Private networking

Private APN, static IP and IPsec VPN for IoT SIMs from US$250 setup

Keep device traffic off the public internet. Private addressing per SIM, encrypted tunnels to your network or cloud, no NAT timeouts, and no per-SIM surcharge on IoT Scale.

Order the free trial kit See IoT pricing

Private networking at a glance

Availability IoT Scale (1,000+ SIMs) and Enterprise; by exception on IoT Go

Setup fee From US$250 one-off; no per-SIM surcharge

Static IP Private static address per SIM from your allocated range

VPN IPsec IKEv2, PSK or certificates, AES-256; GRE over IPsec with BGP on request

Cloud endpoints AWS, Azure, Google Cloud VPN gateways or on-premises firewalls

Setup time 5 to 10 working days

NAT None on the private APN; long-lived sessions stay open

Connectivity price US$0.6 per active SIM plus US$0.0025 per MB on IoT Scale

Universal eSIMs provides a private APN, private static IP per SIM and IPsec VPN on IoT Scale and above for a one-off setup fee from US$250, with no per-SIM surcharge on top of US$0.60 per active SIM and US$0.0025 per MB. Device traffic terminates inside your network or cloud, with no carrier NAT, across 180+ countries.

Prices checked on 25 October 2026 · Inactive SIMs are free · No minimum order · Billed monthly in USD or INR

What you get

Private APN

A dedicated access point name for your account. Devices on it never touch the public internet. Allow-lists and your own firewall rules apply.

Static IP per SIM

Every SIM gets a fixed private address from your range, so your CSMS, SCADA or monitoring system can reach the device by IP, every time.

IPsec VPN

Encrypted IKEv2 tunnels to your firewall or cloud VPN gateway. Redundant endpoints and BGP routing on request. Managed through the platform.

Pricing

Private networking pricing

Item Price Notes IoT Scale connectivity US$0.6 per active SIM per month plus US$0.0025 per MB From 1,000 active SIMs; 12-month term takes a further 10% off the SIM fee Private APN with static IP and one IPsec tunnel From US$250 one-off No monthly fee, no per-SIM surcharge Additional or redundant tunnel Quoted per project Typically US$150 to US$500 one-off GRE over IPsec with BGP Quoted per project For dynamic routing to multiple sites Private APN on IoT Go From US$250 one-off, by exception Healthcare, payments and similar security cases SMS A2P US$0.03 per message Works on private and standard APNs

IoT SIM pricing by volume tier

Tier Active SIMs Per active SIM Per MB, pooled Inactive SIMs Contract Includes Next step IoT Go 1 to 999 active SIMs ₹89 ($1) per month US$0.004 Free None, cancel any time Global multi-IMSI SIM, platform, API, webhooks, email support Order online IoT Scale 1,000 to 10,000 active SIMs $0.60 per month US$0.0025 Free 12 months optional for a further 10% off Everything in Go plus pooled bundles, private APN, static IP, priority support Talk to us IoT Enterprise 10,000+ active SIMs Custom Custom Free Negotiated Everything in Scale plus eUICC profiles, SLA, dedicated manager, custom integrations Request a quote

How private APN setup works

Reach 1,000 active SIMs or ask for an exception

Private APN, static IP and IPsec are included on IoT Scale. Accounts below 1,000 SIMs with a security requirement can request them for the same setup fee; we approve most healthcare and payments cases.

Agree the addressing plan

We allocate a private range, for example 10.64.0.0/16, and assign each SIM a static address. You tell us your tunnel endpoints, pre-shared key or certificates, and routes.

We build the APN and tunnel

Setup takes 5 to 10 working days and costs from US$250 one-off. We test with your trial SIMs and hand over a configuration document.

Move SIMs onto the APN

Assign SIMs to the private APN from the console or API. Devices re-attach with their static addresses and all traffic flows through the tunnel. Public internet breakout can be disabled entirely.

Private APN vs standard APN vs device-initiated VPN

Private networking options compared

Option Public internet exposure Inbound access NAT timeouts Setup Best for Private APN with IPsec (Universal eSIMs) None Yes, by private static IP None From US$250, 5 to 10 days Chargers, medical devices, SCADA, cameras Standard APN with TLS from the device Encrypted but routed over the internet Outbound only 5 to 30 minutes None Trackers, sensors, POS with store-and-forward Device-initiated VPN client (OpenVPN, WireGuard) Encrypted; endpoint exposed Through the tunnel Depends on keepalives Per device Gateways and routers with spare CPU Competitors (observed October 2026) Private APN offered by Onomondo, Pelion and 1GLOBAL Not stated publicly Not stated Prices not published Enterprise accounts

Universal eSIMs vs Onomondo vs Pelion vs 1GLOBAL

What each provider publishes on its own website, observed October 2026. We publish every price, accept orders from 1 SIM and ship a 100MB trial against the 50MB that is standard elsewhere.

IoT connectivity providers compared, observed October 2026

Provider Prices on website Per SIM Per MB Minimums and tiers Trial API Partner programme Universal eSIMs Published US$1.00 (IoT Go), US$0.60 (IoT Scale) US$0.004 (Go), US$0.0025 (Scale) None, order 1 SIM online 5 SIMs, 100MB each, 30 days Public docs, sandbox, Postman Published reseller and API terms Onomondo Partly Not published €0.0025 to €0.003 pay-as-you-go Tiers quote-only Free sandbox Public API docs Three-tier programme, no numbers Pelion Not published Not published Not published Essentials, Professional, Enterprise by quote 5 eUICC SIMs, 50MB each, 30 days Portal and APIs, docs on request None found 1GLOBAL Not published Not published Not published Four models: World Plans, Pay-as-you-grow, Shared Bundle, Shared Flex Enterprise sales process API on request Enquiry only

Competitor details are as displayed on their public pages in October 2026 and change without notice. Where a provider publishes no price we say so rather than guess.

Technical specifics

Private APN and VPN technical specifics

Item Detail Addressing Private IPv4 range per account, for example /16 or /20; IPv6 on request Tunnel IPsec IKEv2, AES-256-GCM or AES-256-CBC, SHA-256, DH group 14 or higher, PFS on Authentication Pre-shared key or X.509 certificates Routing Static routes by default; BGP over GRE on request Redundancy Two tunnel endpoints with dead peer detection on request DNS Your resolvers or ours, configurable per APN Breakout location EU core at launch; India and additional regions on the roadmap Monitoring Tunnel state and per-SIM session data in the platform and API

Security and compliance

These are commitments and a roadmap, stated plainly. We do not list certifications we do not yet hold.

Security and compliance commitments

Area What we do today Roadmap Data protection GDPR-compliant processing of connectivity metadata; data processing agreement available on request Data residency options in India and the EU planned for 2027 Information security Encrypted at rest and in transit; role-based access; audit log of every console and API action ISO 27001 certification is on our roadmap, target audit in 2027 API security Bearer keys scoped per role; HMAC-SHA256 signed webhooks; key rotation without downtime OAuth 2.0 client credentials for enterprise accounts Network security Data-only profiles; IMEI lock; APN restriction; private APN and IPsec on IoT Scale Private LTE breakout points in additional regions Availability Platform availability target 99.9% per month; public status page from launch Written SLA with service credits on IoT Enterprise Payload visibility We see ICCID, IMSI, network, timestamps and byte counts. We never see your device payload Unchanged

Private APN, static IP and VPN questions

What does a private APN cost?

Setup from US$250 one-off, which includes the APN, static IP allocation and one IPsec tunnel. There is no per-SIM surcharge; connectivity stays at US$0.60 per active SIM and US$0.0025 per MB on IoT Scale. Additional tunnels or redundant endpoints are quoted per project.

Can I get a public static IP for a device?

No. We offer private static IPs reachable through your VPN. Devices with public addresses are scanned within minutes of going online and we do not consider them safe. If you need inbound access, use the private APN with IPsec or a device-initiated tunnel.

Is a private APN available on IoT Go?

By exception. It is standard on IoT Scale from 1,000 active SIMs. Smaller deployments with a clear security requirement, for example medical devices or payment terminals, can request it for the same setup fee. Email us with the use case.

Which VPN protocols do you support?

IPsec IKEv2 with pre-shared keys or certificates, AES-256 and SHA-256, to on-premises firewalls or cloud gateways such as AWS Site-to-Site VPN, Azure VPN Gateway and Google Cloud VPN. GRE over IPsec for dynamic routing with BGP is available on request. WireGuard is on the roadmap.

What NAT timeouts apply on the private APN?

There is no carrier-grade NAT on the private APN; your static addresses are routable within the tunnel, so long-lived sessions such as OCPP WebSockets and MQTT stay open. On the standard APN, NAT timeouts are 5 to 30 minutes depending on the partner network, so devices should send keepalives.

Does the private APN work when devices roam to other countries?

Yes. The APN is anchored at our core, so a device in Germany, India or Mexico lands in the same private range and tunnel. Latency adds 20ms to 150ms depending on the distance to the breakout; regional breakouts are on the roadmap.

Can I restrict which hosts a device can reach?

Yes. On the private APN you set access lists on your own firewall. On the standard APN we offer APN-level allow-lists per account so a POS SIM, for example, can reach only your acquirer endpoints.

Is there a minimum order or contract?

No. Order 1 SIM online on IoT Go at US$1.00 per active SIM per month with no contract. IoT Scale from 1,000 SIMs has an optional 12-month term that takes a further 10% off the SIM fee. IoT Enterprise above 10,000 SIMs is negotiated.

How quickly can I get API access?

Immediately. API keys are issued when you create an account. The REST API uses JSON, we publish a Postman collection, and there are snippets in Python, Node.js and cURL. A sandbox with simulated SIMs lets you test activation, usage and webhooks without hardware.

Related IoT pages

• IoT SIM pricing
· • Free trial kit
· • Developer quick start
· • Connectivity platform
· • EV charging
· • Healthcare devices
· • Security cameras
· • Partner API
· • Contact us

Design your private APN with an engineer

Send us your addressing and endpoint requirements and we reply with a plan within 2 working days.

Private APN, static IP and IPsec VPN for IoT

Private networking for IoT SIM deployments with static addressing and encrypted tunnels.

Service Type: Managed IoT connectivity

Price: 1

Currency: USD