Private Services

Preview. Not available yet.

A private service registers one destination behind a tunnel on a Network, under a hostname that resolves only on that Network. Clients on the Network reach that service and get no route to the subnet around it.

Workstation

telnyx-edge network service add acme-prod wiki --tunnel chicago-dc --service https://10.20.3.7:8443 --hostname wiki.corp.internal

The service names its tunnel and the address that the tunnel process reaches. The API takes the same fields:

POST /v2/network_services

{
  "name": "wiki",
  "network_id": "d8a7e0b1-2d64-4d62-aeb2-b77465835059",
  "hostname": "wiki.corp.internal",
  "tunnel_id": "abb096ba-61ae-4f9c-9269-98d8ed94f6aa",
  "service": "https://10.20.3.7:8443"
}

wiki.corp.internal resolves only for clients on acme-prod. Telnyx creates no public DNS record for it.

Bind the Service

A function binds the service by its ID:

func.toml

[network_service.WIKI]
id = "b41c7e02-…"

The binding fixes the destination, so the URL of a request sets only its path:

Function

const page = await env.WIKI.fetch("/runbooks/deploys");

The request arrives at 10.20.3.7:8443 through the tunnel.

Get Started

Concepts

Features

Operations

API Reference

For AI Agents

Private Services

Bind the Service

​Bind the Service

Bind the Service