A Private Wireless Gateway (PWG) routes all SIM traffic through your own private network. SIMs connected via a PWG sit inside your private IP space — not on the public internet.
Why PWG
- Security — SIMs are not directly exposed to the internet
- Control — route traffic through your own firewall or DLP platform
- Direct access — devices are addressable on your corporate network like any other host
Architecture
PWGs connect to a VRF-defined network on Telnyx’s MPLS backbone. Virtual Cross Connects (VXC) or WireGuard interfaces (Cloud VPNs) bridge this to your corporate network. All interfaces on the same VRF can see each other.
API
| Action | Endpoint |
|---|
| List PWGs | GET /private_wireless_gateways |
| Create PWG | POST /private_wireless_gateways |
| Get PWG | GET /private_wireless_gateways/{id} |
| Delete PWG | DELETE /private_wireless_gateways/{id} |
APN-based IP Assignment
| APN | IP Assignment |
|---|
data.net | Static — same IP across sessions |
data00.telnyx | Dynamic — new IP each session |
To use a static IP, your device must connect using the data.net APN. Devices on data00.telnyx get dynamic IPs.
Limitations
- Region — PWGs are currently only available in Ashburn, VA. More regions coming.
- IP range — Default
100.64.199.0/24 (254 concurrent SIMs). Custom ranges coming.
- Internet access — PWGs have no internet access by default. Contact support to open your VRF to the internet.
Setup
See Private Gateway Setup for step-by-step instructions. 
