Telaron is an eBPF-native multi-cloud networking fabric. A SaaS control plane carries configuration metadata and telemetry — never your packet content — and orchestrates an edge tier of gateways deployed into your own central VPCs. Your workload spokes attach through native CSP constructs and stay completely untouched.
eBPF-native packet processing at line rate.
The open-source gateway data plane runs encrypted multi-cloud transit at ~2.5 Gbps per core. XDP and TC hooks keep the kernel networking stack intact while delivering roughly 8.8× the throughput of socket-based processing — no DPDK NIC takeover, no fragile userspace packet path.
Explore data planeOrchestration that never sees your packets.
The SaaS control plane (app.telaron.io) handles configuration metadata and telemetry only — it physically cannot see customer packet content. It reconciles intent into the edge tier across every cloud you run, with GitOps semantics and per-tenant isolation enforced at the database.
Explore control planeThe edge that carries the fabric — in your VPCs, not your apps.
Gateways form the edge tier: a Local Gateway (LGW) per spoke group and a Transit Gateway (TXGW) for cross-cloud transit, deployed into your own central VPCs and orchestrated by the SaaS. Workload spokes attach via native CSP constructs and never run an agent, VM, or sidecar.
Explore gatewayThe outcomes above aren't adjectives — they're properties of how Telaron is built. If you want the receipts, here they are.
Multi-tunnel WireGuard with ChaCha20-Poly1305 and CPU affinity. Legacy IPSec-based MCNF fabrics typically top out around 1.25 Gbps per core on the same hardware. Same infrastructure, double the encrypted throughput — and none of the ESP MTU headaches.
Your workload spoke VPCs stay untouched — not an agent, not a VM, not a sidecar. The fabric runs in a separate SaaS-orchestrated edge tier (LGW per spoke group, TXGW for cross-cloud transit) deployed into your own central VPCs. Workload spokes attach via native CSP constructs — GWLB endpoints, VPC peering, ILB next-hop.
XDP and TC hooks deliver ~8.8× throughput over socket-based processing while keeping the kernel networking stack intact. No DPDK NIC takeover, no fragile userspace packet paths.
Infrastructure-grade, not pod-grade. VPC and subnet level with bare-metal-compatible gateways. Your workloads run however they run — VMs, containers, serverless, bare metal.
AWS: GWLBe + VPC peering. GCP: VPC peering with ILB next-hop via custom route export. Azure: Gateway LB chaining + VNet peering. Telaron complements the CSPs where it makes sense, and replaces their cross-charging transit layers (AWS TGW, Azure Virtual WAN, GCP NCC) where it makes sense — no per-GB transit tax.
First-class Terraform provider. Pulumi SDK (Go, TypeScript, Python). Full REST API for anything in between. GitOps reconciliation on every change. No ClickOps traps, no console-only configuration, no day-two manual-tweak debt.
The SaaS control plane handles configuration metadata and telemetry only — never customer packet content. An architectural property, not a policy promise. Documentable for compliance.
Eliminate per-spoke gateway VM compute, CSP transit data-processing fees (AWS TGW, Azure Virtual WAN, GCP NCC), and six-figure enterprise-networking licensing. Community tier is free. Pro and Enterprise tiers priced for the mid-market.
Spin up the Community tier free, or talk to us about Pro and Enterprise. No agents in your workloads, no six-figure contract.
