All Products
Search
Document Center

VPN Gateway:What is VPN Gateway?

Last Updated:Feb 25, 2025

VPN Gateway provides network connection services that securely and reliably connect data centers, office networks, and Internet clients to Alibaba Cloud through encrypted and private tunnels. This way, on-cloud and on-premises resources can securely access each other.

image

Network connection scenarios

VPN Gateway supports IPsec-VPN and SSL-VPN connections. These types of connections are applicable to different network connection scenarios.

IPsec-VPN

You can use IPsec-VPN to establish connections between Alibaba Cloud and data centers or office networks. The following two network connection scenarios are supported:

  • You want to establish connections between virtual private clouds (VPCs) and data centers or office networks. After connections are established, data centers or office networks can directly access the resources in the connected VPCs.

  • You want to establish connections between Alibaba Cloud transit routers and data centers or office networks. After connections are established, data centers or office networks can communicate with other networks under the connected transit routers to access resources on other networks.

For more information, see What is IPsec-VPN?

Communication with VPCs

image

Communication with other networks connected to transit routers

image

SSL-VPN

SSL-VPN is ideal for establishing network connections between Internet clients (remote clients) and Virtual Private Cloud (VPC). After such network connections are established, Internet clients can access the resources in the connected VPCs. For more information, see What is SSL-VPN?

image

Benefits

Secure

VPN Gateway uses the Internet Key Exchange (IKE) and IPsec protocols to encrypt and secure data transmission.

Stable

VPN Gateway adopts the hot-standby architecture to implement a failover within a few seconds, enable session persistence, and ensure zero service downtime.

Easy-to-use

VPN Gateway is ready-to-use and its configurations immediately take effect. You can deploy VPN Gateway in a fast manner.

Cost-effective

VPN Gateway provides encrypted and Internet-based connections that are more cost-effective than Express Connect circuits.