Skip to content
SkiMasque
Sign InGet Started

Put the network edge where your infrastructure lives.

The gateway is the point where SkiMasque-controlled sessions enter the customer's network.

  1. WORKLOAD
    active
  2. SKIMASQUE CONTROL PLANE
    active
  3. GATEWAY
    active
  4. CUSTOMER NETWORK
    active
  5. DESTINATION
A workload reaches the control plane, which authorizes a session through the gateway into the customer network and on to the destination.

Customer-operated gateway

  1. Developer
    sessionactive
  2. Gateway
    Databasedb.prod:5432
A session enters your VPC through the gateway, which forwards it to the database inside.

The customer can configure their firewall to permit the gateway's traffic.

Egress IP

A customer-operated gateway uses the egress address configured in your network. Configure a stable address or NAT mapping if your infrastructure relies on source-IP allowlists.

PLANNED SkiMasque-provided dedicated egress IPs

A dedicated address that SkiMasque reserves for your organization, so you can allowlist exactly one source address without running a gateway yourself.

Multiple gateways

Control plane
  • us-westcontrol plane
    Gatewayus-west
  • us-eastcontrol plane
    Gatewayus-east
  • eu-westcontrol plane
    Gatewayeu-west
One control plane manages several gateways, each inside its own network.