> ## Documentation Index
> Fetch the complete documentation index at: https://developers.telnyx.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tunnel

> A Tunnel connects a Network to the user's site without any modification to its router or firewall.

> [!WARNING]
>
> Tunnel is in beta. [Beta Limitations](https://developers.telnyx.com/docs/network/tunnel/beta-limitations.md) lists what it does not do yet.

A Tunnel connects a [*Network*](https://developers.telnyx.com/docs/network/overview.md) to the user's site without any modification to its router or firewall. A tunnel process runs on a host within the user's network and opens an outbound connection to Telnyx.

The diagram zooms into the Tunnel lane of the *Network* diagram. An
application's binding places its traffic on the *Network*. Agents will place
theirs there through an Agent Gateway, which is coming soon. A route sends
`10.20.0.0/16` to the tunnel. A tunnel host within the user's network opens an
outbound TLS connection to Telnyx and dials the hosts behind
the tunnel, such as `10.20.3.7` and `10.20.8.9`. Flows start on the
*Network*. Hosts behind the tunnel see each connection from the tunnel host,
and nothing behind the tunnel starts a flow toward the *Network*.

A tunnel carries traffic to the services behind it in three ways:

| Feature | Client | Reaches | Status |
| - | - | - | - |
| [Route](https://developers.telnyx.com/docs/network/tunnel/features/routes.md) | Functions on the *Network* | Every address in a CIDR behind the tunnel | Beta |
| [Private Service](https://developers.telnyx.com/docs/network/tunnel/features/private-services.md) | Clients on the *Network* | One service behind the tunnel, under a private hostname | Preview |
| [Public Hostname](https://developers.telnyx.com/docs/network/tunnel/features/public-hostnames.md) | Anyone on the internet | One HTTP or HTTPS service behind the tunnel, at a hostname the user owns | Preview |