Solutions VPN Gateway
Bring offices and staff into your cloud network, without opening databases to the internet
A VPN gateway joins your head office and branches to your VPCs through the firewall or router you already have, and lets staff connect from laptops and phones with the VPN client built into the device. Databases and back-office apps stay on private addresses.
Site-to-Site for offices and branches
- Standard IPsec (IKEv2) with BGP: each office device announces its ranges, and the gateway announces your VPCs’ ranges back.
- Ready-made settings for FortiGate, MikroTik RouterOS 7, Cisco IOS-XE, pfSense / OPNsense and Palo Alto, plus every parameter for other devices.
- One gateway joins many branches: up to 100 tunnels on the larger SKUs, sharing the gateway’s throughput.
- Primary and standby tunnels, BFD to notice a dead line within seconds, and ECMP to use several lines at once.
- Let branches reach each other through the hub, or keep them apart.
Client VPN for staff
- Staff use the VPN built into Windows, macOS, iPhone, iPad and Android: nothing extra to install.
- They sign in with their own name and password from your company user list, the same one Wi-Fi can use.
- Send only your VPCs through the VPN, or all traffic (full tunnel) so people reach the internet from your fixed IPs.
- See who is connected right now on the gateway’s page.
Sized and kept running for you
- Pick a SKU from Gw1 to Gw5 by throughput, tunnels or people at once, and change it later.
- High availability is on by default: a spare instance in another zone carries on at once if one fails.
- The gateway sits on a Network Hub, so it reaches every VPC you attach, in any region, as its role allows.
- Security groups still decide which ports each service opens to offices and staff.
Frequently asked questions
Which office devices work?
Any firewall or router that does IPsec IKEv2 with route-based (VTI) tunnels and BGP. The Console gives example settings for FortiGate, MikroTik, Cisco, pfSense / OPNsense and Palo Alto, and lists every parameter for the rest.
Do staff need to install a VPN app?
No. Windows, macOS, iPhone, iPad and Android already have the VPN client. Windows gets a PowerShell command, Apple devices a profile to download, and Android settings to type in.
What happens if the gateway fails?
With high availability, the default, another instance in another zone carries on at once at the full SKU. Without it, connections stop for about two minutes while the gateway moves, keeping its IP.
How is it billed?
By the hour for the gateway’s SKU, plus a monthly Network Hub fee of $5.00 for the gateway as a spoke, and data out to the internet as usual. Ask our team for a quote for your SKU.
Get started today, free
Sign up with email, no credit card needed. Websites are free with no expiry; other services are paid as used from the project’s wallet.