SECURITY PRODUCTS / 01—02
One gateway. Many paths. Clear policy.
Security infrastructure for making session egress and source-aware network paths explicit, observable, and deliberate.
Hydra
A session-aware multi-VPN gateway that routes network sessions through policy-selected VPN egress paths. Hydra is designed for environments that need separation, resilience, and operational visibility across multiple connections.
Routing policy is applied at the session boundary, allowing individual flows to follow the appropriate path while gateway health and failover behavior remain observable.
Charon
Every source gets the right crossing.
Charon is a source-aware policy router for Ubuntu. It directs matching IPv4 traffic to an explicit gateway, sends ordinary traffic to the primary path, and stops safely when policy cannot be satisfied—while preserving original source addresses.
Longest-prefix matching and explicit priority resolve source policy. Gateway eligibility is health-gated against observed route state, and operators can distinguish desired configuration from the routes, rules, firewall objects, probes, and services actually forwarding traffic.
ROUTING CONTRACT
Policy intent, verified against forwarding reality.
Charon sits between the core and upstream gateways. It owns the policy decision and the bounded network state required to enforce it, with transactional apply, narrow privilege, explicit backup relationships, and observable evidence.
SECURITY PRODUCTS