# Guides

How to deploy, configure, and manage Twingate in a wide range of contexts.

[Twingate currently offers DNS encryption over DNS-over-HTTPS (DoH) and DNS filtering.](/content/docs/internet-security/index.html)

[Secure access to your SaaS applications and private services via IP address-based access or whitelisting.](/content/docs/saas-app-gating/index.html)

[Get started by installing the Twingate Client on all mobile and desktop platforms.](/content/docs/clients/index.html)

[Deploy, manage, and secure your Resources in your Kubernetes cluster.](/content/docs/k8s/index.html)

[Define flexible Security Policies for your Network and individual Resources on your Network.](/content/docs/security-policies/index.html)

[View and export audit log activity for troubleshooting or investigation.](/content/docs/siem-guide/index.html)

[Recommendations on how to set up and organize Remote Networks.](/content/docs/remote-network-best-practices/index.html)

[Tips on setting up Connectors to optimize routing and performance.](/content/docs/connector-best-practices/index.html)

## Deploying Twingate

### Cloud Infrastructure

Quickly deploy Twingate using our guides for major cloud providers.

- [**AWS EC2**](/content/docs/aws#ec2-deployment/index.html)
- [**GCP Compute**](/content/docs/gcp#compute-engine-deployment/index.html)
- [**Azure Compute**](/content/docs/azure#azure-virtual-machine-deployment/index.html)
- [**Kubernetes (K8s)**](/content/docs/k8s-helm-chart/index.html)
- [**DigitalOcean**](/content/docs/digitalocean-getting-started/index.html)

### On-premises Networks

Deploy Twingate directly onto your on-premises network using our setup guides.

- [**Docker Compose**](/content/docs/deploy-connector-with-docker-compose/index.html)
- [**Ubiquiti**](/content/docs/deploy-connector-on-ubiquiti/index.html)
- [**Firewalla Box**](/content/docs/deploy-connector-on-firewalla/index.html)
- [**Synology**](/content/docs/how-to-set-up-twingate-on-a-synology-nas-dsm-7/index.html)
- [**QNAP NAS**](/content/docs/nas-qnap-install/index.html)
- [**TrueNAS SCALE**](/content/docs/truenas-container-deployment/index.html)

### Automating Deployment & Management (IaC)

Automate deploying and managing Twingate using infrastructure as code (IaC) tools like Terraform and Pulumi.

- [**Terraform**](/content/docs/terraform-getting-started/index.html)
- [**Pulumi**](/content/docs/pulumi-getting-started/index.html)

### Homelabs

Deploy Twingate in your homelab with off the shelf add-ons.

- [**Home Assistant**](/content/docs/home-assistant-getting-started/index.html)
- [**Proxmox**](/content/docs/proxmox-getting-started/index.html)
- [**Unraid**](/content/docs/unraid-getting-started/index.html)
- [**ZimaOS**](/content/docs/zimaos-getting-started/index.html)
- [**CasaOS**](/content/docs/casaos-getting-started/index.html)

## Client Deployment

Scale deploying Twingate to your organization using our MDM configuration guides.

- [**Jamf**](/content/docs/jamf-mdm/index.html)
- [**Iru**](/content/docs/iru-mdm/index.html)
- [**Omnissa Workspace ONE**](/content/docs/omnissa-workspace-one-mdm/index.html)
- [**Microsoft Intune & Endpoint Manager**](/content/docs/deploy-twingate-client-with-microsoft-endpoint-manager/index.html)

## Service Compatibility

Configure Twingate to work with complementary services that lack native compatibility.

- [**Active Directory**](/content/docs/using-active-directory-with-twingate/index.html)
- [**Cisco Umbrella**](/content/docs/configuring-anyconnect-with-umbrella/index.html)
- [**Cloudflare DNS filtering**](/content/docs/doh-cloudflare/index.html)
- [**Netskope DLP**](/content/docs/netskope-dlp-config/index.html)
- [**Zscaler**](/content/docs/configuring-zscaler-with-twingate/index.html)

## Database Access

Protect access to your databases with Twingate.

- [**MongoDB**](/content/docs/database-access-mongodb/index.html)
- [**AWS**](/content/docs/database-access-aws/index.html)
- [**GCP**](/content/docs/database-access-gcp/index.html)
- [**Azure**](/content/docs/database-access-azure/index.html)
- [**Oracle**](/content/docs/database-access-oracle/index.html)
- [**Snowflake**](/content/docs/database-access-snowflake/index.html)
- [**Redis**](/content/docs/database-access-redis/index.html)

## Deploying Twingate for Specific Use Cases

- [**AI and LLM Access**](/content/docs/llms/index.html)
- [**Securing OpenClaw Access with Twingate**](/content/docs/openclaw/index.html)
- [**Access Twingate Resources from GitHub Codespaces**](/content/docs/github-codespaces/index.html)
- [**Remote Game Streaming**](/content/docs/game-streaming-remote/index.html)
- [**Policy Configuration**](/content/docs/security-policy-guides/index.html)
- [**Cloak a Bastion Server**](/content/docs/cloak-your-bastion-server/index.html)
- [**Cloak strongDM with Twingate**](/content/docs/strongdm-cloaking/index.html)
- [**Create a Twingate Headless Client Gateway for IoT Environments**](/content/docs/headless-iot-gateway/index.html)
- [**Manage Access for Vendors and Contractors**](/content/docs/vendor-and-contractor-access-management/index.html)
- [**Protect Access to Elasticsearch and Kibana**](/content/docs/protect-access-to-elasticsearch-and-kibana/index.html)
- [**Protect Legacy Technologies with Multi-Factor Authentication**](/content/docs/protect-legacy-apps-with-multi-factor-authentication/index.html)
- [**Protect Your Home Lab**](/content/docs/homelab-step-by-step/index.html)
- [**Replace the AWS VPN**](/content/docs/aws-vpn-replacement/index.html)
- [**Remotely Access a Coworker’s Development Server**](/content/docs/remotely-access-a-coworkers-development-server/index.html)
- [**Secure CI/CD Pipelines with Twingate**](/content/docs/cicd-pipelines-with-twingate/index.html)
- [**Secure Site-to-Site Connections with Twingate**](/content/docs/site-2-site/index.html)
- [**Use Twingate with AWS Workspaces**](/content/docs/aws-workspaces/index.html)
- [**Self Hosted VPN with Twingate Exit Networks**](/content/docs/diy-vpn-setup-guide/index.html)

### Configuring Service Integrations

- [**How to Ingest Connector Logs into a SIEM**](/content/docs/siem-guide/index.html)

### Setting Up SaaS App Gating

- [**Getting Started with using Twingate for SaaS App Gating**](/content/docs/saas-app-gating/index.html)
- [**Best Practices for SaaS App Gating**](/content/docs/saas-app-gating-best-practices/index.html)
- [**Configure SaaS App Gating with Google Workspace**](/content/docs/saas-app-gating-with-google-workspace/index.html)
- [**Configure SaaS App Gating with JumpCloud**](/content/docs/saas-app-gating-with-jumpcloud/index.html)
- [**Configure SaaS App Gating with Microsoft Entra ID**](/content/docs/saas-app-gating-with-entra-id/index.html)
- [**Configure SaaS App Gating with Okta**](/content/docs/saas-app-gating-with-okta/index.html)
- [**Configure SaaS App Gating with OneLogin**](/content/docs/saas-app-gating-with-onelogin/index.html)
- [**SaaS App Gate with App Native IP Filtering and AWS Exit Nodes**](/content/docs/configuring-aws-exit-nodes/index.html)
- [**SaaS App Gate AWS CloudFront**](/content/docs/aws-cloudfront/index.html)
- [**SaaS App Gate Office 365 with Microsoft Entra ID**](/content/docs/entra-id-app-gating-office-365/index.html)

### Kubernetes

- [**Route Traffic from Kubernetes**](/content/docs/k8s-cluster-access/index.html)
- [**Private Resources in Kubernetes**](/content/docs/k8s-private-services/index.html)
- [**Publicly Exposed Resources in Kubernetes**](/content/docs/k8s-public-services/index.html)
- [**Manage Kubernetes using kubectl**](/content/docs/k8s-kubectl/index.html)

## Best Practices (Architecture & Planning)

- [**AWS Reference Network Architecture**](/content/docs/aws-how-to-setup-subnets-for-secure-access/index.html)
- [**Best Practices for Configuring Private DNS with Twingate**](/content/docs/private-dns-best-practices/index.html)
- [**Best Practices for Connector Placement**](/content/docs/connector-placement-best-practices/index.html)
- [**Best Practices for Designing an Internal Network with Local Peer-to-Peer Connections**](/content/docs/local-peer-to-peer-best-practices/index.html)
- [**Best Practices for Overlapping IP Addresses**](/content/docs/ip-overlap/index.html)
- [**Best Practices for SaaS App Gating**](/content/docs/saas-app-gating-best-practices/index.html)
- [**Best Practices for Securing Access to Non-production Environments**](/content/docs/access-control-for-staging-environments/index.html)
- [**Best Practices for Security Policies**](/content/docs/security-policies-best-practices/index.html)
- [**Best Practices for Whitelisting Traffic to Public Resources**](/content/docs/whitelisting-traffic-to-public-services/index.html)

## Technical Information & How Twingate Works

- [**How NAT Traversal Works**](/content/docs/how-nat-traversal-works/index.html)
- [**Troubleshooting Peer-to-peer Connections**](/content/docs/troubleshooting-p2p/index.html)
- [**How Encryption Works in Twingate**](/content/docs/how-encryption-works-in-twingate/index.html)
- [**Evaluating Twingate Performance**](/content/docs/twingate-performance/index.html)
- [**How the Connector Shutdown Process Works**](/content/docs/connector-shutdown-process/index.html)
- [**How Firewalls Work with Twingate**](/content/docs/firewalls-and-twingate/index.html)
- [**How Service Accounts Work**](/content/docs/service-accounts-guide/index.html)
- [**How Windows Start Before Logon Works**](/content/docs/windows-sbl/index.html)
- [**Monitoring Twingate Service Statuses & Maintenance Events**](/content/docs/maintenance-events-service-status-outages/index.html)
- [**Twingate Release Stages**](/content/docs/release-stages/index.html)