Dynamic VPN
Tunnels built on demand between changing endpoints.
How widely is it used?
Common in production todayMostly seen inside SD-WAN and DMVPN deployments rather than configured by hand.
How it works
A control plane tracks which endpoints exist and where they currently are, then signals peers to build a tunnel only when traffic actually needs one, tearing it down when idle.
Connects
Multiple changing endpoints
Protocols
DMVPN, SD-WAN, Mesh overlays
Typical users
Large networks with churn, Mobile fleets
Main use case
Avoiding hand-configured tunnels in a network that keeps changing.
Advantages
- Little manual tunnel configuration
- Adapts to endpoints behind changing IPs
Limitations
- The control plane becomes critical infrastructure
- Harder to reason about and debug
Related VPN types
DMVPN
Spokes discover each other and build direct tunnels on demand.
Generate configSD-WAN
Software picks the path; encrypted overlays ride on top.
Generate configPeer-to-Peer / Mesh VPN
Devices connect directly, coordinated by a small control plane.
Generate config