Abstract: A networked system has a plurality of nodes, each of which is configured for secure, encrypted communication of data over a general network. Protected devices communicate with the general network only via a respective associated one of the nodes and are network-addressable only via its associated node. Each node can automatically discover the presence of the other nodes, determine data communication routes to the other nodes, and establish point-to-point tunnels between themselves and selected ones of the other nodes, over which tunnels the protected devices may communicate with each other. The nodes and protected devices are thus organized as a mesh such that the protected devices are undetectable and unaddressable via the general network by entities external to the mesh.