NetFoundry Deployment Options

NetFoundry offers three deployment models to cater to diverse networking needs. These deployment models offer flexible, secure, and efficient solutions to meet the networking needs of software providers, equipment manufacturers, IIoT and OT solution providers, enterprises, developers, and service providers.

NetFoundry Cloud

A cloud-native, Network-as-a-Service (NaaS) model.

This model is similar to SaaS where NetFoundry handles all hosting, updates, maintenance, and security, offering the entire solution on a subscription basis. It is ideal for businesses seeking cost-effective, flexible, and accessible software solutions. It allows organizations to spin up secure, high-performance overlay networks instantly across the programmable NetFoundry Fabric without the need for infrastructure provisioning or hardware deployment. The service is a consumption-based model that scales as needed.

NetFoundry Hybrid Cloud

An on-premise + private cloud model plus managed services.

This hybrid model refers to a software deployment model where the software is installed and operated on both NetFoundry’s cloud and the organization’s local servers or in their private clouds, but managed by NetFoundry. It offers the convenience of managed services, including installation, updates, and support. It is ideal for highly regulated industries or large enterprises requiring extensive customization and integration with existing systems, ensuring data privacy and compliance while reducing operational complexity.

NetFoundry On-Premise

A traditional on-premise software model.

This model involves installing and running software on servers located within the physical premises or private clouds of the organization using it. It provides full control over the infrastructure, data security, and compliance with regulatory requirements. It requires significant initial investment in hardware and ongoing maintenance by the organization's IT team. On-premise solutions are ideal for companies needing extensive customization and integration with existing systems.

NetFoundry Cloud

NetFoundry NaaS & on-prem zero trust platform

Zero Trust Native Network Overlays, Extended Anywhere

Each overlay is private and dedicated. Infrastructure is managed by NetFoundry as NaaS, or use NetFoundry’s zero trust platform to self-host your overlay, including at air-gapped sites. Extend overlays via:

+ NetFoundry zero trust endpoints for every major OS, as host-based agents, containers, VMs or gateways

+ NetFoundry zero trust SDKs to embed zero trust endpoints in software

+ Connectivity via NetFoundry’s distributed proxies, firewall connections, TLS or mTLS

All-batteries included solution – the network overlay is zero trust native to make deployments simple:

Built-in PKI, as a service

X.509 based PKI, including enrollment, revocation, renewal. Other CAs optional but supported (RFC 7030). X.509s are core identities (IdP integrations optional but supported).

IdP flexibility

Use NetFoundry’s built-in PKI with pre-integrated MFA and posture to identify and authenticate each session. Or, use any OAuth or OIDC complaint IdP.

Full mesh, HA, high performance NaaS

NetFoundry NaaS overlays dynamically optimize over 100 PoPs, with HA, load balancing & auto-scaling. You get end-to-end control and visibility, including geofencing.

On-prem, air-gapped & hybrid

Run your overlay locally, including air-gapped and sovereign sites, with NetFoundry’s On-premises Platform. Or, use a hybrid overlay with NetFoundry sites and other sites.

End-to-end encryption (E2EE)

Encryption keys are specific to each session and sovereign to the endpoints, stored in HSMs on compatible devices. NetFoundry therefore doesn’t have access to your keys.

FIPS compliant encryption option

NetFoundry supports FIPS compliant encryption as a pluggable option and uses libsodium by default. Other cipers can be plugged-in. Gov Cloud, FedRamp and CIS support.

Network Access Control (NAC)

Next-gen NAC identifies, authenticates and authorizes every session before it is given overlay access. The NAC solution extends anywhere, including B2B, multinetwork and OT.

Identity-based visibility

Every session is identified by human, device or server identities (not IPs). Telemetry correlates identities, services, data. View in NetFoundry Console, SIEM or your UI via NetFoundry APIs.

How NetFoundry Works

Zero Trust Connectivity with End-to-End Encryption & AppNets

Infrastructure Management Services

Infrastructure Provisioning

Quick provisioning and scaling of resources like VMs, storage, and networking using the leading Cloud Providers including AWS.

Software Management

Management of all underlying required software, tools, and databases handling installation, configuration, and maintenance.

Multi-tenant For Your Customers

Centrally manage multi-tenant, zero trust networks via the web console and APIs. Each of your customers is microsegmented with full zero trust, while you maintain central controls, visibility, provisioning, and telemetry.