UpCloud VPN Gateway

UpCloudNetworkingFree tier available

Managed site-to-site IPsec VPN gateway connecting UpCloud SDN private networks to on-premises or other cloud networks

FluffyStack tools
Add to Service BuilderAdd to CompareCompare with equivalentsExplore UpCloud in TreemapExplore networking in HoneycombSee UpCloud regions on the World MapSee networking as a networkScore jurisdiction exposure
DocumentationPricingUpCloud website

Jurisdictional exposure

Provider HQ
EUHelsinki, Finland

Subject to GDPR, Data Act, DGA

Region locations
APACEEAEUUKUS15 regions across 5 jurisdictions
Sovereign option
No sovereign-flagged regions in the catalogue for this service.
Full scorecard for this service →EU lens detail →Sovereign cloud coverage map →

Sub-services (4)

Essentials plan

Free non-HA gateway with one VPN tunnel, included with UpCloud Essentials

Production plan

High-availability gateway with two tunnels and 300 Mbit/s VPN bandwidth

Advanced plan

High-availability gateway with up to ten tunnels and 500 Mbit/s VPN bandwidth

Built-in NAT

Every VPN Gateway can also act as a NAT Gateway

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

GDPRISO 27001PCI DSS

Where this runs

15 regions
12 countries
Commercial regions (15)

Europe (10)

  • Copenhagen
  • Helsinki
  • Helsinki
  • Frankfurt
  • Amsterdam
  • Stavanger
  • Warsaw
  • Madrid
  • Stockholm
  • London

North America (3)

  • Chicago
  • New York
  • San Jose

Asia (1)

  • Singapore

Oceania (1)

  • Sydney

Tags

vpnipsecsite-to-sitenetworkingeu

Equivalent services on other platforms

AWS Site-to-Site VPNAWS

Managed IPsec VPN connections between on-premises networks or branch offices and VPCs or Transit Gateway, with two tunnels per connection, BGP or static routing, and accelerated VPN via Global Accelerator.

Azure VPN GatewayAzure

Managed IPsec / OpenVPN site-to-site and point-to-site VPN termination for Azure virtual networks — active-active HA pairs, BGP, and AAD-integrated point-to-site clients

Catalyst Cloud VPNCatalyst

Site-to-site IPsec VPN as a service connecting Catalyst Cloud private networks to on-premises or other networks. Billed hourly per VPN service (n1.vpn).

Cloud VPNGCP

Managed IPsec VPN service connecting on-prem networks or other clouds to a Google Cloud VPC, with HA VPN (99.99% SLA active-active) and Classic VPN flavours, BGP dynamic routing, and up to 3 Gbps per tunnel with aggregation for higher throughput

IBM Cloud VPCIBM

Software-defined virtual private cloud with generation-2 infrastructure, subnets, security groups, network ACLs, Transit Gateway integration, dedicated floating IPs, and isolated multi-zone regions across IBM Cloud global infrastructure

IONOS VPN GatewayIONOS

Managed site-to-site VPN gateway supporting IPsec tunnels and WireGuard peers to connect IONOS virtual data centres with on-premises networks, other clouds or other VDCs, with optional high-availability tiers offering automatic failover.

OpenStack NeutronOpenStack

Network-as-a-service component covering virtual networks, subnets, routers, floating IPs, security groups, and pluggable backends for OVS, OVN, Linux bridge, or vendor SDN integrations — equivalent to VPC / Virtual Network / VPC across the hyperscalers

OCI Site-to-Site VPNOracle

Encrypted IPSec tunnels between on-premises networks and OCI VCNs. Two redundant tunnels per connection for HA; BGP routing or static routes; integration with FastConnect for low-latency private links.

Outscale VPN ConnectionsOutscale

Managed site-to-site IPsec VPN gateway for hybrid connectivity between on-premises networks and Outscale Nets (VPCs), with high-availability dual-tunnel deployments and IKEv2 support

STACKIT VPNSTACKIT

Managed IPsec (IKEv2) site-to-site and site-to-multisite VPN tunnels between on-premises networks and a STACKIT Network Area; available via the STACKIT API since May 2026

Pricing

Pricing model:hourly