The Hybrid Cloud Gateway maintains a secure channel between vSphere and a vCloud Air.

Hybrid Cloud Manager uses strong encryption to bootstrap a site-to-site connection to vCloud Air. The secure channel between vSphere and vCloud Air achieves multi-tenancy for vSphere protocols that are not tenant-aware, and to prevent networking "middle mile" security problems.

The Cloud Gateway also incorporates vSphere replication technology to perform bidirectional migration.