on every device, with nothing to set up.
You type
ssh deploy@db-prod
Asks
What is db-prod?
your laptop
Answered by
This device
nothing leaves it
Answer
100.64.0.21
machine
db-prod · Linux server in the office
Short when you want it.
Complete when you need it.
Every machine has a short name and a full one. Both work from any device in your network.
db-prod.acme.your-domain
The machine
Its name. Rename it in the dashboard any time.
Your network
A name you choose for your whole network.
Shared domain
The same for every network.
Most of the time you only need the first part: db-prod works on its own. The full name is there for tools that want one, and for HTTPS certificates.
Names follow the machine.
Not the other way round.
Devices come and go, get renamed and get new addresses. The names keep up on their own.
01
A device joins
It gets a name the moment it's approved, from its computer name. Every device can use it right away.
build-02
joined · Linux
build-01
Linux
02
You rename it
Change the name in the dashboard, and the new one works everywhere. The change is recorded in the activity log.
Name
03
Its address changes
Reinstall a machine or add it again, and it may get a new address. The name follows, so nothing else changes.
100.64.0.21
before
100.64.0.58
now · same name
Already have DNS?
It still works.
Your network's names are answered first. Everything else goes wherever you say.
- NameserversSend every lookup from your devices to the DNS servers you choose.
- Split DNSSend one domain, like corp.internal, to its own servers. Up to 32 domains.
- Search domainsLet short names like printer find printer.office.example. Up to 16.
Network name
Nameservers
Split DNS
corp.internal
aws.internal
Search domains
$ sudo underpass cert
Certificate: /var/lib/underpass/certs/grafana-box.crt
Key: /var/lib/underpass/certs/grafana-box.key
It renews automatically while underpass runs.
Real HTTPS.
No browser warnings.
Turn on HTTPS in your DNS settings, then one command gets a trusted certificate for the machine's full name. It renews on its own.
Trusted certificates are public record, so a machine's full name becomes public once it has one. Pick names you're happy to share.
Questions about names.
Something we didn't cover? Write to us and we'll help you get set up.
Ask us anythingNo. Names work as soon as a device joins. Underpass answers them on each device, so there's no DNS server to run.
/ Independent · bootstrapped · no investors
Built by a person,
not a fund.
I'm Endi, and I build Underpass myself. No investors to answer to, only the people who run their networks on it. Every message that comes in reaches me directly.