Skip to main content

Constrain the Choice of Internet Gateways for User Groups, Networks, and Hosts

Abstract

Learn how to constrain internet gateway selection in CloudConnexa for user groups, networks, and hosts to control how internet traffic exits your WPC.

By default, CloudConnexa automatically selects the optimal internet gateway for internet-bound traffic based on factors such as Region, network performance, and connector availability.

You can override this behavior by assigning specific internet gateways to user groups, networks, or hosts.

This allows you to:

  • Create more deterministic internet routing policies.

  • Route traffic through specific geographic locations.

  • Distribute internet traffic across multiple gateways.

  • Apply different security or compliance controls to different groups or networks.

For more information about Internet Access modes, internet gateways, and how CloudConnexa routes traffic, refer to:

Important

Constraining internet gateways only applies when Split Tunnel Off is configured. Split Tunnel Off requires at least one Network configured as an Internet Gateway. Refer to Make a Network act as an Internet Gateway.

Configure specific internet gateways

To constrain the choice of internet gateways for user groups, networks, or hosts, follow the steps below:

  1. Navigate to Access → Internet.

  2. Select the appropriate tab:

    • User Groups

    • Networks

    • Hosts

  3. Use the filters or search to locate the entry you want to modify.

  4. Click on the edit (pencil_icon.png) icon next to the entry.

  5. Expand the Internet Gateway (Egress) drop-down menu.

  6. Clear the All Internet Gateways option if selected.

  7. Select one or more internet gateways from the list.

  8. Click Update Internet Access.

    Note

    If multiple internet gateways are selected, or if an internet gateway Network contains multiple Connectors, CloudConnexa automatically selects the optimal route among the available options.