Managed IPsec (IKEv2) site-to-site and site-to-multisite VPN tunnels between on-premises networks and a STACKIT Network Area; available via the STACKIT API since May 2026

Jurisdictional exposure

Provider HQ
EUHeilbronn, Germany

Subject to GDPR, Data Act, DGA

Region locations
EU2 regions
Sovereign option
Yes — 2 sovereign-flagged regions available

Sub-services (3)

VPN gateway

Active-active gateway with two internal instances for resilient tunnels

Site-to-site and site-to-multisite connections

IPsec (IKEv2) tunnels from on-premises networks to a STACKIT Network Area

BGP routing

Dynamic routing via BGP, plus policy-based and static routes

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

2 regions
2 countries
2sovereign
Sovereign regions (2)
  • Europe 1 (Germany) · NeckarsulmSTACKIT EU Sovereign Cloud (DE)
  • Europe 2 (Austria) · OstermiethingSTACKIT EU Sovereign Cloud (AT)

Tags

Equivalent services on other platforms

AWS Site-to-Site VPNAWS

Managed IPsec VPN connections between on-premises networks or branch offices and VPCs or Transit Gateway, with two tunnels per connection, BGP or static routing, and accelerated VPN via Global Accelerator.

Azure VPN GatewayAzure

Managed IPsec / OpenVPN site-to-site and point-to-site VPN termination for Azure virtual networks — active-active HA pairs, BGP, and AAD-integrated point-to-site clients

Catalyst Cloud VPNCatalyst

Site-to-site IPsec VPN as a service connecting Catalyst Cloud private networks to on-premises or other networks. Billed hourly per VPN service (n1.vpn).

Cloud VPNGCP

Managed IPsec VPN service connecting on-prem networks or other clouds to a Google Cloud VPC, with HA VPN (99.99% SLA active-active) and Classic VPN flavours, BGP dynamic routing, and up to 3 Gbps per tunnel with aggregation for higher throughput

IBM Cloud VPCIBM

Software-defined virtual private cloud with generation-2 infrastructure, subnets, security groups, network ACLs, Transit Gateway integration, dedicated floating IPs, and isolated multi-zone regions across IBM Cloud global infrastructure

IONOS VPN GatewayIONOS

Managed site-to-site VPN gateway supporting IPsec tunnels and WireGuard peers to connect IONOS virtual data centres with on-premises networks, other clouds or other VDCs, with optional high-availability tiers offering automatic failover.

OpenStack NeutronOpenStack

Network-as-a-service component covering virtual networks, subnets, routers, floating IPs, security groups, and pluggable backends for OVS, OVN, Linux bridge, or vendor SDN integrations — equivalent to VPC / Virtual Network / VPC across the hyperscalers

OCI Site-to-Site VPNOracle

Encrypted IPSec tunnels between on-premises networks and OCI VCNs. Two redundant tunnels per connection for HA; BGP routing or static routes; integration with FastConnect for low-latency private links.

Outscale VPN ConnectionsOutscale

Managed site-to-site IPsec VPN gateway for hybrid connectivity between on-premises networks and Outscale Nets (VPCs), with high-availability dual-tunnel deployments and IKEv2 support

UpCloud VPN GatewayUpCloud

Managed site-to-site IPsec VPN gateway connecting UpCloud SDN private networks to on-premises or other cloud networks

Pricing

Pricing model:per-tunnel-hour