# Egress

## Egress Introduction

Egress controls where outbound internet traffic leaves the Replica platform. The egress location strongly affects the apparent origin and signature of your activity.

This matters because many websites classify, filter, or block visitors based on source network details.

### Egress Types

Replica may be configured with several types of Egress options, including but not limited to:

* Commercial VPN provider Egress
* Cloud VPN Egress
* Bring-your-own VPN Egress
* White-line Egress

{% hint style="info" %}
Each option has tradeoffs. Contact your Replica representative if you need help choosing the right one.
{% endhint %}

### Egress Data Policy

Replica egress protocols create encrypted channels between your platform and the egress servers. Replica provisions egress resources on isolated infrastructure.

Replica does not log or retain egress traffic data in transit.

### What impact does Egress have on my attribution/signature?

Observers can identify traffic sources in several ways. The most common method is an IP address lookup against commercial or public IP databases.

These databases often include location, provider, organization, and whether an IP belongs to a VPN or cloud platform.

Websites rarely disclose their exact filtering logic. If a site blocks traffic based on IP reputation or geography, using a different egress may help.

Egress also affects other parts of your activity signature. By default, Replica aligns environment locale settings with the languages used in the selected egress location.

### Bring-your-own VPN Egress

You can bring your own VPN provider and use it as an egress location in Replica. Replica supports WireGuard and OpenVPN.

{% hint style="danger" %}
Your VPN provider may limit how many users can share one connection. Make sure your Replica configuration stays within that provider's terms of service.
{% endhint %}

## Create Egress

To create a new egress point, gather valid WireGuard or OpenVPN configuration details from your provider. If both are available, WireGuard is usually the better choice for performance.

### WireGuard

{% stepper %}
{% step %}

#### Access Egress

Open **Egress** from the **Administration** menu. The page shows existing egress locations as cards.

Click the **Create Wireguard** button to open the New Egress Details form.
{% endstep %}

{% step %}

#### Router settings

Fill out the following fields:

* **Router Name**: Choose a name that will be displayed to users to select this Egress.
* **Router Type**: Select `Egress`.
* **Router Status**: Select `Active` to enable this egress.
* **Disable Egress Verification**: Enable this option to bypass Egress verification checks.
* **Hot Swap**: Enable this option to allow a running environment to change routers.
  {% endstep %}

{% step %}

#### Provider settings

Click **Next** to open the provider page, then fill out:

* **Provider Name**: Enter the name of your Egress provider.
* **Provider Type**: Select the provider type. `VPN` is the most common choice.
  {% endstep %}

{% step %}

#### Configuration

Click **Next** to open the configuration page.

* Paste the contents of your Wireguard configuration file into the **Configuration** field.
  {% endstep %}

{% step %}

#### Create

Click **Next** to create the egress. The new egress appears in the card list.

Assign the egress to a user or group before they can use it.
{% endstep %}
{% endstepper %}

### OpenVPN

{% stepper %}
{% step %}

#### Access Egress

Open **Egress** from the **Administration** menu. The page shows existing egress locations as cards.

Click the **Create OpenVPN** button to open the New Egress Details form.
{% endstep %}

{% step %}

#### Router settings

Fill out the following fields:

* **Router Name**: Choose a name that will be displayed to users to select this Egress.
* **Router Type**: Select `Egress`.
* **Router Status**: Select `Active` to enable this egress.
* **Disable Egress Verification**: Enable this option to bypass Egress verification checks.
* **Hot Swap**: Enable this option to allow a running environment to change routers.
  {% endstep %}

{% step %}

#### Provider settings

Click **Next** to open the provider page, then fill out:

* **Provider Name**: Enter the name of your Egress provider.
* **Provider Type**: Select the provider type. `VPN` is the most common choice.
  {% endstep %}

{% step %}

#### Certificates & Configuration

Click **Next** to open the configuration page, then fill out:

* **CA Certificate**: Paste the contents of your CA certificate here, if provided by your VPN provider.
* **Key Certificate**: Paste the contents of your private Key Certificate here, if provided by your VPN provider.
* **Key**: Paste the contents of your private key here, if provided by your VPN provider.
* **Configuration**: Paste the contents of your OpenVPN configuration file here. This is a mandatory field.
  {% endstep %}

{% step %}

#### Locale Configuration

Click **Next** to open the locale configuration page. All fields on this page are optional.
{% endstep %}

{% step %}

#### Create

Click **Submit** to create the egress. The new egress appears in the card list.

Assign the egress to a user or group before they can use it.
{% endstep %}
{% endstepper %}

## Edit Egress

Each egress card includes action icons in the top-right corner. Hover over an icon to see its action.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.replicacyber.com/admin-guide/egress.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.