Skip to content
SkiMasque
Sign InGet Started

You choose where the network edge lives.

SkiMasque supports three deployment models.

Three deployment models

Green Run

SkiMasque Cloud

  • Control plane: SkiMasque
  • Gateway: SkiMasque
  • Operations: minimal
  • Free tier

dedicated Cloud egress PLANNED

Blue Run

Your Gateway

  • Control plane: SkiMasque
  • Gateway: Customer
  • The gateway lives inside your network

Black Run

Self-hosted

  • Control plane: Customer
  • Gateway: Customer
  • Operations: Customer
Three ways to run SkiMasque: hosted, with your own gateway, or fully self-hosted. Each is named by run and by what it is.

Green Run — SkiMasque Cloud

Green Run

You run your apps. We run SkiMasque.

The shared gateway reaches destinations available from its network. Use a customer gateway for private VPC resources; a Cloud account does not create private connectivity.

The control plane implements Free, Team and Business entitlements, with Stripe checkout and billing management when enabled. Check your console for the plans available on your deployment.

Control plane
SkiMasque
Gateway
SkiMasque
Operations
Minimal
  1. APPLICATION
    active
  2. SKIMASQUE CLOUD
    active
  3. SKIMASQUE GATEWAY
    active
  4. YOUR NETWORK
SkiMasque Cloud manages authorization. Application traffic travels through the SkiMasque gateway to your network.

Best for:

  • getting started quickly
  • teams that don't want to operate networking infrastructure
  • standard deployments

Blue Run — Your Gateway

Blue Run

We run the control plane. You run the network edge.

Control plane
SkiMasque
Gateway
Customer

The gateway lives inside the customer's network.

  1. APPLICATION
    active
  2. SKIMASQUE CLOUD
    active
  3. YOUR GATEWAY
    active
  4. YOUR VPC
SkiMasque Cloud manages authorization. Application traffic travels through your gateway to your VPC.

This is useful when customers need:

  • private routing
  • internal firewall control
  • customer-owned egress IP
  • traffic to remain inside their infrastructure

Black Run — Self-hosted

Black Run

You run everything.

Control plane
Customer
Gateway
Customer
Operations
Customer
  1. APPLICATION
    active
  2. CUSTOMER CONTROL PLANE
    active
  3. CUSTOMER GATEWAY
    active
  4. CUSTOMER NETWORK
Your control plane manages authorization. Application traffic travels through your gateway to your network.

Suitable for customers requiring full infrastructure ownership.

There is no open-source control plane. To self-host, you implement the documented control protocol or license SkiMasque's control-plane distribution; expect real engineering work, not a config switch.

Read the self-hosting guide

Who operates what

The run colors represent operational responsibility, not product quality.

GREEN
SkiMasque operates more.
BLUE
Shared responsibility.
BLACK
Customer operates more.