Freedom251 › Business VPN Software
AWS Site-to-Site VPN
What AWS Site-to-Site VPN is
AWS Site-to-Site VPN is a managed service that connects a data center or branch office to AWS resources through encrypted IPsec tunnels. The AWS-side endpoint can be an Amazon VPC or AWS Transit Gateway. Each connection has two tunnels that can operate simultaneously for availability. Administrators can manage resources through the AWS Management Console, AWS CLI, SDKs, Query API, or physical and software customer gateway devices. Supported capabilities include IKEv2, NAT traversal, configurable tunnel options, CloudWatch metrics, and IPv6 support with gateway-specific limitations. Large Bandwidth Tunnels support up to 5 Gbps per tunnel for eligible Transit Gateway or Cloud WAN connections. Logs can include tunnel, IKE negotiation, dead peer detection, BGP, and routing details. IPsec encryption supports AES128 or AES256 with Diffie-Hellman exchange. Security Rebase can store pre-shared keys in AWS Secrets Manager. A single connection cannot carry IPv4 and IPv6 simultaneously. Listed plans include $0.05 a month for a standard connection and additional data-transfer charges.
Who it suits
It suits organizations connecting offices or data centers to AWS, including teams needing managed tunnels, monitoring, logging, and advanced administration. It is intended for migration and secure communication between remote locations.
What it does well
- Connects branch offices or data centers to AWS
- Provides two tunnels per connection
- Supports CloudWatch metrics and detailed logs
- Offers tunnels up to 5 Gbps
- Supports AES128 or AES256 encryption
What to know first
- No free plan is listed
- IPv4 and IPv6 need separate connections
- Additional data-transfer charges apply
- Accelerated VPN adds charges
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Site-to-Site VPN connection | Charged for each VPN connection-hour while provisioned and available · Standard Site-to-Site VPN connection pricing · Standard AWS data transfer charges also apply | $0.05 a month |
| 5 Gbps Site-to-Site VPN connection | Hourly while provisioned and available; data transfer charges also apply. · 5 Gbps connection · Available in supported AWS Regions | $0.61 a month |
| Site-to-Site VPN Concentrator | Hourly while provisioned and available; connected sites are additionally charged per connection-hour. · $0.01/hr per Site-to-Site VPN connections per hour for sites connected via VPN Concentrator · Data transfer charges also apply | $1.95 a month |
| VPN Concentrator site connection | Charged for each Site-to-Site VPN connection-hour for sites connected via VPN Concentrator · Pricing for sites connected through a VPN Concentrator | $0.01 a month |
| Standard Site-to-Site VPN connection (1.25 Gbps) | Hourly while the connection is active; AWS gives a US East (Ohio) example of $36.00 per month for 30 days of continuous use. · Standard bandwidth up to 1.25 Gbps · Data transfer out and public IPv4 charges may also apply | $0.05 a month |
As aws.amazon.com lists them, read 22 Sept 2026. The maker's own page has the final word.
Verdict
AWS Site-to-Site VPN provides managed, encrypted connectivity with redundant tunnels and extensive AWS management interfaces. Buyers should account for usage-based connection pricing, data-transfer charges, and separate connections for IPv4 and IPv6 traffic.
Facts from AWS Site-to-Site VPN's own pages
- Acceleration
- Accelerated Site-to-Site VPN works with AWS Global Accelerator to route traffic to a nearby AWS network endpoint; additional accelerator and data-transfer-premium charges apply. · aws.amazon.com, 9 Oct 2026
- Access model
- vpn · aws.amazon.com, 22 Sept 2026
- Admin control level
- advanced · aws.amazon.com, 22 Sept 2026
- Audit logs
- Yes · aws.amazon.com, 22 Sept 2026
- Bandwidth
- Large Bandwidth Tunnels support up to 5 Gbps per tunnel and are available for connections attached to Transit Gateway or Cloud WAN. · docs.aws.amazon.com, 9 Oct 2026
- Compliance responsibility
- AWS describes security as a shared responsibility: AWS protects its cloud infrastructure, while customers are responsible for security in the cloud. · docs.aws.amazon.com, 9 Oct 2026
- Features
- Supported features include IKEv2, NAT traversal, configurable tunnel options, CloudWatch metrics, and IPv6 support with stated gateway-specific limitations. · docs.aws.amazon.com, 9 Oct 2026
- Free plan
- No · aws.amazon.com, 22 Sept 2026
- Gateways
- Connections can use Amazon VPC or AWS Transit Gateway as the AWS-side endpoint. · aws.amazon.com, 9 Oct 2026
- Management interfaces
- Resources can be managed through the AWS Management Console, AWS CLI, AWS SDKs, or the Query API. · docs.aws.amazon.com, 9 Oct 2026
- Monitoring
- VPN logs can be published to Amazon CloudWatch Logs and include IPsec tunnel, IKE negotiation, dead peer detection, BGP status, and routing-update details. · docs.aws.amazon.com, 9 Oct 2026
- Notable limitation
- A single connection cannot carry IPv4 and IPv6 traffic simultaneously, so separate VPN connections are required for those traffic types. · docs.aws.amazon.com, 9 Oct 2026
- Purpose
- AWS Site-to-Site VPN is a fully managed service that connects a data center or branch office to AWS resources through IPsec tunnels. · aws.amazon.com, 9 Oct 2026
- Redundancy
- Each VPN connection has two tunnels that can be used simultaneously for high availability. · docs.aws.amazon.com, 9 Oct 2026
- Security
- Traffic between a VPC and an on-premises network travels over encrypted IPsec tunnels, which support AES128 or AES256 encryption and Diffie-Hellman key exchange. · docs.aws.amazon.com, 9 Oct 2026
- Security management
- The Security Rebase feature can store pre-shared keys in AWS Secrets Manager and provides an API for viewing active tunnel security parameters. · docs.aws.amazon.com, 9 Oct 2026
- Site-to-site networking
- Yes · aws.amazon.com, 22 Sept 2026
- Supported platforms
- AWS Management Console,AWS CLI,AWS APIs,physical or software customer gateway devices · aws.amazon.com, 22 Sept 2026
- Use cases
- AWS identifies application migration and secure communication between remote locations as Site-to-Site VPN use cases. · aws.amazon.com, 9 Oct 2026
Where AWS Site-to-Site VPN stands on Freedom251
- Business VPN Software#74 of 94