What we do · Network
Private connectivity: VPN gateways and leased lines
Your staff, your offices and your other sites need to reach your hosted platform without exposing admin panels to the internet. We give every customer who needs it a dedicated gateway, never a slot on a shared multi-tenant box: your own network segment, your own firewall policy and your own VPN users.
What it is
Three ways to connect privately, used alone or together:
- Remote access VPN for your staff, with a certificate per person.
- Private leased lines from your office, terminated directly on our datacenter fabric.
- Site-to-site networks joining several of your locations to your servers over our encrypted backbone.
All three end in the same place: a gateway that belongs to you alone.
How we build it
- A dedicated gateway per customer. Each customer gets their own OPNsense firewall. It connects to a central policy gateway, a Cisco Firepower appliance, which handles transit while your own policy stays at your edge.
- A dedicated network segment. Your network is its own VLAN, stretched as an EVPN segment across our Cisco Nexus fabric. We keep a pool of pre-built customer segments, so a new customer is turned up by claiming one, not by redesigning the fabric.
- A certificate per person. Remote access is OpenVPN with a client certificate per user, plus a credential. Each user gets a fixed tunnel address, so firewall policy follows a person across devices. Access can be scoped to your own network only, or wider for a managed service provider's staff.
- Routes that cannot leak. Your gateway announces only explicit BGP network statements, an outbound prefix list permits only your prefixes, and we never use blanket redistribution.
- Checked before you receive a credential. Every gateway is configured through the OPNsense API, never by hand, and no VPN profile is delivered until an automated comparison against a proven reference gateway comes back clean.
- Private lines with evidence. When your office should never touch the public internet, we terminate your carrier's Metro Ethernet circuit directly on a fabric port with its own VLAN and public subnet, and put a continuous probe on it so the circuit's health is measured every minute in both directions.
- Redundant firewall hosts. Customer gateways run on a redundant pair of servers in separate racks, with separate bonds for transit and customer traffic.
What it protects you from
- Another tenant's misconfiguration reaching your network.
- Admin panels and CMS logins exposed to the open internet.
- A VPN that "does not connect" because of a subtle setting nobody compared.
- Your routes leaking into someone else's network, or theirs into yours.
- Arguments with a carrier about a circuit, settled without data.
In practice
A whole staff, connected in one session. For a digital agency that hosts many media sites with us, we created, packaged and delivered VPN access for their full staff roster in a single session, each person with an individual certificate and a fixed tunnel address.
Tuned to how the customer works. When the same agency asked for faster browsing while connected, we moved their gateway from full tunnel to split tunnel, so only company and customer networks travel through the VPN. Every issued profile stayed unchanged and all users reconnected within 90 seconds. We later moved the tunnel onto a kernel-accelerated, multi-core data path.
A newsroom on a private line. A news publisher's office reaches its platform over a private Metro Ethernet circuit that terminates directly on our fabric. A permanent probe measures the line every minute in both directions, and their own staff can see the dashboard.
Why EuroVPS
- A dedicated gateway and a dedicated segment for every customer, not a shared VPN concentrator.
- Individual certificates and fixed tunnel addresses for every person.
- An automated pre-delivery check against a proven reference, every time.
- Leased lines terminated on a real fabric, with continuous measurement you can see.
- Site-to-site networks on the same backbone that joins our own datacenters.
FAQ
Is my VPN shared with other customers? No. Your gateway, your VLAN and your users are yours alone.
Can access be limited per person? Yes. Fixed tunnel addresses per user let firewall policy follow each person.
Can my office connect without the internet? Yes. Bring a carrier circuit and we terminate it directly on our fabric, with continuous monitoring.
What if a staff member loses a laptop? We revoke that person's certificate. Nobody else is affected.
If you want your people and offices connected privately to your platform, talk to an engineer.
Your next infrastructure partner
Let’s look at
your setup.
Tell us what you run today and what needs to improve. An engineer will review your brief and help you plan the next step.
+357 222 32280
who will look after your infrastructure.
Let’s start with your setup.
A little context helps us start the right conversation.