> For the complete documentation index, see [llms.txt](https://mamawhocode.gitbook.io/aws/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mamawhocode.gitbook.io/aws/services/network/vpc/vpn.md).

# VPN

## Overview

<figure><img src="https://2259236002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fuh9xZDZ53qGqmMCM44PU%2Fuploads%2Fe53XGMGngWsSn3gNx2mi%2Fimage.png?alt=media&amp;token=78810d82-0351-4097-bbc9-f32d9ac5c1ab" alt=""><figcaption><p>a single VPN connection</p></figcaption></figure>

* The VPC connects to your network via a virtual private gateway and a customer gateway.

## Features

### VPN - CloudHub

* Connect **multiple remote sites** to AWS through VPN connections.
* Use VPC virtual private gateway with multiple Customer gateways.
* Use this approach if you have **multiple branch offices** and existing internet connections and would like to implement a convenient, potentially low-cost hub-and-spoke model for primary or backup connectivity between these remote offices.

<figure><img src="https://docs.aws.amazon.com/images/whitepapers/latest/aws-vpc-connectivity-options/images/image12.png" alt=""><figcaption><p>CloudHub architecture</p></figcaption></figure>

***

## Concepts

* **IPsec VPN**: AWS uses IPsec (Internet Protocol Security) for VPN connections.
* **Customer Gateway**: This is either a physical device or software in your network that connects to the VPN.