--- title: What is a site-to-site VPN? | daily.dev description: Site-to-site VPNs create secure, encrypted connections between geographically distant networks, either within the same organization (intranet-based) or across... canonical: https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: What is a site-to-site VPN? | daily.dev og:description: Site-to-site VPNs create secure, encrypted connections between geographically distant networks, either within the same organization (intranet-based) or across... og:url: https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku og:image: https://api.daily.dev/og/posts/eXGKwmiKu.png og:image:alt: What is a site-to-site VPN? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # What is a site-to-site VPN? **[ngrok Blog](https://daily.dev/sources/ngrok)** · 4 min read · 0 upvotes · 0 comments ## Summary Site-to-site VPNs create secure, encrypted connections between geographically distant networks, either within the same organization (intranet-based) or across different organizations (extranet-based). They rely on VPN gateways, tunneling protocols like IPsec, SSL/TLS, and GRE, encryption, and authentication to bridge private networks over the public internet. Common use cases include remote resource access, data backup/replication, cross-border operations, and cloud integration. Benefits include enhanced security, scalability, and cost savings, while risks include encryption overhead, single points of failure, misconfiguration vulnerabilities, and configuration complexity. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the difference between intranet-based and extranet-based site-to-site VPNs? An intranet-based site-to-site VPN connects multiple sites belonging to the same organization, enabling secure communication between branches or offices under a unified network. An extranet-based site-to-site VPN instead connects different organizations, allowing secure data transfer between separate companies while maintaining data integrity, which is useful for external collaboration. _Teams weighing VPN architectures can compare networking approaches and tradeoffs on daily.dev._ ### What protocols are commonly used to set up a site-to-site VPN? Common tunneling protocols for site-to-site VPNs include IPsec, SSL/TLS, and GRE, which encapsulate and encrypt data for secure transmission between locations. Setup also requires VPN gateways at each site, tunnel configuration with chosen encryption and authentication methods, NAT considerations, and routing table configuration to direct traffic through the tunnel. _Engineers configuring secure network tunnels can find deeper protocol comparisons on daily.dev._ ### What are the main security risks of using a site-to-site VPN? Key risks include encryption overhead that adds latency, a single point of failure if the internet connection drops, vulnerabilities from misconfigurations or outdated protocols, complexity in setup requiring specialized expertise, and limited anonymity since traffic still traverses the public internet even when encrypted. _Anyone hardening network security can track VPN risk patterns and mitigations on daily.dev._ ## Similar posts on daily.dev - [From tunnel to connectivity layer: What GnuVPN says about where VPNs are heading](https://daily.dev/posts/from-tunnel-to-connectivity-layer-what-gnuvpn-says-about-where-vpns-are-heading-2bqe2xob7) · The Next Web · 0 upvotes · 0 comments - [Understanding IP Addresses: What They Reveal and How VPNs Change Your Online Connections](https://daily.dev/posts/understanding-ip-addresses-what-they-reveal-and-how-vpns-change-your-online-connections-akqxy6mce) · SitePoint · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#networking](https://daily.dev/tags/networking), [#vpn](https://daily.dev/tags/vpn) [View this post on daily.dev](https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"What is a site-to-site VPN?","url":"https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku"},"datePublished":"2026-08-23T07:20:49.243Z","dateModified":"2026-08-23T07:26:10.009Z","description":"Site-to-site VPNs create secure, encrypted connections between geographically distant networks, either within the same organization (intranet-based) or across...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/489166ccb0b01c49eb623c44101169b0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/489166ccb0b01c49eb623c44101169b0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"ngrok Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"ngrok Blog","logo":"https://media.daily.dev/image/upload/s--718XXxvE--/f_auto,q_auto/v1787469610/logos/ngrok?_a=BAMAMicg0","url":"https://daily.dev/sources/ngrok"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,networking,vpn","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"ngrok Blog","item":"https://daily.dev/sources/ngrok"},{"@type":"ListItem","position":3,"name":"What is a site-to-site VPN?"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/what-is-a-site-to-site-vpn--exgkwmiku#faq","mainEntity":[{"@type":"Question","name":"What is the difference between intranet-based and extranet-based site-to-site VPNs?","acceptedAnswer":{"@type":"Answer","text":"An intranet-based site-to-site VPN connects multiple sites belonging to the same organization, enabling secure communication between branches or offices under a unified network. An extranet-based site-to-site VPN instead connects different organizations, allowing secure data transfer between separate companies while maintaining data integrity, which is useful for external collaboration. Teams weighing VPN architectures can compare networking approaches and tradeoffs on daily.dev."}},{"@type":"Question","name":"What protocols are commonly used to set up a site-to-site VPN?","acceptedAnswer":{"@type":"Answer","text":"Common tunneling protocols for site-to-site VPNs include IPsec, SSL/TLS, and GRE, which encapsulate and encrypt data for secure transmission between locations. Setup also requires VPN gateways at each site, tunnel configuration with chosen encryption and authentication methods, NAT considerations, and routing table configuration to direct traffic through the tunnel. Engineers configuring secure network tunnels can find deeper protocol comparisons on daily.dev."}},{"@type":"Question","name":"What are the main security risks of using a site-to-site VPN?","acceptedAnswer":{"@type":"Answer","text":"Key risks include encryption overhead that adds latency, a single point of failure if the internet connection drops, vulnerabilities from misconfigurations or outdated protocols, complexity in setup requiring specialized expertise, and limited anonymity since traffic still traverses the public internet even when encrypted. Anyone hardening network security can track VPN risk patterns and mitigations on daily.dev."}}]} ```