Smart Access Gateway (SAG) supports two deployment modes: inline mode and one-arm mode.
SAG devices can connect small office branches and organizations to Alibaba Cloud. In inline mode, all local network traffic must be transmitted through SAG devices.
You can deploy SAG devices in one-arm mode, which avoids networking changes. In one-arm mode, traffic within the private network is transmitted through SAG devices. Network traffic destined for the Internet is transmitted through your Internet-facing device.