Replace your VPN

import { CardGrid, LinkTitleCard } from "~/components";

Cloudflare One uses Cloudflare's global network and Zero Trust Network Access (ZTNA) to replace traditional VPNs. After you securely connect your devices and resources to Cloudflare, you can set policies to verify every request based on identity and context, reducing your attack surface and improving performance for remote users. For more background, refer to Why should you replace your VPN?

How you set this up depends on what needs to connect to what. Choose the scenario that matches your use case:

<LinkTitleCard title="Device to network" href="/cloudflare-one/setup/replace-vpn/device-to-network/" icon="laptop"

Connect remote users to internal applications and services through a secure
connection. Best for remote access to private networks.

<LinkTitleCard title="Device to device" href="/cloudflare-one/setup/replace-vpn/device-to-device/" icon="laptop"

Create secure, direct connections between two or more devices through
Cloudflare's network using Mesh IPs. Best for device-to-device communication.

<LinkTitleCard title="Network to network" href="/cloudflare-one/setup/replace-vpn/network-to-network/" icon="seti:db"

Connect two or more private networks bidirectionally through Cloudflare. Best
for linking offices, data centers, or cloud environments.

:::note

For in-depth guidance on policy design and device posture checks, refer to the Replace your VPN learning path. :::