TunnelFleet
Use Case: Agencies

VPN infrastructure for every client, without starting from scratch

Agencies managing infrastructure for multiple clients need repeatable, reliable deployments. TunnelFleet makes it as fast to provision the tenth client's VPN server as it was to provision the first.

The Problem

The agency VPN problem

  • Every client setup is manual

    SSH into a new server, repeat the same WireGuard installation, key generation, and firewall setup for each client.

  • Client environments aren't isolated

    Managing WireGuard configs across multiple client servers using shared credentials or SSH keys is a security and audit risk.

  • Knowledge is in one person's head

    If the person who set up a client's VPN server leaves, reproducing the configuration requires reverse-engineering from the live server.

  • Inconsistent security baselines

    Manual setups lead to variation. Firewall rules, WireGuard versions, and sysctl settings differ between clients.

The Solution

Standardised, repeatable VPN deployment at agency scale

TunnelFleet gives you a consistent deployment pipeline for every client. The same cloud-init provisioning process runs for each server, ensuring every deployment has the same secure baseline.

Client servers run in the client's own cloud account (or a dedicated project in yours). TunnelFleet's dashboard gives you a centralised view across all environments, without requiring SSH access to any individual server.

  • Consistent provisioning for every client
  • No manual SSH sessions
  • Client infrastructure in client accounts
  • Dashboard access per team member
  • Reproducible — new team members can deploy without tribal knowledge

Agency workflow with TunnelFleet

  1. 1

    Connect the client's cloud account

    Add the client's DigitalOcean API token to TunnelFleet. Servers created will be billed directly to their account.

  2. 2

    Deploy in the client's region

    Choose the region closest to the client's team or data centre. TunnelFleet provisions the Droplet automatically.

  3. 3

    Hand over or retain management access

    Invite the client as a TunnelFleet user, or retain sole management access — depending on the engagement model.

Frequently Asked Questions

Provision client VPN servers in minutes, not hours

Repeatable, consistent, secure. The same process every time.