Join your networks without opening ports

Connect your sites through Firezone, no firewall configuration required. Fast, encrypted links between every office, data center, and VPC, with nothing to install on the devices behind them.

Berlin officeClientGatewayAustin officeClientGateway

Every device covered

Firezone for devices that don’t run Firezone

Printers, cameras, and legacy servers can’t run an agent, and they don’t need to. They route through a Client in their site, and every connection still follows your policies.

Least privilege

Decide exactly what crosses

Each direction gets its own Policy. Allow only the ports you need, or add conditions like time of day.

Policies

  • Berlin to AustinAustin office192.168.10.0/24
    TCP 443TCP 5432Weekdays
  • Austin to BerlinBerlin office10.10.10.0/24
    TCP 22ICMP

Built for throughput

Gigabits per box, and more on demand

Each Client and Gateway routes more than 5 Gbps on modest commodity hardware. Need more? Add Clients and Gateways, and the load spreads evenly across them.

Client5+ GbpsClient5+ GbpsGateway5+ GbpsGateway5+ GbpsGateway5+ Gbps

Live in an afternoon

Set up in four steps

  1. 01

    Deploy a Gateway in each site

    • Berlin officeOnline
    • Austin officeOnline
  2. 02

    Grant each direction its network

    • Berlin to Austin192.168.10.0/24
    • Austin to Berlin10.10.10.0/24
  3. 03

    Start a headless Client

    $ sudoedit \  /etc/dev.firezone.client/token$ sudo ./firezone-client
  4. 04

    Route the other subnet to it

    $ ip route add 192.168.10.0/24 \  via 10.10.10.2

Prefer code? Automate every step with the REST API, the Terraform provider, or MCP.

Read the step-by-step guide

Miles apart. Right next door.

Link offices, data centers, and VPCs so they work like one network. Free to start, with no credit card required.