TunnelFleet Integrations

OpenVPN Access Server is a self-hosted Zero Trust Network Access (ZTNA) solution you deploy into your own environment — on-prem or your AWS, Azure, or GCP account — so tunnel traffic and configuration never touch a third-party network. Access is enforced by application, not IP or subnet: each user reaches only the app they're entitled to, identified by domain name, with no visibility into anything else. That structurally blocks lateral movement — there's no connectivity path for a breach to exploit. With Access Server Link, deployment is a guided setup (hostname, cloud, region, password) with SSL certificates auto-provisioned and renewed, removing manual cert management as an attack surface. Entitlements tie to hostname, so they survive IP changes and autoscaling without rework. Your instance stays fully under your control, preserving the data ownership and audit posture required for HIPAA, SOC 2, and GDPR — full sovereignty over the control plane, with SaaS-level simplicity. The admin portal replaces SSH-based management: users, certificates, and access policies are configured through a browser, so shell access isn't required, shrinking your attack surface. The Zero Trust App Broker mediates every connection through a placeholder IP scoped to one authorized application — users never learn the real destination, so a compromised credential can't be used to probe or discover other systems. This enforces least privilege by design, not just by policy that can drift or be misconfigured. Client apps span Windows, macOS, iOS, Android, and Linux, so identity- and application-based controls apply consistently across devices. Deployment runs through preconfigured templates on AWS, Azure, and GCP, giving security teams repeatable, auditable rollouts.

WireGuard® is a modern VPN solution that is not only incredibly straightforward but also fast, built on advanced cryptography. Its goal is to outperform IPsec by being quicker, easier to use, more streamlined, and less troublesome. WireGuard is positioned to deliver superior performance compared to OpenVPN as well. Engineered as a versatile VPN, it can operate on both embedded devices and high-performance supercomputers, making it adaptable for a variety of scenarios. Originally developed for the Linux kernel, WireGuard has since become available across multiple platforms, including Windows, macOS, BSD, iOS, and Android, enhancing its accessibility. Although it is still evolving, it is already seen as one of the most secure, user-friendly, and straightforward VPN options available today. Configuration and deployment are designed to be as seamless as SSH, with VPN connections established through the simple exchange of public keys—similar to the method used for SSH keys—while WireGuard takes care of all other processes automatically. Additionally, it supports roaming across different IP addresses, resembling the functionality of Mosh, which enhances its usability for mobile users. Overall, WireGuard stands out in the VPN landscape due to its blend of cutting-edge technology and user-centric design.