Configuring Cloud Routing
This guide covers two common Cloud Routing scenarios: connecting a remote network to NetActuate via a single Cloud Router, and setting up a Magic Mesh between multiple locations.
Connecting a Remote Network via WireGuard
This scenario connects a remote server (at another provider, or a home/office network) to NetActuate VMs over an encrypted WireGuard tunnel.
Step 1: Create a Cloud Router
- Navigate to Networking → Cloud Routing → Cloud Routers.
- Click Create and select a plan size.
- Wait for the Cloud Router to provision.
Step 2: Add a WireGuard Interface
- In the Cloud Router, go to Interfaces.
- Add a new WireGuard interface.
- Configure the interface IP address and WireGuard port.
- Note the Cloud Router's public IP and the WireGuard port — you will need these for the remote side.
Step 3: Configure the Remote Device
On the remote server or device, configure a WireGuard peer pointing to the Cloud Router's public IP and port. Set the allowed IPs to include the NetActuate VM subnet.
Step 4: Add Static Routes
- In the Cloud Router, go to Routing → Static Routes.
- Add the remote network's subnet with the next hop set to the WireGuard interface (or the peer's tunnel IP).
On the remote device, add a static route to the NetActuate VM subnet pointing through the WireGuard tunnel.
Step 5: Verify Connectivity
Ping or traceroute between the remote device and a NetActuate VM to confirm the tunnel is working.
Setting Up a Magic Mesh
This scenario connects multiple locations automatically using Magic Mesh.
Step 1: Create Cloud Routers
Create at least two Cloud Routers in different locations following the steps above.
Step 2: Configure Local Interfaces and Routes
On each Cloud Router, configure the interfaces and static routes for their local networks. For example:
- A Cloud Router connected to an AWS VPC via an Ethernet/VLAN interface
- A Cloud Router connected to NetActuate VMs via a WireGuard interface
Step 3: Create a Magic Mesh
- Navigate to Networking → Cloud Routing → Magic Mesh.
- Click Create to create a new mesh.
Step 4: Add Routers to the Mesh
Add both Cloud Routers to the mesh. Magic Mesh automatically:
- Establishes encrypted GRE-in-WireGuard tunnels between all routers
- Configures iBGP with route reflectors
- Exchanges all routes between routers
No further BGP or tunnel configuration is needed — routes configured on each Cloud Router are shared across the entire mesh.
Step 5: Verify
Each location should now be able to reach the others. Check the Cloud Router's routing table to confirm routes from other mesh members are present.
Next Steps
- Cloud Routers — full reference for interfaces, routing, BGP, and NAT
- Magic Mesh — how the automated mesh works
- Cloud Overview — public, private, and hybrid cloud modes
Need Help?
Contact support@netactuate.com or open a support ticket from the portal.