# Static public IP, private APN or VPN?

> Four ways to reach or protect devices on mobile data compared, with which one fits a single camera, a payment fleet or a cloud platform.

Remote access & IP addresses · 19 March 2026

Every ThingSIM SIM gets a private IP address, which means devices can reach out but nothing on the internet can reach in. Whether that is exactly what you want or something to work around depends on the job. There are four options, and they solve different problems.

## The options side by side

| | Static public IP | Private APN | IPSec VPN | Cloud interconnect |
|---|---|---|---|---|
| What it does | A fixed internet address per SIM | Your SIMs on a private network of their own | A tunnel from our core to your firewall | Private links into your cloud |
| Reachable from the internet | Yes, from anywhere | No | No | No |
| How you reach devices | By their public address | From your network, by your own address range | From your servers, by private address | From your cloud workloads |
| Set up | Per SIM, from the portal | With us, per project | With us, per project | With us, per project |
| Cost | £8 a month per SIM | See [extras](/extras) | See [extras](/extras) | See [extras](/extras) |
| Best for | One or a few devices you connect to | Payment terminals, alarms, anything that must not be exposed | Back offices that poll or manage devices | Platforms already running in AWS, Azure or Google Cloud |

## Static public IP: simplest for a handful

A [static public IP](/extras#static-public-ip) gives one SIM a fixed address on the internet that stays the same for as long as you need it. You connect to the device directly, which is the quickest way to view one camera or manage one router. The trade-off is exposure: a public address is reachable from anywhere, so pair it with strong passwords and firewall rules on the device. See [securing a device on a public IP](/securing-a-device-on-a-public-ip).

## Private APN: keep devices off the internet entirely

A [private APN](/extras#private-apn) puts your SIMs on a private network of their own, separate from every other customer, using an address range you choose so it slots into your existing IP plan. Nothing on the public internet can reach the devices, though they can still reach out if you allow it. That is the right shape for payment terminals and alarms.

## IPSec VPN: your servers talk to your devices

An [IPSec VPN](/extras#ipsec-vpn) runs an encrypted tunnel from our core to your firewall or cloud VPN gateway. Your servers reach every device by its private address, and devices reach you, without either side being exposed to the internet. It works with any standards-based IPSec endpoint, and we help you configure your side.

## Cloud interconnect: devices on your cloud's private network

If your platform already runs in AWS, Azure or Google Cloud, a [cloud interconnect](/extras#cloud-interconnect) lands device traffic there without crossing the public internet, on private addresses. We agree the region and addressing with you.

## A quick way to choose

- **One camera or router to look at yourself:** a static public IP.
- **Devices that must never be exposed:** a private APN.
- **Your office systems need to manage devices:** an IPSec VPN.
- **Your platform lives in the cloud:** a cloud interconnect.

The SIM plan underneath is sized as usual; see [how much data your device needs](/how-much-data-does-my-device-need). Private APN, VPN and interconnect are set up with you, so [talk to us](/contact) about those.

## Common questions

### Can I add a static public IP myself?

Yes. A static public IP is added per SIM from the portal and costs £8 a month.

### Which option keeps devices off the internet?

A private APN, an IPSec VPN or a cloud interconnect. A static public IP is the one option that makes a device reachable from anywhere.

### Do I need any of these for a device that only sends data out?

No. A device that only connects out to a server or cloud service works on the private address every SIM gets, at no extra charge.

## Recommended plan

1 GB, UK 4-network: £2.40 a month per active SIM, ex VAT.

Source: https://thingsim.com/static-ip-private-apn-or-vpn