Solution · VPN

VPN infrastructure,
on your terms.

Your IPs, your regions, your bandwidth model. Already running hundreds of thousands of VPN exit IPs for operators serving real subscribers.

Your IPs, your reputation

VPN operators spend years building IP reputation. Don't restart from zero on every cloud.

BYOIP — advertise your own IPv4/IPv6 prefixes through Zenlayer's network with full ROA/RPKI control
Per-region exclusive IP Pool — automatically created with each CIDR; no shared tenancy on your prefixes
Multiple network paths — Premium BGP, Local IP, regional carrier networks
IPv6 /96 prefixes — up to 100 Gbps per EIP, no surcharge for dual-stack

PoPs where your subscribers connect

Your users in Riyadh, Istanbul, or Jakarta need a PoP they can reach in single-digit milliseconds.

Middle East

Riyadh

Europe

Frankfurt · Marseille · Istanbul

Asia & APAC

Hong Kong · Singapore · Jakarta · Kuala Lumpur · Manila · Hanoi · Ho Chi Minh City

Americas

Dallas · Washington DC · Miami · Los Angeles · São Paulo · Bogotá · Santiago · Buenos Aires · Lima

Note

23 regions worldwide, all with compute, load balancing, and IP allocation.

A private backbone between them

When your subscribers connect in one region and their traffic exits another, the path stays on Zenlayer's network, not the public internet.

Cross-region bandwidth — in your global VPC — committed capacity between any two Zenlayer regions
Multiple billing models — Flat Rate or pay-as-you-go

A load balancer that speaks UDP

VPN protocols don't fit web-shaped load balancers. Ours does what you need.

All-Ports Listener — forward every port, any range, with one rule
TCP and UDP — natively for WireGuard, OpenVPN, IPsec/IKEv2
Backends by Instance or IP, with per-backend weights — shift traffic between exit nodes via API
Fail-Open health checks with custom source IP — degrade gracefully, fits tight ACLs on your exit nodes
Per-region DDoS protection with policy rules
Up to 100 Gbps per EIP on Standard, unlimited connections / CPS / QPS

Bandwidth priced like a VPN, not a website

Per-GB hyperscaler egress eats consumer VPN unit economics. Pick the model that matches your ARPU.

model 01

Flat Rate

Committed bandwidth, predictable monthly bill.

model 02

Bandwidth Cluster

Pool capacity across multiple resources in a region.

model 03

Pay-as-you-go

Per-second billing, no commits.

model 04

QoS Policy Groups

Apply bandwidth ceilings to groups of instances (e.g. trial vs. paid tiers).

Your VPN stack, not ours

WireGuard, OpenVPN, IPsec/IKEv2 — bring your image and your user plane.

Cloud-init user-data — at boot, for fleet bootstrap
Custom images — cloned across all 23 regions via API

Programmable end-to-end

REST API · Terraform · Go + Node SDKs · CLI — per-second pay-as-you-go billing.

REST API

Terraform

Go + Node SDKs

CLI

developer_console — bash

# Terraform · VPN exit node

resource "zenlayer_instance" "vpn_exit" {

zone_id = "ASIA-SOUTHEAST-2"

image_id = "wireguard-exit-v1"

byoip_prefix = "203.0.113.0/24"

}

➜terraform apply

100,000+ rounds down from the current internal count of IPv4 addresses. IPv6 excluded — address space is effectively unbounded.

Your IPs, your reputation

VPN operators spend years building IP reputation. Don't restart from zero on every cloud.

BYOIP — advertise your own IPv4/IPv6 prefixes through Zenlayer's network with full ROA/RPKI control

Per-region exclusive IP Pool — automatically created with each CIDR; no shared tenancy on your prefixes

Multiple network paths — Premium BGP, Local IP, regional carrier networks

IPv6 /96 prefixes — up to 100 Gbps per EIP, no surcharge for dual-stack

PoPs where your subscribers connect

Your users in Riyadh, Istanbul, or Jakarta need a PoP they can reach in single-digit milliseconds.

Note

23 regions worldwide, all with compute, load balancing, and IP allocation.

A load balancer that speaks UDP

VPN protocols don't fit web-shaped load balancers. Ours does what you need.

All-Ports Listener — forward every port, any range, with one rule

TCP and UDP — natively for WireGuard, OpenVPN, IPsec/IKEv2

Backends by Instance or IP, with per-backend weights — shift traffic between exit nodes via API

Fail-Open health checks with custom source IP — degrade gracefully, fits tight ACLs on your exit nodes

Per-region DDoS protection with policy rules

Up to 100 Gbps per EIP on Standard, unlimited connections / CPS / QPS

Elastic Compute

Bare Metal

Bare Metal GPUs

GPU VMs

VPN Infrastructure

AI Inference Edge

Documentation

Tools

Resources

VPN infrastructure,
on your terms.

Your IPs, your reputation

PoPs where your subscribers connect

A private backbone between them

A load balancer that speaks UDP

Bandwidth priced like a VPN, not a website

Flat Rate

Bandwidth Cluster

Pay-as-you-go

QoS Policy Groups

Your VPN stack, not ours

Programmable end-to-end

VPN infrastructure,
on your terms.

Your IPs, your reputation

PoPs where your subscribers connect

A private backbone between them

A load balancer that speaks UDP

Bandwidth priced like a VPN, not a website

Flat Rate

Bandwidth Cluster

Pay-as-you-go

QoS Policy Groups

Your VPN stack, not ours

Programmable end-to-end

VPN infrastructure,on your terms.

Your IPs, your reputation

PoPs where your subscribers connect

A private backbone between them

A load balancer that speaks UDP

Bandwidth priced like a VPN, not a website

Flat Rate

Bandwidth Cluster

Pay-as-you-go

QoS Policy Groups

Your VPN stack, not ours

Programmable end-to-end

VPN infrastructure,on your terms.

Your IPs, your reputation

PoPs where your subscribers connect

A private backbone between them

A load balancer that speaks UDP

Bandwidth priced like a VPN, not a website

Flat Rate

Bandwidth Cluster

Pay-as-you-go

QoS Policy Groups

Your VPN stack, not ours

Programmable end-to-end

VPN infrastructure,
on your terms.

VPN infrastructure,
on your terms.