---
title: Site-to-site VPN high availability and multi-site configurations
description: This page provides additional information to deploy high availability and multisite setups using Scaleway Site-to-site VPN.
tags: s2s vpn multisite ha resiliency redundancy setup deployment
dates:
  validation: 2026-05-06
  posted: 2026-05-06
---

import singleNoHA from './assets/scaleway-vpn-single-no-ha.webp'
import singleHA from './assets/scaleway-vpn-single-ha-2-1.webp'
import singleCrossHA from './assets/scaleway-vpn-single-cross-ha-2-2.webp'
import multiHA from './assets/scaleway-vpn-multi-2-2-2.webp'

Site-to-site VPN allows you to set up high availability and multi-site deployments by letting you deploy VPN gateways across multiple Availability Zones within a Region, all attached to the same Private Network.

Adding redundancy with a second VPN gateway eliminates single points of failure for critical infrastructure. You can then connect several distinct infrastructures to set up large-scale multi-site deployments.

## Single site configuration without redundancy

 In this configuration, a VPN gateway in a single Availability Zone connects to a customer gateway in a single remote infrastructure.

  <Lightbox image={singleNoHA} alt="A schema of a simple Site-to-Site VPN configuration without redundancy." />

## Single site configuration with redundancy on Scaleway side

The schema below represents a Site-to-Site VPN configuration between two VPN gateways in two AZs, attached to a single Private Network in a single VPC on the Scaleway side, and connected to a customer gateway in a single remote infrastructure. This setup offers high availability on the Scaleway side.  

  <Lightbox image={singleHA} alt="A schema of a single customer site configuration with redundancy provided by two VPN gateways in different AZs for the same Private Network on Scaleway side." />

## Single site configuration with crossed redundancy on both Scaleway and customer sides

The schema below represents a Site-to-Site VPN configuration between two VPN gateways in two AZs, attached to a single Private Network in a single VPC on the Scaleway side, each connected to two customer gateways in a single remote infrastructure. This setup offers high availability on both the Scaleway and customer sides, with crossed redundancy for the connections.

  <Lightbox image={singleCrossHA} alt="A schema of a dual customer gateway configuration in a single remote infrastructure with redundancy provided by two VPN gateways in different AZs for the same Private Network on Scaleway side." />

## Multi-site configuration with crossed redundancy on both sides

The schema below represents a Site-to-Site VPN configuration between two VPN gateways in two AZs, attached to a single Private Network in a single VPC on the Scaleway side, each connected to four customer gateways across two remote infrastructures. This setup offers high availability on the Scaleway side, and each site on the customer side, with crossed redundancy for the connections.

  <Lightbox image={multiHA} alt="A schema of two separate customer remote infrastructure containing two customer gateways each, with redundancy provided by two VPN gateways in different AZs for the same Private Network on Scaleway side." />