VPNs have been the standard for remote network access for decades. They work. They are well-understood. And for connecting two fixed networks with stable configurations, they remain a solid choice.
The problems start when the deployments are not fixed, the configurations are not stable, and the networks are not under your control.
VPN Complexity at Scale
A site-to-site VPN requires compatible hardware on both ends, admin access to both routers, and static IP addresses or dynamic DNS on both sides. If the remote site changes their ISP, their router, or their firewall rules — the VPN breaks and someone needs to fix it. That someone is usually you.
A client-to-site VPN requires VPN client software on every accessing machine, credentials for every user, and ongoing management of certificate lifecycles, split-tunnel policies, and access control lists. Every new team member, every new device, every expired certificate is a support ticket.
The ProxyPass Model
ProxyPass replaces both patterns with a simpler model. The node at the remote site makes an outbound connection. No router configuration. No VPN client on the accessing side. No certificates to manage. No split-tunnel policies to define.
You access the remote network through your ProxyPass subdomain — using the same browser, SSH client, database tool, or HTTP client you already use. The authentication is API key-based, managed centrally in your dashboard.
Scenario: The ISP Change That Broke Nothing
A retail company has 25 stores. Store #8 switches ISPs — new modem, new IP range, new DNS. With a VPN, this means reconfiguring the tunnel on both ends, updating the new IP in the central VPN concentrator, and testing the connection. Downtime: hours, sometimes days.
With ProxyPass, the node at Store #8 reconnects outbound after the ISP change. It does not care about the new IP. It does not care about the new modem. It makes an outbound connection to proxypass.cloud, and the tunnel is back within 30 seconds. Nobody in the IT team even noticed the ISP change. It just worked.
Service-Level Access vs. Network-Level Access
VPNs give you a network-level connection. ProxyPass gives you service-level access. You reach exactly what you need — specific devices, specific ports, specific files — without exposing the entire remote network.
For businesses managing devices across networks they do not control, that precision is not a limitation. It is an advantage.