Abstract: In some examples, a load balancer establishes respective secure connections between the load balancer and a plurality of destination servers in a trust network, and performs load balancing of encrypted virtual private network (VPN) traffic across the destination servers. The load balancer receives an encrypted data packet from a client device, the encrypted data packet including a VPN message header having a destination identification field relating to identifying a destination server in the trust network. The load balancer determines whether a selected destination server in the trust network is identified based on a value of the destination identification field in the VPN message header, the selected destination server being one of the plurality of destination servers. Based on determining that the selected destination server is identified based on the value of the destination identification field in the VPN header, the load balancer sends the encrypted data packet to the selected destination server.

Abstract: In some examples, a proxy system establishes a client-side secure network tunnel between the proxy system and a client device, and establishes a plurality of server-side secure connections between the proxy system and respective servers of a trust network. The proxy system load balances a plurality of connections of the client device in the client-side secure network tunnel across the servers of the trust network through respective server-side secure connections of the plurality of server-side secure connections.