#
Cloud Service

Soracom Funnel

Built-in cloud integration service that forwards device data directly into AWS, Azure, and Google Cloud without storing credentials on the device.

Send device data straight to the cloud without custom code

Soracom Funnel is a built-in cloud integration service that takes data from your IoT devices and delivers it directly into services like AWS Kinesis, Azure Event Hubs, and Google Cloud Pub/Sub. It removes the need for device-side SDKs and embedded credentials, so you can keep firmware simple while still using modern cloud data pipelines.

Stream IoT data into cloud analytics pipelines at scale

Soracom Funnel lets devices send simple HTTP, TCP, or UDP messages to a Soracom endpoint, then takes over from there. In the cloud, Funnel attaches the correct IAM or SAS credentials, converts payloads into the format each cloud service expects, and forwards data asynchronously into your chosen stream, topic, or hub. Devices don’t need to know anything about Kinesis APIs, Event Hubs authentication, or Pub/Sub endpoints—they just “fire and forget,” while Funnel manages secure, scalable ingestion in the background.

Why use Soracom Funnel for your project?

Secure connectivity icon

Remove relay servers

Eliminate custom relay APIs and let Soracom deliver device data directly into managed cloud services.

Authenticated Icon

Protect cloud credentials

Keep IAM roles and SAS tokens in the cloud so devices never store or transmit sensitive keys.

Branching paths

Simplify fleet integrations

Point entire device groups at a new stream or topic with console changes instead of firmware updates.

How it works

Use built-in adapters for AWS, Azure, and Google Cloud

Funnel comes with native adapters for services like Amazon Kinesis, Kinesis Firehose, S3, Azure Event Hubs, and Google Cloud Pub/Sub. Instead of coding against each API, you choose the adapter in the Soracom console, point it at your target resource, and Funnel takes care of authentication, formatting, and delivery.

Keep credentials and security in the cloud, not on the device

With Funnel, IAM roles, SAS tokens, and other credentials are stored and managed in the Soracom platform, never on the device. Devices send plain HTTP/TCP/UDP packets to a single Funnel endpoint, while Soracom injects the right keys and tokens in the cloud, reducing your attack surface and simplifying credential rotation.

Asynchronous, fire-and-forget data ingestion

Funnel’s asynchronous architecture lets devices send telemetry quickly and return to sleep without waiting for a response from the target cloud service. Soracom buffers and delivers data in the background, which is ideal for battery-powered devices and large fleets where reducing modem airtime directly improves lifetime and operating costs.

Take a shortcut directly to technical documentation

Explore step-by-step setup, code samples, and architectural diagrams in the developer docs, or start a pilot today by connecting a small fleet of devices and streaming data into your cloud of choice.

Key takeways for those that use Funnel

Lock Icon with Keyhole

Standardized device design

Use one simple firmware pattern across products while changing cloud destinations in the console.

Soracom Event Handler icon

Extended device lifetime

Reduce modem airtime and code complexity, which lowers power usage and support overhead.

Checkmark icon

Reduced integration risk

Move credentials and protocol logic into the cloud so security fixes and cloud changes don’t require a truck roll.

What you’d build without Soracom Funnel

Custom relay servers and message brokers
Without Funnel, you typically stand up your own relay APIs, message queues, and workers just to receive device data and forward it into Kinesis, Event Hubs, or Pub/Sub. That adds infrastructure to deploy, monitor, patch, and scale before you even get to your application logic.

Device-side SDKs and complex TLS clients
Each device has to embed cloud SDKs, maintain TLS stacks, and know exact endpoint URLs. Updating any of these usually means firmware changes, requalification, and in-field updates, which are costly and risky at scale.

Credential management on every endpoint
Storing IAM keys or SAS tokens on devices increases security exposure and makes rotation painful. Operations teams end up tracking which keys live on which hardware instead of focusing on the value of the data.

Architecture and implementation

Soracom Funnel sits between your devices and your cloud data services, acting as a managed adapter that understands both sides. Devices send lightweight payloads over HTTP, TCP, or UDP to a Funnel endpoint associated with a Soracom SIM group. Funnel then enriches those messages with the right credentials and formats and forwards them to your selected destination—such as AWS Kinesis Firehose, Azure Event Hubs, or Google Cloud Pub/Sub—over secure, cloud-native connections. Teams typically use Funnel as the ingestion layer for telemetry, status updates, and event streams, plugging it into downstream pipelines for storage, analytics, and alerting. Because Funnel configuration lives in the Soracom console, you can keep device firmware stable while your backend architecture evolves.

Step 1

Configure your cloud destination in the Soracom User Console

Start by logging into the Soracom User Console. 
From your SIM group settings, enable Soracom Funnel and select the cloud you want to forward data to, such as
AWS IoT Core, Azure IoT Hub, or Google Cloud Pub/Sub.

Soracom securely manages authentication credentials for each cloud, so your devices never need keys or certificates.

Learn more in the Funnel configuration guide

Step 2

Send simple HTTP, MQTT, or TCP data from your devices to Soracom

Your devices now only need to send data to the Soracom platform using lightweight protocols such as
HTTP, MQTT, or TCP—no vendor-specific cloud SDKs required.

Soracom Funnel signs requests, handles cloud authentication, and delivers data to the correct cloud service.

For protocol details, see Sending Data to Funnel.

Step 3

Validate cloud delivery and monitor results in the User Console

After your devices begin sending data, verify delivery in the
Group → Funnel section of the Soracom User Console.

Review message logs, confirm cloud delivery status, and monitor authentication results.

Optionally pair Funnel with Soracom Harvest Data or Lagoon for visualization and debugging. 

How Soracom Funnel works with other Soracom services

Use Funnel + Beam for flexible protocol support
Combine Beam and Funnel when devices need protocol conversion or TLS offload before data reaches a cloud adapter. Devices can speak simple UDP or TCP to Beam, which converts to HTTPS or MQTTS, and Funnel then routes that data into the right stream or topic for each cloud service.

Use Funnel + Canal/Door/Direct for private data paths
Pair Funnel with Soracom Canal, Door, or Direct to keep the entire data path private from device to cloud. Devices send telemetry over encrypted cellular links, Funnel applies cloud credentials, and Canal/Door/Direct ensure traffic reaches your VPC or data center without touching the public internet.

Use Funnel + Harvest and Lagoon for quick visibility
While Funnel feeds long-term analytics backends, you can mirror key metrics into Soracom Harvest and visualize them in Lagoon dashboards. This gives operations teams fast, internal visibility while data scientists and analysts work with the same streams in AWS, Azure, or Google Cloud.

#

Start streaming with Soracom Funnel

Create a free Soracom account, connect a test device, and configure Funnel to deliver data into your preferred cloud service in minutes—no relay servers or SDKs required.

Sign up and start testing

Frequently Asked Questions

What is Soracom Funnel?
Soracom Funnel is a managed cloud integration service that forwards device data directly into services like AWS Kinesis, Azure Event Hubs, and Google Cloud Pub/Sub without requiring SDKs or credentials on the device.
Which cloud platforms does Soracom Funnel support?
Funnel supports major public clouds, including AWS, Microsoft Azure, and Google Cloud Platform, with adapters for services like Kinesis, Kinesis Firehose, S3, Event Hubs, and Pub/Sub.
Does Funnel work with battery-powered devices?
Yes. Funnel’s asynchronous design lets devices send data quickly and go back to sleep without waiting for responses from cloud services, which helps extend battery life.
How does Funnel handle failures or retries?
Funnel manages delivery to cloud services in the background, including retries based on cloud responses. Devices are isolated from transient issues in downstream services, reducing error handling complexity on the device.
How is Soracom Funnel different from Soracom Beam?
Beam is a general-purpose proxy that handles protocol conversion and synchronous communication with any API endpoint. Funnel is optimized for asynchronous, high-scale ingestion into specific cloud data services using built-in adapters and managed credentials.
Do my devices need to store cloud credentials when using Funnel?
No. AWS IAM roles, Azure SAS tokens, and other credentials are stored securely in the Soracom platform and injected by Funnel in the cloud. Devices only send data to a Soracom endpoint.
Can I change the cloud destination without updating device firmware?
Yes. You can reconfigure Funnel destinations in the Soracom console at the SIM group level, so devices continue sending data to the same endpoint while you redirect it to new streams, topics, or buckets.
Can I use Funnel together with other Soracom services?
Yes. Funnel is often combined with Beam for protocol conversion, with Canal or Door for private networking, and with Harvest and Lagoon for quick visualization alongside cloud analytics.