Smart Access Gateway (SAG) supports two deployment modes: inline mode and one-arm mode.

Inline mode

SAG devices can connect small office branches and organizations to Alibaba Cloud. In inline mode, all local network traffic must be transmitted through SAG devices.

inline mode

One-arm mode

You can deploy SAG devices in one-arm mode, which avoids networking changes. In one-arm mode, traffic within the private network is transmitted through SAG devices. Network traffic destined for the Internet is transmitted through your Internet-facing device.one-arm mode