---
title: Configuring network infrastructure
description: To provide access to servers and databases in your cloud environment, you might need to configure network infrastructure.
component: privilege
page_id: privilege:configuration:network-infrastructure
canonical_url: https://docs.pingidentity.com/privilege/configuration/network-infrastructure.html
revdate: May 4, 2026
---

# Configuring network infrastructure

To provide secure access to servers and databases in your cloud environment, you might need to configure a combination of the following components:

* [Gateways](network-infrastructure/gateways.html)

  Gateways are the primary entry points for accessing resources on a private network. They act as a secure proxy, allowing PingOne Privilege to manage and audit access to your internal systems.

* [Private Relays](network-infrastructure/private-relays.html)

  Private relays are used in networks that do not allow inbound connections. They establish an outbound connection to a gateway, creating a secure tunnel for traffic without requiring you to open firewall ports.

* [Target Relays](network-infrastructure/target-relays.html)

  Target relays are deployed directly on a server that cannot accept inbound connections, such as a server behind a strict firewall. They provide a "last-mile" connection from a private relay or gateway to the target resource.

Together, these components create a flexible and secure network infrastructure that allows PingOne Privilege to manage access to any resource, regardless of its location or network configuration.