Discover Our Use Cases
See how you can use our use cases for your business
Enterprise Router and Firewall
Standard network services such as DHCP server and relay, DNS forwarding and web proxy are supported as well.
VyOS supports stateful firewall for both IPv4 and IPv6 including zone-based firewall, as well as multiple types of NAT (one to one, one to many, many to many). Support for QoS and policy-based routing allows you to ensure optimal handling of traffic flows.
Due to its ability to run on physical and virtual hardware alike, VyOS can be used to connect your cloud infrastructure to your data center or office network. Ready to use images are available through the marketplace on Amazon Web Services, Microsoft Azure, Google Cloud Platform and many others, with more images to come in future releases.
Support for multiple protocols and no need for per-tunnel licensing allow for greater flexibility and reduced costs compared to VPN solutions provided by cloud vendors.
Support for multiple VPN protocols makes VyOS especially suited for the VPN gateway role. Among supported protocols are IPsec (IKEv1 and IKEv2), VTI, OpenVPN in client-server and site to site mode, and WireGuard.
Traditional and new tunneling protocols such as IPIP and GRE, as well as L2TPv3 and VXLAN can be used with or without IPsec protection.
VyOS is one of the few networking solutions that provide DMVPN support and perhaps the only open source platform to provide it.
ISP Border Router
Since border routers are the separation points between uplink, downlink and peering networks and the internet service provider (ISP), some points should be taken into consideration when choosing the right border routing platform to ensure it delivers crucial features and functions like support for a full internet routing table, mainstream routing protocols BGP and OSPF, access control lists, internet peering scale, device management and at least entry-level DDoS protection.VyOS can be used as a border router, as it supports all necessary properties for this task, including dynamic routing protocols with the ability to control external traffic flows.
A configurable broadband remote access server (BRAS) is a highly valuable technology for any service provider. This is why VyOS stands out among solutions as a platform that will scale with your users and workload, and allow you to painlessly extend your services.The BRAS architecture is created in a way to enable the router to communicate with external devices and servers with the purpose of establishing connectivity to subscribers and managing their sessions. A logical session is used to connect subscribers to the network. There are two types of subscriber sessions, depending on the protocols used:
VyOS is not just a product, but a unified platform, with all its internal APIs accessible to everyone. You can integrate your own applications into the VyOS CLI and produce custom images easily.
Scripting APIs can be used to create custom high availability scenarios. You can also produce images with custom configuration for deploying on your customer’s equipment.