Console Create a server

NAT and VPN gateways for private networks.

A gateway takes servers without public addresses to the internet, and joins your network to an office or another cloud. It runs as a pair, and the standby takes over within 10 seconds.

Create a server See pricing

From €4.49 per gateway a month

Features

One gateway, two jobs.

  • NAT for private servers

    Servers with only private addresses reach the internet through the gateway, which translates their addresses to its own.

  • IPsec site to site

    IKEv2 tunnels with AES-GCM, to the routers and firewalls that offices run, from Cisco, Juniper, Fortinet and others.

  • WireGuard

    Join the network from a laptop or another cloud with WireGuard, with keys you add and revoke in the console.

  • Active and standby

    The gateway runs on two hosts in its region. If the active one fails, the standby takes its addresses and its tunnels within 10 seconds.

  • One fixed address out

    Traffic leaves from the gateway’s address, so partners can allow that single address in their own firewalls.

  • Routes set for you

    Attaching a gateway to a subnet sets the subnet’s default route, and servers on it receive the route by DHCP.

Pricing

One price per gateway.

Each gateway includes its standby, its IPv4 and IPv6 addresses, and as many tunnels as you need.

NAT and VPN gatewayper gateway
€4.49 a month, at most€0.0070 an hour

Traffic out to the internet counts toward the project’s pooled allowance. Each further TB costs €1.00.

Code

NAT and a tunnel in two commands.

lc network gateway creates the gateway on a subnet. Tunnels attach to it one at a time.

  • A default route set on the subnet.
  • IPsec with IKEv2, or WireGuard, for each tunnel.
  • Tunnel status and traffic in the console.
shell
$ lc network gateway create gw-1 --network acme-net \
    --subnet ee1 --nat
Creating gw-1 in ee1 ... active, standby ready
IPv4  203.0.113.90
$ lc network gateway tunnel add gw-1 office --ipsec \
    --peer 198.51.100.1 --remote 192.168.10.0/24 \
    --psk-file office.psk
Tunnel office ... established (IKEv2)

Available in

Questions

Questions about gateways.

FAQ
Do I need a gateway for a private network?
No. Servers on a private network reach each other without one. You need a gateway when servers without public addresses must reach the internet, or when an office must reach them.
How does failover work?
The gateway runs on two hosts in its region. When the active host stops answering, the standby takes its addresses and sets up the tunnels again within 10 seconds. Long-lived connections through NAT reset and reconnect.
Does a gateway filter traffic?
No, a gateway forwards traffic without filtering it. Attach a firewall to limit what reaches the gateway’s public address, and filter tunnel traffic on the servers behind it.

Start with one server and one command.

Choose a region and a plan, and add an SSH key. The server answers SSH 38 seconds after the command, at the price on its spec sheet.

Create a server See pricing

logi-ciel is a design concept

This site is a portfolio piece by Soheyb. The brand, the pages and the price list are real design work; the cloud behind them is not. There’s no console to sign in to, and no server to rent.

Back to the site