{"id":5268,"date":"2026-09-12T21:21:51","date_gmt":"2026-09-12T13:21:51","guid":{"rendered":"https:\/\/www.olares.com\/blog\/?p=5268"},"modified":"2026-09-14T11:57:13","modified_gmt":"2026-09-14T03:57:13","slug":"how-olares-access-works","status":"publish","type":"post","link":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/","title":{"rendered":"One address, multiple paths: How access works in Olares"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Open an Olares app at an address such as <code>https:\/\/desktop<\/code><code>.&lt;username&gt;.<\/code><code>olares.com<\/code>, and the experience looks simple: enter a familiar URL and reach the service. What happens behind that address is more nuanced. The same hostname can lead to different network paths depending on where the client is, whether it runs LarePass, and how the app entrance is configured.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That flexibility matters for a self-hosted system. Away from home, reaching an Olares device behind a home router can be difficult, especially when the device does not have a public IP address. At home, sending traffic out through a public reverse proxy and back would add an avoidable detour. TVs and media players may need direct LAN access but cannot run LarePass. Services inside Olares use another network layer altogether.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Olares addresses these cases with several complementary access methods. This article explains what each path is for, how the paths differ, and why the URL alone does not tell you whether traffic stays local or crosses the internet.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Architecture at a glance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Olares provides different paths for remote devices, clients on the same LAN, devices that need an app-specific LAN IP, and services running inside the Olares cluster.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"455\" src=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/remote-devices-ip-1024x455.jpeg\" alt=\"\" class=\"wp-image-5285\" srcset=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/remote-devices-ip-1024x455.jpeg 1024w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/remote-devices-ip-300x133.jpeg 300w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/remote-devices-ip-768x341.jpeg 768w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/remote-devices-ip-1536x682.jpeg 1536w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/remote-devices-ip-2048x910.jpeg 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Olares supports different access paths based on the client, network environment, and connection setup<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The diagram groups the main user-facing paths into seven scenarios:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>A. Public reverse proxy:<\/strong> A remote browser reaches an app entrance through Olares Tunnel.<\/li>\n\n\n\n<li><strong>B. Remote <\/strong><strong>VPN<\/strong><strong> access:<\/strong> A trusted device running LarePass reaches Olares through an encrypted connection.<\/li>\n\n\n\n<li><strong>C. Public-network detour:<\/strong> A client on the home LAN still sends traffic through the public reverse proxy. The app may load, but the route is inefficient for local access.<\/li>\n\n\n\n<li><strong>D. Direct access through <\/strong><strong><code>.local<\/code><\/strong><strong>:<\/strong> Local name resolution maps a <code>.local<\/code> hostname to the Olares LAN IP.<\/li>\n\n\n\n<li><strong>E. Direct access through <\/strong><strong><code>olares.com<\/code><\/strong><strong>:<\/strong> A hosts mapping or local DNS resolves the standard hostname to the Olares LAN IP.<\/li>\n\n\n\n<li><strong>F. Local <\/strong><strong>VPN<\/strong><strong> access:<\/strong> LarePass detects that the client and Olares share a LAN and uses an Intranet connection.<\/li>\n\n\n\n<li><strong>G. App-specific LAN access:<\/strong> A TV or another local device connects to a supported app through the dedicated IP assigned by Overlay gateway.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The hostname alone does not tell you whether the connection is local or remote. The actual path depends on how the hostname resolves, whether the device runs LarePass, and which access method is active.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Away from home: Remote access from anywhere<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A self-hosted service commonly sits behind network address translation and firewall rules on a home router. Without a public IP address or explicit inbound routing, an outside client cannot simply connect to the server. Olares offers two remote-access approaches for different situations: LarePass VPN for trusted devices and Olares Tunnel for browser access through an app entrance.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/0032d3c9-ac66-4d76-87d2-734ddeb52ef2.png\" alt=\"\" class=\"wp-image-5274\"\/><figcaption class=\"wp-element-caption\">Remote access through a public reverse proxy and LarePass VPN<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Private access through LarePass VPN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">LarePass uses Tailscale to connect a trusted computer or phone to Olares through an encrypted private network. When the endpoints can communicate directly, LarePass reports a <strong>P2P<\/strong> connection. If direct connectivity is unavailable, it can fall back to a secure <strong>DERP<\/strong> relay. On the same LAN, it can use an <strong>Intranet<\/strong> connection through the Olares LAN IP. The client displays the active connection type, so the route is visible rather than hidden behind a generic &#8220;connected&#8221; state.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"2449\" height=\"812\" src=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7.png\" alt=\"\" class=\"wp-image-5276\" srcset=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7.png 2449w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7-300x99.png 300w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7-766x254.png 766w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7-1024x340.png 1024w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7-1536x509.png 1536w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/2c60194f-9785-48ba-9138-0944347b64b7-2048x679.png 2048w\" sizes=\"auto, (max-width: 2449px) 100vw, 2449px\" \/><figcaption class=\"wp-element-caption\">LarePass shows which connection type is currently in use<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This path suits devices you control and use repeatedly. It requires LarePass to be installed and its VPN connection enabled, but it provides a consistent private-access model across networks. An app entrance configured as <strong>Internal<\/strong> can also recognize users arriving through LarePass VPN and let them skip the normal sign-in step. Users arriving through other paths must still authenticate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Browser access through Olares Tunnel<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sometimes the client cannot run LarePass, or you simply need to open a selected app from an ordinary browser. In that case, an app entrance can be made available through a reverse proxy. The browser connects to the entrance&#8217;s public address, and Olares Tunnel carries the request to Olares without requiring the server to have a public IP address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Olares Tunnel is the Olares-operated reverse proxy option. The entrance remains the application-level endpoint: it defines the route to the target service and the authentication policy applied to incoming requests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Entrance policies are explicit. A <strong>Public<\/strong> entrance requires no sign-in. A <strong>Private<\/strong> entrance requires authentication for every user. An <strong>Internal<\/strong> entrance lets users on LarePass VPN skip authentication while requiring it on other paths.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">LarePass VPN or Olares Tunnel?<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th class=\"has-text-align-left\" data-align=\"left\"><\/th><th class=\"has-text-align-left\" data-align=\"left\">LarePass VPN<\/th><th class=\"has-text-align-left\" data-align=\"left\">Olares Tunnel<\/th><\/tr><\/thead><tbody><tr><td>Client requirement<\/td><td>LarePass installed and VPN enabled<\/td><td>A browser<\/td><\/tr><tr><td>Best suited for<\/td><td>Trusted devices and ongoing private access<\/td><td>Selected apps exposed through a reverse-proxied entrance<\/td><\/tr><tr><td>Remote route<\/td><td>Direct encrypted P2P when available; DERP relay as fallback<\/td><td>Public reverse proxy through an Olares Tunnel node<\/td><\/tr><tr><td>Access boundary<\/td><td>Services available through the private Olares network<\/td><td>The configured app entrance and its access policy<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The two approaches are complementary. LarePass brings a trusted device into the private network. Olares Tunnel makes a configured app entrance reachable from a browser over the public internet.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">At home, the public path becomes a detour<\/h2>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"2487\" height=\"1503\" src=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e.png\" alt=\"\" class=\"wp-image-5278\" srcset=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e.png 2487w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e-300x181.png 300w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e-768x464.png 768w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e-1024x619.png 1024w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e-1536x928.png 1536w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/033b8823-e826-4e1e-9226-79305e01333e-2048x1238.png 2048w\" sizes=\"auto, (max-width: 2487px) 100vw, 2487px\" \/><figcaption class=\"wp-element-caption\">A client on the same LAN can detour through Olares Tunnel or connect directly to Olares<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The standard <code>olares.com<\/code> address may still work when the client and Olares are on the same LAN. But without LarePass VPN, a matching hosts mapping, or local DNS, the hostname can resolve to the public reverse-proxy route. The request then leaves the LAN, reaches the reverse proxy, and returns to the Olares device.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This detour can increase latency, use internet uplink bandwidth, and make local access depend on the internet. Its impact is more likely to be noticeable during sustained, high-bandwidth transfers such as moving large files or streaming high-bitrate media.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The problem is the route, not the <code>olares.com<\/code> address. If the same hostname resolves to the Olares LAN IP, the browser can keep using the familiar HTTPS URL while connecting locally. This separation between hostname and route is what allows one address to work differently at home and away.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">At home: Keep traffic on the local network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When the client and Olares share a LAN, a direct route can reduce latency, avoid the internet uplink, and keep locally hosted services reachable during an internet outage. Olares provides several local paths because a browser, a LarePass-enabled computer, and a smart TV do not have the same capabilities.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Direct access through <code>.local<\/code><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A multi-level <code>.local <\/code>hostname mirrors the standard Olares address:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>http:&#47;&#47;desktop.&lt;username&gt;.olares.local<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">When local service discovery or a hosts mapping resolves this name to the Olares LAN IP, the browser connects directly and the request stays on the LAN. Use <code>http:\/\/<\/code>, not <code>https:\/\/<\/code>, for this address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Platform behavior differs. macOS and iOS can resolve multi-level <code>.local<\/code> hostnames through local service discovery without extra configuration. On Windows, LarePass Desktop can add the required hosts entries.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Direct access through <code>*.olares.com<\/code><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You do not have to change the visible address to use a local route. A hosts mapping on one computer, or local DNS shared across the network, can resolve standard <code>olares.com<\/code> hostnames to the Olares LAN IP. The browser then connects directly to Olares instead of using the public reverse proxy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LarePass Desktop can manage local hosts entries on Windows and macOS. The mapping applies only to that computer. LarePass maintains the name-to-address entries; it does not relay the resulting browser traffic.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"2230\" height=\"1526\" src=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6.png\" alt=\"\" class=\"wp-image-5277\" srcset=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6.png 2230w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6-300x205.png 300w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6-767x525.png 767w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6-1024x701.png 1024w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6-1536x1051.png 1536w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/37b4e6b2-9bb4-4c59-9e1b-b1d418f453c6-2048x1401.png 2048w\" sizes=\"auto, (max-width: 2230px) 100vw, 2230px\" \/><figcaption class=\"wp-element-caption\">LarePass manages local host mappings for Olares domains on the current computer<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Host mappings and LarePass VPN are separate local-access modes and cannot be enabled at the same time. Use VPN if you want LarePass to select among Intranet, P2P, and DERP as you move between networks. Use host mappings if you want the browser on the current computer to connect directly through the LAN while keeping the standard app URL.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For multiple devices, local DNS moves the mapping from one computer&#8217;s hosts file to a resolver used by the LAN. Clients can then open the same standard URLs and receive the local Olares IP while connected to that network.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Local access with LarePass VPN enabled<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If LarePass VPN is already enabled, you do not need to turn it off merely because you return home. LarePass detects that the client and Olares share a network and reports <strong>Intranet<\/strong>, a direct connection through the Olares LAN IP. When you leave the LAN, it can switch to P2P or DERP according to connectivity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is different from hosts-based access. With VPN enabled, traffic follows the LarePass path. With VPN disabled and matching hosts entries active, the browser resolves the app hostname to the LAN IP and connects directly.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Connecting TVs and other LAN devices<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Some devices cannot install LarePass and need an app to appear directly on the LAN. Smart TVs, streaming boxes, and media players may rely on device discovery, DLNA, screen mirroring, or direct local streaming rather than a browser-oriented app entrance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For supported apps, Overlay gateway assigns the app a dedicated local IP through a virtual network interface. The local device connects to that IP while the app keeps the default Olares cluster network for system services, DNS, and platform communication.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1522\" height=\"1370\" src=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/ced991f6-50c0-4dbe-8cbc-3923b536f79a.png\" alt=\"\" class=\"wp-image-5275\" srcset=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/ced991f6-50c0-4dbe-8cbc-3923b536f79a.png 1522w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/ced991f6-50c0-4dbe-8cbc-3923b536f79a-300x270.png 300w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/ced991f6-50c0-4dbe-8cbc-3923b536f79a-768x691.png 768w, https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/ced991f6-50c0-4dbe-8cbc-3923b536f79a-1024x922.png 1024w\" sizes=\"auto, (max-width: 1522px) 100vw, 1522px\" \/><figcaption class=\"wp-element-caption\">Overlay gateway gives Jellyfin a dedicated LAN IP for direct access from local devices<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Overlay gateway has specific requirements: Olares must run on a native Linux host, WSL is not supported, and the host must use wired Ethernet. Only supported apps appear in the Overlay gateway application list. The feature is independent of LarePass VPN, hosts mappings, and local DNS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Inside Olares: A different network layer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Browser requests to standard Olares app URLs normally enter through an app entrance before reaching the target service. The developer documentation describes the corresponding gateway layers as <code>cluster<\/code>, <code>user<\/code>, <code>application<\/code>, and <code>service component<\/code>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Service-to-service traffic inside the Olares cluster follows a different path. Apps use internal service names rather than a user-facing <code>olares.com<\/code> or <code>.local<\/code> hostname, and CoreDNS resolves those names inside the cluster.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is a different naming boundary from local DNS. Local DNS helps devices on the home network resolve an Olares hostname to the Olares LAN IP. CoreDNS helps workloads inside the cluster find services. Neither should be treated as a replacement for the other.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Using Olares directly with an attached display, keyboard, and mouse is different again: it is a local device session, not a network access path.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How the access paths come together<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Each component has a focused role:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>LarePass<\/strong> provides private VPN connectivity across supported devices. Its Windows and macOS desktop clients can also manage local hosts mappings.<\/li>\n\n\n\n<li><strong>Olares Tunnel<\/strong> carries reverse-proxy traffic to Olares when an app hostname resolves to the public route.<\/li>\n\n\n\n<li><strong>App entrances<\/strong> define application endpoints, authentication policies, and routes to target services.<\/li>\n\n\n\n<li><strong>Overlay gateway<\/strong> gives a supported app a dedicated LAN IP for direct access and local discovery.<\/li>\n\n\n\n<li><strong>Local DNS or a hosts file<\/strong> maps a user-facing hostname to the Olares LAN IP.<\/li>\n\n\n\n<li><strong>CoreDNS<\/strong> resolves service names for communication inside the Olares cluster.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Together, these paths keep Olares reachable outside the home while taking advantage of the LAN when it is available. The address can remain familiar, but the route changes to match the client, the network, and the app entrance.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Reachable anywhere, direct when at home<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For a trusted computer or phone that moves between networks, keep <a href=\"https:\/\/www.olares.com\/docs\/manual\/larepass\/private-network\">LarePass VPN<\/a> enabled and let it select Intranet, P2P, or DERP. For browser access without LarePass, use an appropriately protected <a href=\"https:\/\/www.olares.com\/docs\/manual\/olares\/settings\/manage-entrance\">application entrance<\/a> through a reverse proxy. At home, use LarePass VPN, local name resolution, or host mappings to keep traffic on the LAN. For TVs and other devices that need a dedicated app address, check whether the app supports <a href=\"https:\/\/www.olares.com\/docs\/manual\/olares\/settings\/overlay-gateway\">Overlay gateway<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The result is a simple user experience built on purpose-specific paths: reachable when you are away, direct when you are at home, and adapted to the capabilities of each device.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Open an Olares app at an address such as https:\/\/desktop.&lt;username&gt;.olares.com, and the experience looks simple: enter a familiar URL and reach the service. What happens behind that address is more nuanced. The same hostname can lead to different network paths depending on where the client is, whether it runs LarePass, and how the app entrance [&hellip;]<\/p>\n","protected":false},"author":258709004,"featured_media":5273,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25393],"tags":[757687168,757687188,757687165],"class_list":["post-5268","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-engineering","tag-local-ai","tag-official-recommend","tag-open-source"],"blocksy_meta":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>One address, multiple paths: How access works in Olares - Olares Blog<\/title>\n<meta name=\"description\" content=\"Learn how Olares connects your apps through Olares Tunnel, LarePass VPN, local access paths, and internal networking at home and away.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.olares.com\/blog\/how-olares-access-works\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"One address, multiple paths: Inside Olares networking\" \/>\n<meta property=\"og:description\" content=\"Explore how Olares connects remote devices, local clients, LAN devices, and internal services through VPN, tunnels, local routing, and dedicated LAN IPs.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.olares.com\/blog\/how-olares-access-works\/\" \/>\n<meta property=\"og:site_name\" content=\"Olares Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/Olares\/61579156063357\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-12T13:21:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-14T03:57:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares_card.jpeg?wsr\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Olivia\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"One address, multiple paths: Inside Olares networking\" \/>\n<meta name=\"twitter:description\" content=\"Explore how Olares connects remote devices, local clients, LAN devices, and internal services through VPN, tunnels, local routing, and dedicated LAN IPs.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares_card.jpeg?wsr\" \/>\n<meta name=\"twitter:creator\" content=\"@Olares_OS\" \/>\n<meta name=\"twitter:site\" content=\"@Olares_OS\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Olivia\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/\"},\"author\":{\"name\":\"Olivia\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#\\\/schema\\\/person\\\/ff559c60c958a66b280efd3c56e84202\"},\"headline\":\"One address, multiple paths: How access works in Olares\",\"datePublished\":\"2026-09-12T13:21:51+00:00\",\"dateModified\":\"2026-09-14T03:57:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/\"},\"wordCount\":1956,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/access-Olares.jpeg?wsr\",\"keywords\":[\"local AI\",\"official-recommend\",\"open-source\"],\"articleSection\":[\"Engineering\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/\",\"url\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/\",\"name\":\"One address, multiple paths: How access works in Olares - Olares Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/access-Olares.jpeg?wsr\",\"datePublished\":\"2026-09-12T13:21:51+00:00\",\"dateModified\":\"2026-09-14T03:57:13+00:00\",\"description\":\"Learn how Olares connects your apps through Olares Tunnel, LarePass VPN, local access paths, and internal networking at home and away.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/access-Olares.jpeg?wsr\",\"contentUrl\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/access-Olares.jpeg?wsr\",\"width\":1800,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/how-olares-access-works\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"One address, multiple paths: How access works in Olares\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/\",\"name\":\"Olares Blog\",\"description\":\"Let people own AI by owning their data\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#organization\",\"name\":\"Olares\",\"url\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/20241108-141005.jpeg\",\"contentUrl\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/20241108-141005.jpeg\",\"width\":400,\"height\":400,\"caption\":\"Olares\"},\"image\":{\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/Olares\\\/61579156063357\\\/\",\"https:\\\/\\\/x.com\\\/Olares_OS\",\"https:\\\/\\\/github.com\\\/beclab\\\/Olares\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/olarestech\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@OlaresOS\\\/featured\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.olares.com\\\/blog\\\/#\\\/schema\\\/person\\\/ff559c60c958a66b280efd3c56e84202\",\"name\":\"Olivia\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a13ebdf70dbc9c614db24ede0bb59e8bc01349b8457bc744a9548b244223f583?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a13ebdf70dbc9c614db24ede0bb59e8bc01349b8457bc744a9548b244223f583?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a13ebdf70dbc9c614db24ede0bb59e8bc01349b8457bc744a9548b244223f583?s=96&d=identicon&r=g\",\"caption\":\"Olivia\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"One address, multiple paths: How access works in Olares - Olares Blog","description":"Learn how Olares connects your apps through Olares Tunnel, LarePass VPN, local access paths, and internal networking at home and away.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/","og_locale":"en_US","og_type":"article","og_title":"One address, multiple paths: Inside Olares networking","og_description":"Explore how Olares connects remote devices, local clients, LAN devices, and internal services through VPN, tunnels, local routing, and dedicated LAN IPs.","og_url":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/","og_site_name":"Olares Blog","article_publisher":"https:\/\/www.facebook.com\/people\/Olares\/61579156063357\/","article_published_time":"2026-09-12T13:21:51+00:00","article_modified_time":"2026-09-14T03:57:13+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares_card.jpeg?wsr","type":"image\/jpeg"}],"author":"Olivia","twitter_card":"summary_large_image","twitter_title":"One address, multiple paths: Inside Olares networking","twitter_description":"Explore how Olares connects remote devices, local clients, LAN devices, and internal services through VPN, tunnels, local routing, and dedicated LAN IPs.","twitter_image":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares_card.jpeg?wsr","twitter_creator":"@Olares_OS","twitter_site":"@Olares_OS","twitter_misc":{"Written by":"Olivia","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#article","isPartOf":{"@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/"},"author":{"name":"Olivia","@id":"https:\/\/www.olares.com\/blog\/#\/schema\/person\/ff559c60c958a66b280efd3c56e84202"},"headline":"One address, multiple paths: How access works in Olares","datePublished":"2026-09-12T13:21:51+00:00","dateModified":"2026-09-14T03:57:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/"},"wordCount":1956,"commentCount":0,"publisher":{"@id":"https:\/\/www.olares.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#primaryimage"},"thumbnailUrl":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares.jpeg?wsr","keywords":["local AI","official-recommend","open-source"],"articleSection":["Engineering"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.olares.com\/blog\/how-olares-access-works\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/","url":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/","name":"One address, multiple paths: How access works in Olares - Olares Blog","isPartOf":{"@id":"https:\/\/www.olares.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#primaryimage"},"image":{"@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#primaryimage"},"thumbnailUrl":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares.jpeg?wsr","datePublished":"2026-09-12T13:21:51+00:00","dateModified":"2026-09-14T03:57:13+00:00","description":"Learn how Olares connects your apps through Olares Tunnel, LarePass VPN, local access paths, and internal networking at home and away.","breadcrumb":{"@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.olares.com\/blog\/how-olares-access-works\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#primaryimage","url":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares.jpeg?wsr","contentUrl":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares.jpeg?wsr","width":1800,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/www.olares.com\/blog\/how-olares-access-works\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.olares.com\/blog\/"},{"@type":"ListItem","position":2,"name":"One address, multiple paths: How access works in Olares"}]},{"@type":"WebSite","@id":"https:\/\/www.olares.com\/blog\/#website","url":"https:\/\/www.olares.com\/blog\/","name":"Olares Blog","description":"Let people own AI by owning their data","publisher":{"@id":"https:\/\/www.olares.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.olares.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.olares.com\/blog\/#organization","name":"Olares","url":"https:\/\/www.olares.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.olares.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2024\/11\/20241108-141005.jpeg","contentUrl":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2024\/11\/20241108-141005.jpeg","width":400,"height":400,"caption":"Olares"},"image":{"@id":"https:\/\/www.olares.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/people\/Olares\/61579156063357\/","https:\/\/x.com\/Olares_OS","https:\/\/github.com\/beclab\/Olares","https:\/\/www.linkedin.com\/company\/olarestech\/","https:\/\/www.youtube.com\/@OlaresOS\/featured"]},{"@type":"Person","@id":"https:\/\/www.olares.com\/blog\/#\/schema\/person\/ff559c60c958a66b280efd3c56e84202","name":"Olivia","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a13ebdf70dbc9c614db24ede0bb59e8bc01349b8457bc744a9548b244223f583?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a13ebdf70dbc9c614db24ede0bb59e8bc01349b8457bc744a9548b244223f583?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a13ebdf70dbc9c614db24ede0bb59e8bc01349b8457bc744a9548b244223f583?s=96&d=identicon&r=g","caption":"Olivia"}}]}},"jetpack_featured_media_url":"https:\/\/www.olares.com\/blog\/wp-content\/uploads\/2026\/09\/access-Olares.jpeg?wsr","_links":{"self":[{"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/posts\/5268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/users\/258709004"}],"replies":[{"embeddable":true,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/comments?post=5268"}],"version-history":[{"count":2,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/posts\/5268\/revisions"}],"predecessor-version":[{"id":5286,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/posts\/5268\/revisions\/5286"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/media\/5273"}],"wp:attachment":[{"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/media?parent=5268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/categories?post=5268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.olares.com\/blog\/wp-json\/wp\/v2\/tags?post=5268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}