---
id: "oci-site-to-site-vpn"
type: "component"
kind: "vpn-gateway"
provider: "oci"
category: "edge"
aliases: "VPN Connect"
docs: "https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/overviewIPsec.htm"
url: "https://localhost:3000/catalogue/components/oci-site-to-site-vpn"
---

# Site-to-Site VPN

IPSec connection to a DRG over two redundant tunnels.

| | |
|---|---|
| Provider | [oci](https://localhost:3000/catalogue?provider=oci) |
| Kind | [VPN gateway](https://localhost:3000/catalogue/kinds/vpn-gateway) |
| Category | Edge |
| Official docs | [https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/overviewIPsec.htm](https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/overviewIPsec.htm) |
| Also known as | VPN Connect |

## Properties

| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| `activeActive` | boolean | — | no | false | **true** |
| `bgp` | boolean | — | no | false | **false** |
| `encapsulationMode` | enum | `tunnel` | no | "tunnel" | inherited |
| `ikeVersion` | enum | `ikev1`, `ikev2` | no | — | inherited |
| `managed` | boolean | — | no | false | **true** |
| `peerType` | enum | `site-to-site`, `point-to-site`, `cloud-to-cloud` | no | — | **"site-to-site"** |
| `routingType` | enum | `static`, `bgp`, `policy-based` | no | "static" | inherited |
| `throughputMbps` | integer | — | no | — | inherited |
| `tunnelType` | enum | `ipsec`, `ssl`, `wireguard` | no | — | **"ipsec"** |
| `tunnelsPerConnection` | integer | — | no | 2 | inherited |

Bold values are the ones this component pins.

## Rules that apply · 0

No rule selects this kind or its category.

## Other products of the same kind · 18

- [VPN Gateway](https://localhost:3000/catalogue/components/alibaba-vpn-gateway.md) `alibaba-vpn-gateway` — alibabacloud
- [AWS Client VPN](https://localhost:3000/catalogue/components/aws-client-vpn.md) `aws-client-vpn` — aws
- [AWS Site-to-Site VPN](https://localhost:3000/catalogue/components/aws-site-to-site-vpn.md) `aws-site-to-site-vpn` — aws
- [Azure VPN Gateway](https://localhost:3000/catalogue/components/azure-vpn-gateway.md) `azure-vpn-gateway` — azure
- [NetBird](https://localhost:3000/catalogue/components/netbird.md) `netbird` — default
- [OpenVPN](https://localhost:3000/catalogue/components/openvpn.md) `openvpn` — default
- [strongSwan](https://localhost:3000/catalogue/components/strongswan.md) `strongswan` — default
- [Submariner](https://localhost:3000/catalogue/components/submariner.md) `submariner` — default
- [Tailscale](https://localhost:3000/catalogue/components/tailscale.md) `tailscale` — default
- [Generic VPN gateway](https://localhost:3000/catalogue/components/vpn-gateway.md) `vpn-gateway` — default
- [WireGuard](https://localhost:3000/catalogue/components/wireguard.md) `wireguard` — default
- [ZeroTier](https://localhost:3000/catalogue/components/zerotier.md) `zerotier` — default
- [Cloud VPN](https://localhost:3000/catalogue/components/google-cloud-vpn.md) `google-cloud-vpn` — gcp
- [IBM Cloud VPN for VPC](https://localhost:3000/catalogue/components/ibm-vpn-gateway.md) `ibm-vpn-gateway` — ibm
- [Client VPN for VPC](https://localhost:3000/catalogue/components/ibm-vpn-server.md) `ibm-vpn-server` — ibm
- [Neutron VPNaaS](https://localhost:3000/catalogue/components/openstack-neutron-vpnaas.md) `openstack-neutron-vpnaas` — openstack
- [Client Gateway](https://localhost:3000/catalogue/components/outscale-client-gateway.md) `outscale-client-gateway` — outscale
- [Virtual Gateway](https://localhost:3000/catalogue/components/outscale-virtual-gateway.md) `outscale-virtual-gateway` — outscale

## Use it in a design

```yaml
nodes:
  - { id: "oci-site-to-site-vpn", component: "oci-site-to-site-vpn" }
```

## Source (`component` YAML, verbatim)

```yaml
# yaml-language-server: $schema=../../schema/component.schema.json
# Oracle Cloud Site-to-Site VPN: IPSec connection to a DRG made of two redundant tunnels, tunnel
# mode only, with static routing the default per tunnel unless BGP is configured explicitly
# ("Site-to-Site VPN Overview"). IPSec encrypts and authenticates every packet.
schemaVersion: "1"
type: "component"
id: "oci-site-to-site-vpn"
kind: "vpn-gateway"
provider: "oci"
docs: "https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/overviewIPsec.htm"
aliases: ["VPN Connect"]
defaults:
  managed: true
  peerType: "site-to-site"
  tunnelType: "ipsec"
  bgp: false
  activeActive: true
properties:
  tunnelsPerConnection:
    type: "integer"
    default: 2
  routingType:
    type: "enum"
    values: ["static", "bgp", "policy-based"]
    default: "static"
  ikeVersion:
    type: "enum"
    values: ["ikev1", "ikev2"]
  encapsulationMode:
    type: "enum"
    values: ["tunnel"]
    default: "tunnel"
```

Human page: https://localhost:3000/catalogue/components/oci-site-to-site-vpn