A server hosting system comprising: a plurality of managed servers; a first secure communication appliance configured to connect to a tenant appliance at a first tenant using a first IPsec tunnel, the first secure communication appliance further configured to route data between a first managed server of the plurality of managed servers and the tenant appliance at the first tenant, the first managed server associated with the first tenant; a second secure communication appliance configured to connect to a tenant appliance at a second tenant using a second IPsec tunnel, the second secure communication appliance further configured to route data between a second managed server of the plurality of managed servers and the tenant appliance at the second tenant, the second managed server associated with the second tenant; and a switch communicatively connected to the first and second secure communication appliances (204a, 204b); wherein the first secure communication appliance is configured to apply a first tag to data received from the tenant appliance at the first tenant identifying the first tenant, and wherein the second secure communication appliance is configured to apply a second tag to data received from the tenant appliance at the second tenant identifying the second tenant; wherein the second secure communication appliance does not communicate with the tenant appliance at the first tenant, and the first secure communication appliance does not communicate with the tenant appliance at the second tenant; and wherein the switch is configured to route data from the first secure communication appliance to the first managed server based at least in part on the first tag identifying the first tenant and to route data from the second secure communication appliance to the second managed server based at least in part on the second tag identifying the second tenant. a plurality of managed servers; a first secure communication appliance configured to connect to a tenant appliance at a first tenant using a first IPsec tunnel, the first secure communication appliance further configured to route data between a first managed server of the plurality of managed servers and the tenant appliance at the first tenant, the first managed server associated with the first tenant; a second secure communication appliance configured to connect to a tenant appliance at a second tenant using a second IPsec tunnel, the second secure communication appliance further configured to route data between a second managed server of the plurality of managed servers and the tenant appliance at the second tenant, the second managed server associated with the second tenant; and a switch communicatively connected to the first and second secure communication appliances (204a, 204b); wherein the first secure communication appliance is configured to apply a first tag to data received from the tenant appliance at the first tenant identifying the first tenant, and wherein the second secure communication appliance is configured to apply a second tag to data received from the tenant appliance at the second tenant identifying the second tenant; wherein the second secure communication appliance does not communicate with the tenant appliance at the first tenant, and the first secure communication appliance does not communicate with the tenant appliance at the second tenant; and wherein the switch is configured to route data from the first secure communication appliance to the first managed server based at least in part on the first tag identifying the first tenant and to route data from the second secure communication appliance to the second managed server based at least in part on the second tag identifying the second tenant.