FAQ
Is Larktun SaaS or private deployment?
Larktun is a SaaS service. You can start directly with free shared relay, then use dedicated or user-managed relay only when needed.
Do I need to manually select free relay?
No. Free shared relay is enabled by default for all users. You only need Derper changes for dedicated or user-managed relay.
Can tenants see each other's devices?
No. Each tenant is an isolated network with separate device inventory, policy, and logs.
Is ACL shared globally?
No. ACL is configured and enforced per tenant.
Can individuals use Larktun for personal NAS and dev workstations?
Yes. Personal NAS, home devices, and personal dev workstation access are common use cases.
Can I run my own relay servers?
Yes. User-managed relay is supported for region, performance, or compliance-specific requirements.
What is the easiest way to set up ACL for the first time?
Use least scope first: one account (or one group), one target device, one protocol/port. Validate success, then expand gradually.
Why do I still fail even when device is online?
Most often, subject, target, or port does not match in ACL. Check ACLs first. If subnet resources are involved, also check Routers.
Does the client interrupt endpoint users?
The default target is a low-memory, background runtime designed to stay non-intrusive.
Why can cross-region sessions still be unstable sometimes?
Typical causes include network jitter, relay load, or destination-side resource pressure. Start with default free relay checks, then move to dedicated or user-managed relay when optimization is needed.