title	Private networking with GitHub-hosted runners
shortTitle	Private networking
intro	{% data reusables.actions.private-networking-intro %}
versions	fpt ghes ghec * * *
redirect_from	/actions/using-github-hosted-runners/connecting-to-a-private-network/about-private-networking-with-github-hosted-runners /actions/concepts/runners/about-private-networking-with-github-hosted-runners /actions/concepts/runners/private-networking-with-github-hosted-runners
category	Set up runners
contentType	concepts

{% data reusables.actions.enterprise-github-hosted-runners %}

About {% data variables.product.prodname_dotcom %}-hosted runners networking

{% data reusables.actions.about-private-networking-github-hosted-runners %}

There are a few different approaches you could take to configure this access, each with different advantages and disadvantages.

Using an API Gateway with OIDC

{% data reusables.actions.private-networking-oidc-intro %} For more information, see AUTOTITLE.

Using WireGuard to create a network overlay

{% data reusables.actions.private-networking-wireguard-intro %} For more information, see AUTOTITLE.

{% ifversion actions-private-networking-azure-vnet %}

Using an Azure Virtual Network (VNET)

{% data reusables.actions.azure-vnet-network-configuration-intro %}

{% ifversion fpt %}

Organization owners using the {% data variables.product.prodname_team %} plan can configure Azure private networking for {% data variables.product.company_short %}-hosted runners at the organization level. For more information, see AUTOTITLE.

{% endif %}

{% ifversion ghec %}

Enterprises and organizations on {% data variables.product.prodname_ghe_cloud %} or {% data variables.product.prodname_team %} plans can configure Azure private networking for {% data variables.product.company_short %}-hosted runners. For more information, see AUTOTITLE and AUTOTITLE. {% endif %}

{% endif %}