Sold by: Netgate
Deployed on AWS
TNSR® High-Performance VPN Concentrator delivers route-based VPN solutions for edge, cloud, and multi-cloud.
3.5
Overview
Get high-performance routed site-to-site and remote access VPNs via IPsec or WireGuard® with no hidden fees - just unparalleled TCO.
Features: VPN: Routed IPsec site-to-site VPNs and remote access with Mobile IPsec or WireGuard.
Management and Monitoring: Command line interface (CLI), RESTCONF API, GUI, SNMP, Prometheus Exporter, and IPFIX Exporter for simple management and monitoring.
Compatibility: IPsec and WireGuard VPN compatible software across various platforms, including pfSense Plus®, AWS®, Azure®, Cisco®, Fortinet®, Palo Alto Networks®, Sophos®, Juniper®, WatchGuard®, Barracuda®, CheckPoint®, and others.
Routing: BGP, OSPF, RIPv2, IPv4/IPv6, ECMP, and more.
Security: L2/L3/L4 ACLs, scalable to over 100,000 rules.
Open Source Technology: Vector Packet Processing (VPP), Data Plane Developer Kit (DPDK), Clixon, Free Range Routing (FRR), and others. Linux / Ubuntu base.
See the full feature list here: https://www.netgate.com/tnsr
NOTE: Smaller 2-CPU instance sizes are meant for educational purposes only and should not be expected to perform as well as larger, more suitable instance sizes.
Highlights
- Easy to Deploy VPN solution for edge, cloud, and multi-cloud.
- Simple Management and Monitoring with a command line interface (CLI), RESTCONF API, GUI, SNMP, Prometheus Exporter, and IPFIX Exporter.
- Stable Security and Performance, built with open-source technology and zero trust architecture in mind.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 22.04.1 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m6in.xlarge Recommended | $0.20 |
m6i.metal | $1.20 |
m6in.8xlarge | $0.60 |
g6e.48xlarge | $2.00 |
m6i.32xlarge | $1.20 |
m6i.xlarge | $0.20 |
m6i.12xlarge | $1.20 |
m7i.xlarge | $0.20 |
m6i.24xlarge | $1.20 |
m7i.12xlarge | $1.20 |
Vendor refund policy
TNSR hourly subscriptions can be cancelled at any time. Customers will only be billed for time actually used while an AWS instance is active. TNSR annual subscription cancellations or downgrades are not supported. For assistance with subscription upgrades, visit our webpage.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
RESOURCES
AWS TNSR Instance Setup: https://docs.netgate.com/tnsr/en/latest/platforms/aws/index.html#aws-tnsr-instance-setup
Learn the Basics: https://docs.netgate.com/tnsr/en/latest/platforms/aws/learn-basics.html
Launch an Instance: https://docs.netgate.com/tnsr/en/latest/platforms/aws/launch-instance.html
Add TNSR LAN Interface to the Instance: https://docs.netgate.com/tnsr/en/latest/platforms/aws/add-lan.html
Prepare TNSR Network Interfaces: https://docs.netgate.com/tnsr/en/latest/platforms/aws/prepare-interfaces.html
Connect Management and WAN Interfaces to the Internet: https://docs.netgate.com/tnsr/en/latest/platforms/aws/connect-to-internet.html
Connect to the instance: https://docs.netgate.com/tnsr/en/latest/platforms/aws/connect-to-instance.html
Configure Interface Addresses in TNSR: https://docs.netgate.com/tnsr/en/latest/platforms/aws/configure-tnsr-addresses.html
Configure Default Route in TNSR: https://docs.netgate.com/tnsr/en/latest/platforms/aws/configure-default-route.html
Ping TNSR WAN Interface from your network: https://docs.netgate.com/tnsr/en/latest/platforms/aws/ping-tnsr-wan.html
Going from "Zero to Ping" with TNSR: https://docs.netgate.com/tnsr/en/latest/ztp/index.html
TNSR fundamentals: https://docs.netgate.com/tnsr/en/latest/basics/index.html
AWS Regional Market Availability for Netgate TNSR: https://docs.netgate.com/tnsr/en/latest/platforms/aws/availability.html
Resources
Vendor resources
Support
Vendor support
TAC PRO - 24x7x365 email support included with all instances types to .xlarge TAC ENT - 24x7x365 email and phone support included with all instance types above .xlarge To request TAC support, visit:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Palo Alto Networks
By Juniper Networks
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
VPN Protocol Support
Routed IPsec site-to-site VPNs, remote access with Mobile IPsec, and WireGuard VPN capabilities
Management and Monitoring Interfaces
Command line interface (CLI), RESTCONF API, GUI, SNMP, Prometheus Exporter, and IPFIX Exporter
Routing Protocols
BGP, OSPF, RIPv2, IPv4/IPv6, and ECMP support
Access Control and Security
L2/L3/L4 ACLs scalable to over 100,000 rules
Underlying Technology Stack
Vector Packet Processing (VPP), Data Plane Developer Kit (DPDK), Clixon, and Free Range Routing (FRR) on Linux/Ubuntu base
Application Layer Visibility and Control
Complete application layer-7 visibility and control of traffic with next-generation firewall capabilities in AWS environments
AI/ML-Powered Threat Detection
AI/ML-powered inspection engine with researcher-grade signatures for detection of zero-day threats, exploits, malware, spyware, and command and control attacks
Dynamic Policy Management
Policy definitions that dynamically apply to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones without manual intervention
Cloud Infrastructure Integration
Seamless integration with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway for protection across dynamic and large-scale deployments
Advanced Threat Prevention Service
Cloud-delivered Advanced Threat Prevention security service with market-leading threat coverage against known and zero-day threats while maintaining performance
Next Generation Firewall Architecture
High-performance firewall solution with core firewall, VPN, NAT, and advanced L4-L7 security services including application security, IPS, and anti-virus capabilities.
Anti-Virus and Malware Protection
Cloud-based anti-virus protection that detects and blocks spyware, adware, viruses, keyloggers, and other malware over POP3, HTTP, SMTP, and FTP protocols.
Intrusion Detection and Prevention
Intrusion detection and prevention (IPS) system integrated with application visibility and control through AppSecure for threat detection and workload protection.
VPN and Secure Connectivity
IPsec and full mesh VPN termination services enabling secure connectivity from on-premises data centers, campuses, and branches to AWS cloud across geographically dispersed VPCs.
AWS Cloud Service Integration
Native integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, Elastic Network Adapter support, and Gateway Load Balancer with L3 gateway and L4 load balancer capabilities.
Standard contract
No
No
No
Customer reviews
Ralph B.
Review of Netgate TNSR Router
Reviewed on Apr 25, 2025
Review provided by G2
What do you like best about the product?
The VPN features are the most robust and its seamless to the end users
What do you dislike about the product?
The User Interface is not so intuitive could be improved
What problems is the product solving and how is that benefiting you?
Its allowing it use a virtual device that saves on cost and management.