routing…
The multi-cloud networking field side by side — what each platform leads on, and where Telaron does something different. Several of these are companions to Telaron rather than alternatives to it, and the pages below say so.
| capability | Telaron | Aviatrix | Cisco MCF | Cisco MCD | Tailscale | Cilium Mesh | AWS Interconnect |
|---|---|---|---|---|---|---|---|
| Encryption & throughput | WireGuard ChaCha20, ~2.5 Gbps/core | IPSec ESP, ~1.25 Gbps/core | IPsec/ESP; throughput not published | IPSec (NGFW), per-core ceiling | WireGuard, peer-to-peer | WireGuard / IPSec, eBPF | MACsec L2, managed |
| Spoke compute | None in workload VPCs; edge tier in customer-owned central VPCs | Gateway VM per spoke | None — Cisco runs the vPoPs; Meraki MX is the stated entry | Gateway VMs per cloud | Agent on every device | DaemonSet on every K8s node | N/A — managed service |
| Control plane | SaaS (app.telaron.io) | Self-hosted Controller + CoPilot | Cloud Control SaaS, intent-based | Cisco Security Cloud Control | SaaS (Tailscale Inc.) or Headscale | Self-hosted Cilium Operator | AWS Console / API |
| Dynamic routing | iBGP/eBGP via FRR — you own the overlay | Proprietary orchestration | Intent-based; Cisco owns the routing overlay | Static / limited BGP | None — endpoint mesh | Limited BGP + eBPF L3/L4 | Automated BGP, limited control |
| Kubernetes required | No | No | No | No | No | Yes — mandatory | No |
| Open source | Gateway data plane (Apache 2.0), Terraform provider (MPL 2.0) | No | No | No | Client BSD, Headscale community | Yes (Apache 2.0) | API spec (Apache 2.0) |
| Data sovereignty | Config metadata only | Controller processes routing metadata | Routing overlay operated by Cisco | SaaS controller in Cisco cloud | Coordination server SaaS | Self-hosted only | Traffic on CSP backbones |
| Pricing model | Per-gateway tiered; Community free | $100k–$500k+/yr typical | Consumption-based; pricing not published | Gateway-hours subscription | $6–$18/user/month | ~$300k/yr (Isovalent); OSS free | Flat hourly by bandwidth |
comparison reflects publicly documented capabilities at time of writing · scroll horizontally for the full matrix
The mature incumbent — deep feature surface, enterprise operating model.
See the comparisonCisco-operated NaaS — managed simplicity, Cisco-controlled routing.
See the comparisonNGFW-centric multi-cloud security gateways.
See the comparisonEffortless WireGuard mesh — for devices and users.
See the comparisonPowerful eBPF networking — if you live in Kubernetes.
See the comparisonA managed underlay circuit — that Telaron runs on top of.
See the comparisonSpin up the Community tier free, or talk to us about Pro and Enterprise. No agents in your workloads, no six-figure contract.