Technology

Bonding built for the field — without the appliance tax

MagNet by magNet delivers true bonding, redundant smoothing, and edge sharing on macOS, Windows, Linux, Pi, and OpenWrt — with a control panel that shows ISP, Mbps, and path health.

Start freeCompare plans

How the tunnel works

Every WAN carries encrypted UDP frames. The regional hub reassembles them and NATs to the public internet — so both upload and download can use every healthy path.

FibreISP AWi‑Fi / LTEISP B5G / StarlinkISP CMagNet clientEncrypt · stripe · probeChaCha20-Poly1305magNet hubReassemble · NATBonded egresswww
Live bonding path: packets leave each WAN encrypted, reassemble at the regional hub, and egress as one pipe — Speed, Redundant, or Failover.
  1. 01
    Discover WANs

    MagNet enumerates Ethernet, Wi‑Fi, USB tethering, and cellular adapters — then lets you lock Bond vs Share roles so LAN ports never loop into the tunnel.

  2. 02
    Handshake on every path

    The client fans the encrypted handshake across all WANs so a one-way phone hotspot can’t block a healthy fibre path from completing the session.

  3. 03
    Stripe · smooth · or stick

    Choose Speed, Redundant, or Failover live. Lossless Shield (Enhance Streaming, default on) duplicates every packet in Speed mode; auto-shield engages at 0.5% loss and stays until reconnect. Redundant mode duplicates always. Keepalives measure RTT/loss per link.

  4. 04
    Egress from the cloud hub

    Regional hubs (including ZA) terminate the tunnel, NAT to the internet, and bond the downlink the same way — so downloads also ride every link.

Capabilities that matter in the field

The core capabilities operators expect from SD-WAN bonding — implemented as software modes you can switch live.

Packet-level aggregation

Bandwidth bonding

Packet-level striping across every WAN so a single download, stream, or VPN session can use the combined capacity of fibre + 5G + Starlink — not just load-balance whole flows.

MagNet’s Speed mode round-robins encrypted frames over every healthy link. The hub reassembles and deduplicates so TCP/UDP see one tunnel IP.

Lossless redundancy

WAN smoothing

Duplicate every packet across links so the first good copy always wins — eliminating perceptible loss on calls, streams, and VPN sessions.

Redundant mode sends each packet on all alive paths. The receiver deduplicates instantly — UDP real-time apps see near-zero perceptible loss. Speed mode + Enhance Streaming (Lossless Shield, default on) duplicates every packet; auto-shield also engages at 0.5% loss and stays active until reconnect.

Session persistence

Hot failover

When a WAN dies, traffic moves to surviving links without tearing down the tunnel session — your Zoom room and SSH sessions stay up.

Failover mode sticks to the best probed path and switches as soon as keepalives prove another link is healthier. No waiting for the OS default route to time out.

LAN gateway

Edge & Pair & Share

Turn a Pi, OpenWrt box, or spare laptop into a bonded gateway. LAN devices get the combined pipe with no app install.

Assign WAN ports as Bond inputs and one LAN port as Share output. MagNet NATs the bonded tunnel out so phones, cameras, and PCs ride the bond.

Why bonding beats “just failover”

Classic dual-WAN routers move whole sessions when a link dies. Bonding stripes packets, so one TCP download can ride fibre and 5G at once — and survive a carrier blip without rebuffering the whole stream.

  • Single-session aggregation (not DNS load-balancing)
  • Encrypted tunnel end-to-end (ChaCha20-Poly1305)
  • Live mode switch: Speed · Redundant · Failover
  • Pair & Share LAN gateway without client apps
  • Edge on Pi / OpenWrt / Docker
  • Roles: Bond WAN inputs ≠ Share LAN output
0100200300400Approximate Mbps (illustrative)Fibre alone180LTE alone955G alone120MagNet bonded380
Illustrative: bonding approaches the sum of healthy paths (minus encryption and path overhead). Real gains depend on each ISP and congestion.

Mode matrix

Pick the trade-off the way broadcast engineers pick FEC vs duplication — except you can change it mid-call from the control panel.

ModeGoalHow it worksBest forBandwidth cost
SpeedMaximum combined throughputStripe packets across every healthy WANDownloads, backups, large file sync, browsingNormal bandwidth use
RedundantZero-drop resilience (WAN smoothing)Duplicate each packet on all links; keep first arrivalZoom, Teams, live stream uplink, VoIP, tradingUses ~N× bandwidth on N links
FailoverLowest overhead, instant hand-offPrimary path until probes say switchMetered LTE as backup, battery devicesOne link active at a time

Built for real-world missions

From pop-up production kits to rural offices — software bonding when CapEx appliances are overkill or too slow to ship.

Live broadcast & streaming

Bond cellular + Starlink for uplink that survives a single carrier drop. Redundant mode keeps frames flowing when towers hiccup.

Uplink
Combined
Mode
Redundant
Drop risk
Minimized

Remote / hybrid teams

Fibre for bulk throughput, LTE as insurance. Meetings stay up when the ISP blips — Failover or Speed without buying a SD-WAN appliance.

Links
2–4 WANs
Mode
Speed
Setup
< 5 min

Field vehicles & pop-ups

Raspberry Pi or laptop as the bonded gateway. Cameras, POS, and crew Wi‑Fi all ride Pair & Share out one LAN port.

Edge
Pi / OpenWrt
Share
LAN out
Apps
Zero client

Maritime & rural

Starlink + cellular + VSAT-style diversity. Bonding turns “best effort” links into one workable pipe for ops and crew welfare.

Mix
LEO + 4G/5G
Goal
Uptime
Bond
Packet-level

Regional hub latency

Live RTT from your browser to MagNet relays — ZA, EU, US, and global.

Live hub latency

Measured from this browser to each MagNet relay — lower is better for real-time apps.

Probing hubs…

Bond calculator

Estimate combined throughput for your WAN mix.

~230 Mbps

Speed mode stripes packets — expect ~90–95% of combined healthy throughput.

Plan your bond

Use the calculator to estimate Speed vs Redundant vs Failover before you install. See also the router compatibility matrix and system status.

Competitive snapshot

Where MagNet sits versus consumer VPN apps and hardware SD-WAN stacks.

MagNet vs consumer VPN apps vs hardware SD-WAN bonding
CapabilityMagNetConsumer VPN appsHardware SD-WAN
True packet-level bondingSingle TCP session can use all WANsYesYesYes
Runs without proprietary hardwareInstall on gear you already ownYesYesNo
macOS · Windows · Linux · Pi · OpenWrtClient apps on every major platformYesYeslimited
Redundant / smoothing modeLossless Shield + Redundant — first good copy winsYesYesYes
Hot failover (session persistence)Tunnel IP stays; paths changeYesYesYes
LAN Pair & Share / edge gatewayShare bonded WAN to whole LANYespartialYes
Transparent per-link ISP & Mbps UISee which carrier is carrying whatYespartialYes
Regional cloud hubs (incl. ZA)Lower RTT to the bonding relayYesYesYes
ChaCha20-Poly1305 encrypted tunnelBonded traffic never leaves in plaintextYesYesYes
Starts from a few dollars / monthSoftware subscription, not CapEx appliancesYesYesNo
No per-device appliance taxInstall software; bring your own NICsYesYesNo

MagNet targets enterprise-grade bonding outcomes with software you install on hardware you already own — no proprietary appliance lock-in.

Try the bond on your own links

Install the client, create a tunnel token, and watch per-link Mbps + ISP names update live — then run a speed test over the bonded path.

Create free accountDownload