Sold by: Proxylity
Deployed on AWS
Free Trial
Vendor Insights
AWS Free Tier
Proxylity UDP Gateway is a fully managed serverless solution that terminates UDP, DTLS and WireGuard connections and directs packet data to AWS Lambda functions, Step Functions, SNS, SQS, Kinesis, Location Service, DynamoDB, S3, CloudWatch and more AWS services.
Built for developers who need datagram protocol backends without managing servers. Our gateway eliminates the operational overhead of traditional UDP infrastructure.
Implement RADIUS authentication, syslog collection, IoT device communication, and other UDP transport based workloads with serverless scalability and pay-per-use pricing. Deploy services in minutes using infrastructure-as-code, with global low-latency routing and built-in high availability (>99.99%) across AWS regions.
Overview
Image
How UDP Gateway Works
Image
Infrastructure as Code Workflow
Image
Use Case: RADIUS Authentication and Accounting
Image
Use Case: Centralize Logging
Image
The Door is Open to Serverless UDP
Video
Product video
Proxylity UDP Gateway is a fully managed serverless solution that terminates UDP, DTLS and WireGuard connections and integrates directly with AWS Lambda, IoT Core, CloudWatch Logs, S3, DynamoDB, Step Functions, SNS, SQS, Kinesis, EventBridge, and API Gateway without managing UDP servers.
UDP Gateway eliminates backend operational overhead for IoT device connectivity, syslog collection, CoAP APIs, DNS services, network monitoring, real-time gaming, and many more protocols and use case integrations. Supports DTLS 1.2 and 1.3, and WireGuard for modern protection of data in transit.
Infrastructure-as-Code Native Design
Deploy production-ready UDP and WireGuard listeners in under 5 minutes using AWS CloudFormation or Terraform. CloudFormation templates define listeners, destinations, IAM roles, client IP restrictions, and batching policies. Official Terraform module available in HashiCorp Registry. Enables GitOps workflows and repeatable deployments.
Direct Integration with AWS Services
** AWS Lambda Integration for Flexible Data Processing **
Process UDP packets with Lambda business logic instead of managing EC2 instance fleets. Delivers packets as JSON objects with source IP, port numbers, timestamps, peer/client key and raw payloads. Lambda response streaming enables real-time protocols by sending reply packets progressively throughout execution. Supports all AWS runtimes (Node.js, Python, Java, Go, .NET). Multi-tenant isolation with dynamic tenant ID extraction using Binary Range Expressions. .NET SDK and dotnet templates available. Configurable batching reduces Lambda invocations.
AWS IoT Core Integration for Connected Devices
Bridge remote devices directly to AWS IoT Core infrastructure without protocol translation servers. Dynamic topic routing publishes to unique MQTT topics based on device identifiers extracted from datagram payloads, enabling per-device subscriptions, Thing Shadow updates, and Rules Engine integration. Static mode wraps packets in JSON; dynamic mode preserves raw binary payloads. Ideal for industrial sensors, cellular gateways, energy management, connected vehicles, and legacy modernization.
Centralized Syslog Collection and Security Logging
Replace syslog servers with direct CloudWatch Logs integration. Publishes syslog messages (RFC3164, RFC5424, RFC6587) to CloudWatch log groups. Composite destinations route logs to CloudWatch for monitoring with metric filters and alarms, S3 via Firehose for compliance archival (SOC 2, PCI-DSS, HIPAA, FedRAMP), and Lambda for security event processing to AWS Security Hub. Integrates with SIEM platforms (Splunk, Sumo Logic, Datadog) via CloudWatch subscriptions.
*Expansive AWS Service Integrations
- AWS Lambda: Request/response and streaming, tenant isolation
- Step Functions: EXPRESS or STANDARD workflow orchestration
- API Gateway: Third-party HTTP/HTTPS webhook integration
- EventBridge: Event-driven routing patterns
- SQS: Standard and FIFO queues with dynamic message group IDs
- SNS: Fan-out notification patterns
- DynamoDB: Real-time storage with dynamic attribute mapping
- S3: Direct object storage for archival
- Kinesis Data Streams: Real-time streaming with partition keys
- Kinesis Data Firehose: High-volume delivery to S3, Redshift, OpenSearch
- CloudWatch Logs: Centralized logging
- Location Service: Fleet, package and cold chain tracking
- AWS IoT Core: MQTT topic publishing
Security and Compliance
Zero-trust architecture with IAM role assumption. Client IP restrictions using CIDR notation. All API calls auditable via CloudTrail. Encryption at rest. Compliance-ready for SOC 2, PCI-DSS, HIPAA, FedRAMP with S3 Object Lock. Multi-region deployment supports data residency and GDPR.
Common Use Cases
RADIUS authentication with Lambda querying DynamoDB or RDS. IoT connectivity bridging CoAP to AWS IoT Core. Syslog routing to CloudWatch and Security Hub. DNS filtering with Lambda. Real-time gaming with DynamoDB. SNMP trap collection. Legacy modernization without firmware changes.
Transparent Pricing and Free Tier
1 million packets free monthly. Pay only for delivered traffic with no minimums or contracts. Pricing: $1.25 per million (1-100M) to $0.60 (1T+). Port-hours: $0.00139/hour. Compatible with AWS credits. Batching reduces API calls by 90%. Automatic scaling to zero, no idle costs.
Deploy in under 5 minutes at proxylity.com/docs. Free trial available through AWS Marketplace.
Highlights
- Global, high availability architecture delivers UDP, DTLS and WireGuard traffic to AWS Lambda, Step Functions, SNS, SQS, DynamoDB, and S3 with tunable latency. Deploy in multiple AWS regions for compliance and performance, with automatic high availability and failover.
- Simple, transparent usage-based pricing with 1 million packets free per month. Pay only for actual traffic processed. No minimum fees, long-term contracts, or infrastructure costs. Includes generous free tier for development and testing.
- Deploy services seamlessly using infrastructure-as-code (Terraform, CloudFormation). Eliminate server maintenance, patching, and scaling concerns. Focus on business logic while we handle network protocols, security, and global infrastructure management.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/unit |
|---|---|---|
First 1M Packets | 0-1M Packets (Free Tier) | $0.00 |
Next 99M Packets | 1-100M Packets (per million) | $1.25 |
Next 900M Packets | 100M-1B Packets (per million) | $1.12 |
Next 10,000M Packets | 1B-10B Packets (per million) | $0.99 |
Next 90,000M Packets | 10B-100B Packets (per million) | $0.86 |
Next 900,00M Packets | 100B-1T Packets (per million) | $0.73 |
Above 1T Packets | > 1T Packets (per million) | $0.60 |
UDP Listener | per port-hour | $0.00139 |
Free UDP Listener | Included in Subscription or Free Tier | $0.00 |
Dimensions summary
You pay for two things: packets processed and active UDP Listeners. Packet pricing uses volume tiers that reset monthly. Your first 1 million packets each month are free. Beyond that, you pay per million packets, with the per-unit rate stepping down as you cross higher volume bands, up to and above 1 trillion packets. Both inbound deliveries and outbound responses count. Each Listener bills per port-hour, regardless of traffic, and is not pro-rated. You also get a free Listener included in your subscription or free tier.
Top-of-mind questions for buyers
A packet is any UDP datagram delivered to a destination or sent back as a response to a client. Packets up to 1KB count as one. Larger packets count as multiples by size in KB, rounded up. A 1.5KB packet counts as 2, and a 3.2KB packet counts as 4.
Both charges apply at the same time and add together. Each Listener bills per port-hour regardless of traffic. Packet volume bills separately using monthly tiers. If a Listener routes to several destinations, each inbound packet is counted once per destination, multiplying packet charges.
Yes. Each Listener bills per port-hour simply for existing, no matter the traffic. Charges are not pro-rated, so a Listener active for any part of an hour bills the full hour. Deleting a Listener stops new charges after the current hour.
proxylity.com
Helpful?
Vendor refund policy
Refunds will not be provided for past usage. Credits may be applied at discretion of our team. To discuss a credit request, please contact your service representative or reach out to billing@proxylity.com .
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Questions about Proxylity or UDP Gateway? Reach out to support@proxylity.com or visit the website at
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
WireGuard VPN Server on Linux/Debian for secure Internet access with UI (Web Interface) and IP rotation. This WireGuard server uses UDP protocol for VPN communication, ensuring high-speed VPN performance. After launching, the secure Wireguard VPN Server is immediately fully operational without the need for any setup. WireGuard is a modern VPN technology, and WireGuard tunnels provide higher data transfer speeds than IPSec or IKEv2 and significantly higher than those of OpenVPN. This WireGuard server provides a stable VPN connection at the highest possible speed. Wireguard VPN Server on Linux/Debian has a convenient and intuitive control web panel including user management features. Client configuration settings can be easily transferred to the WireGuard mobile application using a QR code. WireGuard VPN server is suitable for both individual users and companies offering VPN services.
WatchGuard Endpoint Security Cloud-native solutions protect businesses of any kind from present and future cyber-attacks. They combine next-generation antivirus protection, endpoint detection and response (EDR), along with enhanced features for incident investigation and response. All this through a single Cloud-based management console and using a single lightweight agent.
The product has charges associated with it for support, maintenance, and pre-configuration to be instantaneously deployed on AWS Marketplace with all security and enterprise standards. The WireGuard VPN Server on Ubuntu 22.04 LTS offers a cost-effective, scalable, and secure solution.
WireGuard VPN Server on Debian for Internet access for computers and mobile devices. Additionally, it contains a Pi-Hole proxy DNS server that blocks advertising DNS requests. Thus, this VPN server allows clients to surf the web and significantly reduce the amount of advertising displayed. It is easy to use: after launching, it is immediately fully operational without the need for any setup. WireGuard technology is quite modern; it offers data transfer speeds through VPN tunnels that are higher than those using IKEv2 and significantly higher than the OpenVPN protocol. This server provides a stable VPN connection at the highest possible speed. The server has a convenient and intuitive web control panel. Suitable for both individual users and companies offering VPN services.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.