diff --git a/xos/vsg.xproto b/xos/vsg.xproto
new file mode 100644
index 0000000..3ecf056
--- /dev/null
+++ b/xos/vsg.xproto
@@ -0,0 +1,17 @@
+option name = "vsg";
+option app_label = "vsg";
+option verbose_name = "vSG Service";
+option kind = "vCPE";
+
+message VSGService (Service){
+     optional string url_filter_kind = 1 [choices = "((None, 'None'), ('safebrowsing', 'Safe Browsing'), ('answerx', 'AnswerX'))", max_length = 30, content_type = "stripped", blank = True, null = True, db_index = False];
+     required string dns_servers = 2 [default = "8.8.8.8", max_length = 255, content_type = "stripped", blank = False, null = False, db_index = False];
+     optional string node_label = 3 [db_index = False, max_length = 30, null = True, content_type = "stripped", blank = True];
+     required string docker_image_name = 4 [default = "docker.io/xosproject/vsg", max_length = 255, content_type = "stripped", blank = False, null = False, db_index = False];
+     required bool docker_insecure_registry = 5 [default = False, null = False, db_index = False, blank = True];
+}
+
+
+message VSGTenant (TenantWithContainer){
+     optional string last_ansible_hash = 1 [db_index = False, max_length = 128, null = True, content_type = "stripped", blank = True];
+}