---
title: Constrain the Choice of Internet Gateways for User Groups, Networks, and Hosts
canonical: https://openvpn.net/cloud-docs/owner/access/access---internet/constrain-the-choice-of-internet-gateways-for-user-groups-networks-and-hosts/
product: CloudConnexa Docs
description: Learn how to constrain internet gateway selection in CloudConnexa for user groups, networks, and hosts to control how internet traffic exits your WPC.
keywords: Internet Gateway selection
---

# Constrain the Choice of Internet Gateways for User Groups, Networks, and Hosts

By default, CloudConnexa automatically selects the optimal internet gateway for internet-bound traffic based on factors such as Region, network performance, and connector availability.

You can override this behavior by assigning specific internet gateways to user groups, networks, or hosts.

This allows you to:

- Create more deterministic internet routing policies.
- Route traffic through specific geographic locations.
- Distribute internet traffic across multiple gateways.
- Apply different security or compliance controls to different groups or networks.

For more information about Internet Access modes, internet gateways, and how CloudConnexa routes traffic, refer to:

- [About Internet Access](https://openvpn.net/cloud-docs/owner/access/access---internet/about-internet-access-configuration.md)

> **Important**
>
> Constraining internet gateways only applies when **Split Tunnel Off** is configured. Split Tunnel Off requires at least one Network configured as an Internet Gateway. Refer to [Make a Network act as an Internet Gateway](https://openvpn.net/cloud-docs/owner/networks/networks---networks/make-a-network-act-as-an-internet-gateway.md).

## Configure specific internet gateways

To constrain the choice of internet gateways for user groups, networks, or hosts, follow the steps below:

1. Sign in to your WPC's Administration Portal at your **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Navigate to **Access → Internet**.
3. Select the appropriate tab:
   - **User Groups**
   - **Networks**
   - **Hosts**
4. Use the filters or search to locate the entry you want to modify.
5. Click on the edit () icon next to the entry.
6. Expand the **Internet Gateway (Egress)** drop-down menu.
7. Clear the **All Internet Gateways** option if selected.
8. Select one or more internet gateways from the list.
9. Click **Update Internet Access**.

   > **Note**
   >
   > If multiple internet gateways are selected, or if an internet gateway Network contains multiple Connectors, CloudConnexa automatically selects the optimal route among the available options.

## Related documents

- [About Internet Access](https://openvpn.net/cloud-docs/owner/access/access---internet/about-internet-access-configuration.md)
- [Change Internet Access](https://openvpn.net/cloud-docs/owner/access/access---internet/change-internet-access-for-user-groups-networks-and-hosts.md)
- [About Tunnel Bypass](https://openvpn.net/cloud-docs/owner/access/access---internet/about-tunnel-bypass.md)
- [Make a Network act as an Internet Gateway](https://openvpn.net/cloud-docs/owner/networks/networks---networks/make-a-network-act-as-an-internet-gateway.md)
- [Tutorial: Use Multiple Geographically Distributed Internet Gateways to Improve Internet Performance](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--use-multiple-geographically-distributed-internet-gateways-to-improve-internet-performance.md)

---

Prev: [Change Internet Access](https://openvpn.net/cloud-docs/owner/access/access---internet/change-internet-access-for-user-groups-networks-and-hosts.md)
Next: [Shield](https://openvpn.net/cloud-docs/owner/shield.md)
Index: https://openvpn.net/cloud-docs/llms.txt