Cloudflare Tunnel

Create a secure network between your servers, computers, and cloud instances. Even when separated by firewalls or subnets, Tailscale just works. A frustratingly complex and brittle collection of firewalls, rules, and holes while wondering if your network is secure enough. Devices connect directly, working from any physical location or networking environment. All without poking holes in your firewall. Devices only connect after signing in through your existing identity provider. Easily enforce multi-factor authentication, deauthorize employees who’ve moved on, and more. Define role-based access controls to restrict sensitive servers or authorize contractors to only see what they need. And every connection is centrally logged from both ends, viewable from a dashboard and logging API.

AWS Site-to-Site VPN is a fully managed service that establishes secure connections between your on-premises networks and AWS resources using IPsec tunnels. Each VPN connection includes two tunnels, each terminating in a different availability zone, to provide increased availability to your VPC. If there's a device failure within AWS, your VPN connection automatically fails over to the second tunnel so that your access isn't interrupted. For globally distributed applications, the accelerated Site-to-Site VPN option provides even greater performance by working with AWS Global Accelerator to intelligently route your traffic to the nearest AWS network endpoint with the best performance. AWS Site-to-Site VPN supports both static and dynamic routing options, including BGP peering, to give you flexibility in your routing configuration. It also supports NAT traversal, allowing you to use private IP addresses on private networks behind routers with a single public IP address.