---
title: Configuring gateways for Human Privilege
description: Gateways are entry points for accessing resources on a private network, enabling secure sessions and intelligent routing.
component: privilege
page_id: privilege:human-privilege:configuration/gateways/index
canonical_url: https://docs.pingidentity.com/privilege/human-privilege/configuration/gateways/index.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: May 4, 2026
page_aliases: ["configuration:network-infrastructure/gateways.adoc", "human-privilege:configuration/gateways/gateways.adoc", "configuration:network-infrastructure.adoc"]
---

# Configuring gateways for Human Privilege

Gateways are fundamental components that act as entry points for accessing resources on a private network. The Endpoint Controller intelligently determines the optimal gateway path to connect a user with a resource, ensuring efficient and secure access.

Human Privilege supports different types of gateways depending on your environment. As an administrator, you can configure the following:

* [Private Proxies](private-proxies.html)

  Choose this option to deploy a gateway on your own infrastructure, such as Google Cloud Platform (GCP), Microsoft Azure, or your own on-premise data centers.

* [Relays](relays.html)

  Relays are used in networks that don't allow inbound connections. They establish an outbound connection to a gateway, creating a secure tunnel for traffic without requiring you to open firewall ports.

Together, these components create a flexible and secure network infrastructure that allows Human Privilege to manage access to any resource, regardless of its location or network configuration.

|   |                                                                                        |
| - | -------------------------------------------------------------------------------------- |
|   | To ensure high availability, we recommend deploying at least two gateways per network. |