Cloudscale Logo

News

Back
2025
August
19
2025

Guest Article: Deploying a SCION AS in the Cloud

Recently, our team at ETH Zurich received exciting news about SCION's expansion into the cloud. In a joint effort, cloudscale and Cyberlink now offer native SCION connectivity to the production network for all customers. This marks a major milestone: Now, anyone can take advantage of SCION's advanced networking features directly from their servers at cloudscale, without being part of a larger consortium.

By ETH Network Security

The SCION production network has seen significant growth in recent years. Notable examples of its deployment include the Secure Swiss Finance Network (SSFN) and the Secure Swiss Health Network (SSHN), both of which support critical infrastructure and are tailored to members of their respective ecosystems.

Here, we will walk you through the steps we followed to deploy a SCION Autonomous System (AS) in the cloud supported by Cyberlink and cloudscale – exactly as any customer could.

The first step is to get in touch with cloudscale and Cyberlink, who provided us with detailed information about their SCION offering. As of the time of writing, they support two types of SCION connectivity.

Non-managed SCION access

This option provides a direct SCION link to Cyberlink's SCION Border Router at cloudscale within the requested SCION ISolation Domain (ISD). Customers choosing this approach are responsible for deploying and managing their own SCION AS services within their Virtual Data Center (VDC).

Read the full walkthrough for non-managed SCION access at www.scion.org.

Managed SCION access

In this setup, Cyberlink handles the deployment and management of SCION services on behalf of the customer, offering a more hands-off experience. The managed access makes use of the Anapaya EDGE appliance.

Read the full walkthrough for managed SCION access at www.scion.org.

Back to overview