> For the complete documentation index, see [llms.txt](https://docs.ionos.com/cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ionos.com/cloud/network-services/vpn-gateway/overview.md).
# Overview
IONOS CLOUD VPN Gateway: overview of IPSec tunnels and WireGuard peers, AES-256 encryption, authentication, and site-to-site connectivity
A VPN Gateway is a critical component in network infrastructure that facilitates secure, encrypted connections between different networks over the internet. It provides robust security features, including strong encryption, to protect data in transit. You can use it to connect on-premises networks to cloud networks or to connect different cloud networks. Organizations can use a VPN Gateway to ensure their sensitive data is transmitted securely over the internet, thus meeting compliance and regulatory requirements.
space.vars.ionos\_cloud VPN Gateway supports IPSec and WireGuard VPN protocols, ensuring secure and reliable communication across geographically dispersed networks through IPSec tunnels or WireGuard peers, respectively. Based on the chosen VPN protocol, it supports multiple VPN tunnels or peers, allowing for scalable and flexible network architectures.
{% hint style="info" %}
**Note:** You can set up a maximum of eight VPN gateways in each region. To increase the quota for your contract, please contact [IONOS CLOUD Support](https://docs.ionos.com/cloud/support/general-information/contact-information).
{% endhint %}
## How does a VPN Gateway work?
When a user or a device initiates a connection to a network through a VPN Gateway, the gateway establishes a secure, encrypted tunnel/peer between the user and the target network. This process involves:
* **Authentication:** The user or device is authenticated using certificates or pre-shared keys to ensure only authorized users can access the network.
* **Encryption:** VPN Gateway encrypts data packets using protocols like IPsec or WireGuard to ensure secure transmission over the internet.
* **Tunneling/Peering:** The encrypted data packets are encapsulated within another packet, creating a secure tunnel/peer through which the data travels. This tunnel/peer protects the data from being intercepted or tampered with during transmission.
* **Routing:** VPN Gateway routes the encrypted data packets to the appropriate destination within the target network. Once the data reaches its destination, it is decrypted and delivered to the intended recipient.
* **Maintaining Connectivity:** VPN Gateway continuously monitors the connection to ensure stability and performance. It implements failover mechanisms to switch to backup connections if the primary connection is disrupted, ensuring continuous connectivity.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.ionos.com/cloud/network-services/vpn-gateway/overview.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.