> ## Documentation Index
> Fetch the complete documentation index at: https://developers.telnyx.com/llms.txt
> Use this file to discover all available pages before exploring further.

# WireGuard Interfaces

> A WireGuard Interface terminates WireGuard tunnels from peers and routes their traffic into the user's virtual routing and forwarding (VRF) domain.

A WireGuard Interface is an interface on a Network. Any host can connect to it as a **peer** over a WireGuard tunnel, and an Edge Compute function joins as a peer through a [network binding](/docs/edge-compute/runtime/bindings/network). Peers reach each other, and the rest of the Network, via the interface.

## Interface and peers

The interface and its peers share one subnet. The interface takes the first address, and each peer gets the next free one.

Each peer opens its own tunnel to the interface's public endpoint, so a peer needs no inbound firewall rule.

Each peer has its own WireGuard key pair. Telnyx generates the pair and returns the private key once, or the peer keeps its private key and registers only the public key.

## Pricing

| Resource | Monthly recurring charge (USD) |
| - | - |
| WireGuard Interface | 10 |
| Peer | Free |