Gateway & tunnel management
Self-serve provisioning
Gateways in 6 regions, live in minutes, via UI or CLI.
Tunnel lifecycle
Create, edit, pause, and rekey tunnels without downtime windows.
Environments & naming
Production/staging separation, tags, and clean naming.
Routing & traffic controls
Subnet definitions
Any CIDR per side; overlap checks before deploy.
Traffic selectors
Route exactly the networks you intend — nothing else.
Static routes
Push routes to spokes for hub-and-spoke topologies.
Security & authentication
Modern crypto
IKEv2, AES-256-GCM, SHA-2, PFS groups 14–21.
PSK or certificates
Your keys, rotated on your schedule.
Access controls
Roles, enforced 2FA, and per-gateway permissions.
Secure defaults
Weak ciphers and IKEv1 disabled unless you opt in.
Availability & resilience
99.99% uptime SLA
Backed by redundant gateway infrastructure per region.
DPD & auto-failover
Dead Peer Detection restarts tunnels before users notice.
Zero-downtime maintenance
Rolling updates; rekeys never drop established traffic.
Scalability
Unlimited tunnels
No per-tunnel fees; mesh or hub-and-spoke as you grow.
6 regions
EU, US, and APAC gateways close to your sites.
Bandwidth headroom
10 Gbps ports; scale gateways horizontally per site.