Skip to main content

Hub Edge Assignment

Every connector connects to your network through a hub edge -- a dedicated edge device that serves as the central connectivity point. Understanding this relationship is key to managing connectors effectively.

What Is a Hub Edge?​

A hub edge is a standard dedicated edge that acts as the aggregation point for one or more connectors. The connector establishes a WireGuard backbone tunnel (wg0) to the hub edge, creating a secure link between the connector's site and the rest of your network.

The hub edge handles:

  • Terminating WireGuard tunnels from connectors
  • Routing traffic between connector sites and the broader network
  • Distributing configuration updates to connected connectors

Bidirectional Configuration Sync​

The connector and hub edge maintain a synchronized configuration:

  • When the connector's WireGuard configuration changes (keys, endpoint, allowed IPs), the hub edge is automatically marked as dirty and re-synced to include the updated peer.
  • When the hub edge's WireGuard configuration changes, all connectors assigned to it are automatically marked as dirty and re-synced.

This bidirectional sync ensures both sides of the tunnel always have matching configurations without manual intervention.

Viewing Connector Peers on the Hub Edge​

On the hub edge's WireGuard peers display, connected connectors appear with a blue Connector badge to distinguish them from standard WireGuard peers. These connector peer entries:

  • Show the connector's public key, endpoint, and allowed IPs
  • Link directly to the connector's detail page when clicked
  • Cannot be edited or deleted from the hub edge side (managed through the connector's own configuration)

Changing the Hub Edge​

To migrate a connector to a different hub edge:

  1. Navigate to the Connector Detail page.
  2. Update the Hub Edge assignment to the new edge.
  3. Save the change.

The platform will:

  • Remove the connector's WireGuard peer from the old hub edge
  • Add the connector's WireGuard peer to the new hub edge
  • Push updated configurations to both hub edges and the connector
info

The hub edge must be online and configured with WireGuard before connectors can establish their tunnels. If the hub edge goes offline, connectors will lose connectivity until it recovers.