Cloud instance support VPNs or SSH tunnels

Hello,

One of my client use n8n to connect some corporate applications with external providers. They operate in the banking and mobile money area, and there is a strong need for connection through VPNs or SSH tunnels.

We saw from previous messages that this is achievable through a local installation of n8n on our local cloud environment, but do you have any plan to provide this feature as part of the app.n8n.cloud environment ?

Hey @Yoann

It would depend on what they are trying to access through a tunnel, we are looking at adding ssh tunnel support to some of the database nodes which will help with part of this.

Having implemented projects for various banks and finance companies over the years I suspect a self hosted option may be better to help with compliance so it may be worth looking into that.

1 Like

Hi Jon,

Thanks for your answer. I’m not an expert on VPN/SSH connections, so my needs may not be detailed enough, but so far our workflow has a webhook as trigger, where we listen to the partner event, and then we process HTTP Request to our internal system. So we’re mainly looking to access the webhook through a VPN tunnel (rather than from the public https://mydomain.app.n8n.cloud/ address)

Hey @Yoann,

So for that you will want to take the self hosted approach as you will probably need a private network as well if the webhook isn’t meant to be public at all.

1 Like

Thank you for your smart reply. I think I will have to go for that in the short term. But to reformulate my question, as we are in the “feature request” forum :wink: would there be any plans to provide private webhooks (or control per webhook which can be accessed to restricted proviers/adress/IP range) for the cloud-based version of n8n ?

1 Like

I have not seen any plans for that but the clarification is very useful :slightly_smiling_face:

1 Like

For banking/fintech workflows requiring VPN connections, self-hosted n8n is definitely the way to go currently. Cloud versions typically don’t support custom fastvpn configs for security isolation reasons. I’ve used FastVPN for Mac with similar corporate integrations - setup was straightforward and worked okay for basic API calls, but experienced random disconnects during critical workflows which is unacceptable in banking. Their enterprise support was surprisingly unhelpful too. Ended up implementing dedicated site-to-site VPN tunnels with our self-hosted instance instead for reliability.