Hello @randomrabbit ,
the gateway device offering is based on the transparent gateway solution, part of the Azure IoT Edge runtime functionality.
Each child has its own credentials. Messages are flowing through the IoT Edge device routing system.
To setup a gateway is documented here. Notice this documentation refers to the IoT Hub but this is the same technology used.
I did something similar in the past. This blog post shows how I set up the transparent gateway.