#
Networking Service

Soracom Arc

Secure link service to Soracom for devices on any IP network

Connect to Soracom over any network

Soracom Arc creates a secure, encrypted link between non-cellular networks (like Wi-Fi or Ethernet) and the Soracom platform. It enables devices without cellular modules to connect to the Soracom network, unifying your connectivity strategy across multiple access types.

Build on Wi-Fi or Ethernet, then expand globally with cellular

Arc establishes an encrypted WireGuard® tunnel from each device to Soracom and represents that device with a Virtual SIM (vSIM). That means the same identity, policies, security controls, and platform integrations you use for cellular also apply to your IP-connected devices, so you can start on local networks today and scale to cellular when you’re ready—without redesigning your architecture.

Why use Soracom Arc for your project?

LAN icon

Prototyping on Wi-Fi or Ethernet

Use Arc to connect devices over existing Internet links (Wi-Fi/Ethernet) for rapid development before switching to cellular—eliminating the need for SIMs or modems during proof-of-concept.

Satellite and cellular signals provide a hybrid network - icon

Mixed Connectivity Fleets

Manage Wi-Fi, Ethernet, satellite, and cellular devices under one architecture—Arc lets non-cellular devices join the Soracom platform and share policies, routing and identity with cellular units.

Secure connectivity icon

Secure Connectivity & Fail-over

Establish a WireGuard® tunnel to Soracom over any Internet connection, so devices remain secure and enable offline backup or seamless fail-over between Wi-Fi and cellular.

How it works

Diagram showing connectivity services working together to bring data to the cloud.

Universal connectivity via any Internet link

Arc lets devices connect to the Soracom network over Wi-Fi, Ethernet or satellite by creating a secure WireGuard® tunnel—bringing non-cellular devices into the Soracom ecosystem.

The view of the Soracom console showing activated SIMs

Virtual SIM wrapper makes non-cellular look like cellular

Arc uses Virtual SIMs so your device gets an IMSI and appears as a regular Soracom SIM session, enabling you to reuse existing policies, groups, routing and integrations.

A visual showing mixed radio networks supplying constant connectivity to bring data to the cloud.

Seamless architecture across connectivity types

Unify fleets comprising Wi-Fi, Ethernet and cellular devices under a single architecture—switch between connection types transparently without re-configuration.

Take a shortcut directly to technical documentation

Explore step-by-step setup, code samples, and architectural diagrams in the developer docs, or start a pilot today.

What you’d need to build without Soracom Arc

Build and maintain your own secure VPN client on every device
Without Arc’s managed WireGuard® implementation, each device would need a custom VPN client, key rotation logic, and secure credential storage—adding development time and expanding your maintenance surface area.

Create a backend to map non-cellular devices to identities
You would need to design a system to authenticate devices connecting over Wi-Fi or Ethernet and match them to the correct IAM policies, routing rules, and data pipelines typically provided by a SIM and cellular core.

Rebuild cloud and network integrations for hybrid fleets
In mixed Wi-Fi and cellular deployments, you’d have to engineer custom routing, firewall rules, and cloud endpoints to normalize traffic—plus maintain two parallel operational models instead of a unified one.

Architecture and implementation

Soracom Arc is designed for teams that want to use Soracom’s platform and networking features even when devices don’t have cellular modules. Instead of managing separate paths and tools for Wi-Fi, Ethernet, or satellite, you bring everything through the same secure entry point and treat all devices like part of one fleet.

Diagram showing how Arc works
A cabinet of hardware using Soracom Arc
Step 1

Install and configure Soracom Arc to establish a secure client-to-cloud tunnel

Download and install the Soracom Arc client (Soratun) or set up a WireGuard® client on your device or gateway.
 

Obtain your device’s Virtual SIM (vSIM) credentials from the Soracom User Console and configure them in your client settings to authenticate with Soracom securely.

Once configured, Arc creates an encrypted tunnel that lets non-cellular devices connect to the Soracom platform just like Soracom Air devices.
 

Setup instructions are available in the Soracom Arc documentation.

Step 2

Connect your device through Arc and join it to your Soracom SIM group

Start the Arc (Soratun or WireGuard) client to establish a secure tunnel between your device and the Soracom platform.
 

Once connected, the device appears in the Soracom User Console as if it were using a physical SIM, allowing you to apply group settings, routing rules, and integrations.
 

This enables mixed fleets—Wi-Fi, Ethernet, or cellular—to operate under the same identity and policy framework.
Learn more about device registration in the Arc device integration guide.

Visual showing Arc enabled on a set of SIMs
Step 3

Apply Soracom services to Arc-connected devices just like cellular devices

With Arc active, configure services such as Beam, Funnel, Funk, Gate, Canal, or VPG for your device’s SIM group.
 

Arc ensures that all policies, routing rules, and integrations apply automatically, without modifying your device firmware or cloud settings.
 

This allows you to standardize connectivity, security, and cloud integration across your entire fleet—even when devices connect over existing Wi-Fi or Ethernet networks.
 

Service compatibility details are listed in the Arc feature compatibility guide.

 
 
 

How Arc works with other Soracom services

Use Arc + Virtual Private Gateway for private routing
Once traffic enters Soracom via Arc, you can attach devices to a Virtual Private Gateway (VPG) and route traffic privately into your cloud environment. This gives non-cellular devices the same private IP space, firewall rules, and monitoring you already use for cellular devices.

Use Arc + Beam/Funnel/Funk for cloud integration
Devices connected through Arc can send simple HTTP, MQTT, or TCP traffic to Soracom, then rely on Beam, Funnel, or Funk for TLS offload and protocol translation. That means you can use lightweight device code while Soracom safely delivers data to AWS, Azure, or Google Cloud.

Use Arc + Harvest and Lagoon for monitoring
If you want a quick way to visualize data from non-cellular devices, you can store telemetry in Harvest and build dashboards with Lagoon. This is especially useful during prototyping or when you need shared internal views before integrating with other systems.

Impact on your business and operations

Lock Icon with Keyhole

Consistent security posture

By treating all devices—cellular and non-cellular—the same way from an identity and routing perspective, Arc helps you apply consistent security policies and reduce the chances of misconfigured exceptions.

Soracom Event Handler icon

Simpler fleet management

You configure Groups, alerts, and integrations once and apply them across the fleet. As devices move between connection types over their lifecycle, they keep the same logical identity and operational model.

Checkmark icon

Faster experimentation and rollout

You can start projects on Wi-Fi or Ethernet for speed and cost, then add cellular or satellite where needed without rethinking how devices connect to Soracom or your cloud. This makes it easier to prototype, learn, and scale in stages.

#

Start using Soracom Arc with your existing devices

Create a free Soracom account, set up a virtual SIM, and start bringing Wi-Fi, Ethernet, and other IP-connected devices into the Soracom platform alongside your cellular fleet.

Sign up

Frequently Asked Questions

Does Arc replace a cellular SIM?
Arc adds a secure IP path into Soracom using a Virtual SIM (vSIM). You can use Arc on its own over Wi-Fi/Ethernet/Satellite, or run Arc alongside Soracom Air and even map traffic to the same SIM identity where configured.
Which devices support Arc?
Any device/OS that supports WireGuard (e.g., Raspberry Pi, BeagleBoard, NVIDIA Jetson, common Linux SBCs).
How do I automate provisioning at scale?
Use Soratun and Soracom API/CLI to create vSIMs, generate keys, apply configs, and rotate credentials automatically. With Krypton and a Soracom SIM, you can enable zero-touch credential retrieval.
Do I need a virtual private gateway (VPG)?
Not to connect—but a VPG unlocks private routing, outbound filtering, and Peek packet capture. It’s recommended for production.
Can Arc reach my cloud privately without public endpoints?
Yes. Use VPG + Canal/Direct/Gate to connect to your VPC via peering or IPsec with NAT or NAT-less routing, so device traffic never hits the public internet.
Where do I find pricing?
Reference the central Pricing page for current Arc and VPG pricing and regional availability.