Retire your syslog collectors.
Branch sites and network gear send encrypted logs straight to CloudWatch and S3. No collector servers to patch.
Use cases
Find the use case that matches what you're building.
Every example is a deployable starting point in your own AWS account. Pick the situation closest to yours.
- No code – configuration only
- Some code – you write a handler
- Build your own – a starting point for your app
Retire a server I run today
You operate UDP infrastructure and would rather not.
Enforce DNS policy wherever your users are.
Resolve, block, redirect and analyze queries with regional processing and globally replicated policy. Add DNS-over-HTTPS where clients need it.
Replace your RADIUS servers.
Authenticate and account for network access, keep session records, and flag unusual activity with AWS-native services.
Add encryption to services you can't change.
Put WireGuard in front of UDP, NTP, ICMP and other remote services without making WireGuard your application architecture.
Connect devices to my cloud
You're building a product with sensors, drones or embedded clients.
Let your devices talk to your cloud over CoAP.
Keep discovery, Observe, block transfers and asynchronous responses while your code handles structured events.
Get drone telemetry into workflows in order, with no duplicates.
Move MAVLink packets into serverless workflows while preserving order and deduplicating delivery.
Collect sensor data from constrained devices, securely.
Send lightweight readings and synchronize time from small devices over an encrypted serverless path.
Moving away from MQTT was challenging and the risk of going all-in with a rewrite unacceptable.
B.R., CTO, IoT Systems Integration · Read more customer stories →
Bridge UDP into my apps
You have UDP traffic and want it in the stack you already run.
Turn packets into events your apps already use.
Land UDP packets on the AWS event backbone and let existing consumers take it from there.
Reach your REST APIs or Supabase from clients that can't speak HTTP.
Bridge constrained and remote UDP clients into web backends without running a protocol server.
Use managed cache from clients that can't hold connections.
A lightweight UDP path to managed cache operations, for when connection-heavy protocols are a poor fit.
Stand up a request/response endpoint in minutes.
Deploy, scale to zero, and experiment with batching and regional routing under your own traffic pattern.
See what's on the wire.
Fan out UDP and WireGuard traffic to your browser and inspect CoAP, DHCP, SSDP, syslog, RADIUS and more, without changing the primary path.
Don't see your situation?
Tell us what you run today and what your clients speak. We'll point you to the closest starting point.