Set Up Your SIP Trunk on Bolna

Prerequisites

Before creating a trunk in Bolna, configure the following on your SIP trunk provider’s portal.

1. Whitelist Bolna’s IP Address

Bolna’s SIP media server IP is:

13.200.45.61

You must whitelist this IP on your SIP trunk so that Bolna’s outbound SIP INVITE and RTP packets are accepted. In most provider portals this is called an IP whitelist, allowed IP, trusted IP, or ACL. If you are using ip-based authentication, this is the IP you will add as your identifier — Bolna will be recognized solely by its source IP.

2. Set the Origination URL (for inbound calls)

If you want calls to your DID numbers to ring through to Bolna, point your SIP trunk’s origination URI to one of the following, depending on the transport you’ve chosen for the trunk:

Trunk transport	Origination URI
UDP or TCP	`sip:sip.bolna.ai:5060`
TLS (encrypted signaling)	`sip:sip.bolna.ai:5061;transport=tls`

In your provider portal this is usually labeled as:

Origination URI or Origination URL
Inbound SIP URI
SIP Termination Point
Route to / Forward to

Set this for every DID number (or for the trunk as a whole, depending on your provider) that you intend to route to Bolna.

If your provider only accepts an IP, use sip:13.200.45.61:5060 for UDP/TCP. TLS inbound requires a hostname so the carrier can validate Bolna’s TLS certificate.

3. Codec Configuration

Bolna’s SIP layer uses G.711 u-law (ulaw) audio by default. Ensure your trunk allows ulaw, or at minimum alaw, in its codec preferences. G.729 and other compressed codecs are not recommended.

4. Decide on media encryption (optional)

Bolna supports two media modes for BYOT trunks:

Plain RTP (default) — works on every transport. No setup needed on your side.
SDES (encrypted RTP) — supported on the TLS transport only, since the encryption keys travel inside the SIP signaling channel. To use SDES, your carrier must also have SDES/SRTP enabled on its end.

If you’re not sure, leave this on plain RTP — most production trunks run unencrypted at the media layer, and you can switch later by editing the trunk.

Create your trunk

Each step below shows the same action in the Dashboard (under SIP Trunks → Create SIP Trunk, a 5-step wizard) and via the API (a single Create SIP Trunk request whose fields map 1:1 to the wizard).

Twilio, Plivo and Vobiz have native Bolna integrations. We recommend connecting these providers through the Integrations page rather than configuring them as SIP trunks. See Using Twilio, Using Plivo or Using Vobiz.BYOT still works for these carriers; use it when you want to keep your own trunk, numbers and negotiated rates.

Open the trunk form

Dashboard
API

Go to SIP Trunks in the sidebar (under Deploy) and click Create SIP Trunk. A wizard opens on the right with five steps: Basics, Authentication, Gateways, Advanced and Review.

Bolna SIP Trunks list page with the Create SIP Trunk button in the top right — The SIP Trunks page with the Create SIP Trunk button

All of the settings below go into one POST /sip-trunks/trunks request. Generate an API key from the Developers tab (see Authentication) and send it as a Bearer token:

curl -X POST https://api.bolna.ai/sip-trunks/trunks \
  -H "Authorization: Bearer <api_key>" \
  -H "Content-Type: application/json" \
  -d '{ ... }'

The remaining steps build up the JSON body; the complete examples are in Full API examples.

Basics: name and provider

Dashboard
API

Trunk Name — a label only you see, e.g. Twilio Production.
Provider — pick your carrier tile (Plivo, Telnyx, Twilio, Vobiz, Vonage) or Custom for any other carrier. Selecting a provider pre-fills its gateway address and the recommended transport in the later steps.
Description — optional, for internal reference.

Click Continue.

Create SIP Trunk wizard, Basics step, with the trunk name filled in and the Twilio provider tile selected — Step 1 of the wizard: Basics

{
  "name": "Twilio Production",
  "provider": "twilio",
  "description": "Main Twilio Elastic SIP trunk"
}

provider is one of twilio, plivo, telnyx, vobiz, vonage or custom. name must be unique per account.

Authentication

Dashboard
API

Pick how your carrier authenticates Bolna:

Username / Password — enter the SIP credentials your carrier issued. Works behind NAT.
IP-Based — enter one trusted IP or CIDR per line in Trusted Source IPs / CIDRs. Your carrier must also whitelist Bolna’s IP (see Prerequisites).

Click Continue.

Create SIP Trunk wizard, Authentication step, with Username / Password selected and username and password fields — Step 2: Username / Password authentication

Create SIP Trunk wizard, Authentication step, with IP-Based selected and a Trusted Source IPs / CIDRs text area — Step 2: IP-Based authentication

{
  "auth_type": "userpass",
  "auth_username": "<your-sip-username>",
  "auth_password": "<your-sip-password>"
}

{
  "auth_type": "ip-based",
  "ip_identifiers": [
    { "ip_address": "15.207.90.192/31" },
    { "ip_address": "204.89.151.128/27" }
  ]
}

Gateways

Dashboard
API

Add at least one gateway — the SIP host Bolna sends INVITEs to. Each row has a Gateway Address, a Port (5060 for UDP/TCP, 5061 for TLS) and a Priority (lower = tried first). If you picked a known provider in Basics, the first gateway is pre-filled. Click Add Gateway for failover targets, then Continue.

Create SIP Trunk wizard, Gateways step, showing Gateway 1 with address sip.twilio.com, port 5061 and priority 1, plus an Add Gateway button — Step 3: Gateways, pre-filled for Twilio

{
  "gateways": [
    { "gateway_address": "your-trunk.pstn.twilio.com", "port": 5060, "priority": 1 }
  ]
}

port defaults to 5060 and priority to 1. Add more objects for failover.

Advanced: codecs, transport and encryption

Dashboard
API

The defaults are correct for most trunks; the fields you’re most likely to change are Transport Protocol and Media Encryption.Codecs

Allowed / Disallowed Codecs — defaults ulaw,alaw and all. Always keep ulaw.

Transport & Health

Transport Protocol —
- UDP — the default, used by most carriers.
- TCP — avoids UDP fragmentation when SIP INVITEs carry long headers (multiple Diversion / P-Asserted-Identity / Route entries). Pick this if outbound calls intermittently fail to negotiate media.
- TLS (encrypted signaling) — encrypts the SIP signaling channel. Required for SDES (SRTP) media encryption. Use port 5061 on your gateways.
Media Encryption (SRTP) — Disabled keeps plain RTP. SDES (RTP/SAVP, AES-128) encrypts the audio stream end-to-end with your carrier and requires TLS transport.
SIP OPTIONS Ping Interval — how often Bolna pings the carrier for trunk health. Default 60 seconds; 0 disables it.

Create SIP Trunk wizard, Advanced step, showing codec fields, Transport Protocol set to TLS and Media Encryption set to SDES — Step 4: Advanced, with TLS transport and SDES media encryption

SDES requires the carrier to also be configured for SRTP. Check this in your provider’s portal before enabling it.

NAT & Behavior

RTP Symmetric / Force rport — keep enabled for NAT traversal.
Enable Inbound Calling — turn on if you want Bolna to receive calls on this trunk.
Prepend + to Outbound Numbers — typically on (E.164 dialing).
Trunk Active — the master switch; turn off to pause the trunk.

Click Continue.

Every advanced field is optional; the values below are the defaults except transport / media_encryption, shown here for an encrypted trunk:

{
  "allow": "ulaw,alaw",
  "disallow": "all",
  "transport": "transport-tls",
  "media_encryption": "sdes",
  "media_encryption_optimistic": false,
  "qualify_frequency": 60,
  "rtp_symmetric": true,
  "force_rport": true,
  "inbound_enabled": true,
  "outbound_leading_plus_enabled": true,
  "is_active": true
}

transport is one of transport-udp (default), transport-tcp, transport-tls. media_encryption is no (default) or sdes; sdes is rejected with a 422 unless transport is transport-tls. See the field reference for every option.

Review and create

Dashboard
API

The Review step summarizes every section with an Edit link back to it. Click Create Trunk. Bolna registers the trunk and runs an OPTIONS ping against the first gateway to verify connectivity, then the trunk appears in the SIP Trunks list with its status.

Create SIP Trunk wizard, Review step, summarizing Basics, Authentication, Gateways and Advanced with a Create Trunk button — Step 5: Review, before clicking Create Trunk

Send the assembled body. The response echoes the trunk with a generated id:

curl -X POST https://api.bolna.ai/sip-trunks/trunks \
  -H "Authorization: Bearer <api_key>" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Twilio Production",
    "provider": "twilio",
    "auth_type": "userpass",
    "auth_username": "<your-sip-username>",
    "auth_password": "<your-sip-password>",
    "gateways": [
      { "gateway_address": "your-trunk.pstn.twilio.com", "port": 5060, "priority": 1 }
    ],
    "transport": "transport-udp",
    "inbound_enabled": true
  }'

{
  "id": "01HQXYZ123ABC456DEF",
  "name": "Twilio Production",
  "provider": "twilio",
  "auth_type": "userpass",
  "gateways": [
    {
      "id": "01HQXYZ111AAA111BBB",
      "gateway_address": "your-trunk.pstn.twilio.com",
      "port": 5060,
      "priority": 1,
      "created_at": "2026-05-09T10:00:00Z"
    }
  ],
  "transport": "transport-udp",
  "media_encryption": "no",
  "inbound_enabled": true,
  "is_active": true,
  "created_at": "2026-05-09T10:00:00Z",
  "updated_at": "2026-05-09T10:00:00Z"
}

Save the trunk ID (the id field in the API response, or shown in the SIP Trunks list) — you’ll use it when adding phone numbers and when wiring inbound or outbound calling to your AI agents.

Full API examples

Complete Create SIP Trunk requests for the most common setups.

Example — Twilio Elastic SIP Trunk (userpass)

curl -X POST https://api.bolna.ai/sip-trunks/trunks \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Twilio Production",
    "provider": "twilio",
    "description": "Main Twilio Elastic SIP trunk",
    "auth_type": "userpass",
    "auth_username": "<your-sip-username>",
    "auth_password": "<your-sip-password>",
    "gateways": [
      {
        "gateway_address": "your-trunk.pstn.twilio.com",
        "port": 5060,
        "priority": 1
      }
    ],
    "transport": "transport-udp",
    "allow": "ulaw,alaw",
    "disallow": "all",
    "inbound_enabled": true,
    "outbound_leading_plus_enabled": true
  }'

{
  "id": "01HQXYZ123ABC456DEF",
  "name": "Twilio Production",
  "provider": "twilio",
  "description": "Main Twilio Elastic SIP trunk",
  "auth_type": "userpass",
  "auth_username": "<your-sip-username>",
  "gateways": [
    {
      "id": "01HQXYZ111AAA111BBB",
      "gateway_address": "your-trunk.pstn.twilio.com",
      "port": 5060,
      "priority": 1,
      "created_at": "2026-05-09T10:00:00Z"
    }
  ],
  "ip_identifiers": [],
  "phone_numbers": [],
  "allow": "ulaw,alaw",
  "disallow": "all",
  "transport": "transport-udp",
  "direct_media": false,
  "rtp_symmetric": true,
  "force_rport": true,
  "media_encryption": "no",
  "media_encryption_optimistic": false,
  "qualify_frequency": 60,
  "inbound_enabled": true,
  "outbound_leading_plus_enabled": true,
  "is_active": true,
  "created_at": "2026-05-09T10:00:00Z",
  "updated_at": "2026-05-09T10:00:00Z"
}

Example — Plivo Elastic SIP Trunk (ip-based)

curl -X POST https://api.bolna.ai/sip-trunks/trunks \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Plivo Elastic Trunk",
    "provider": "plivo",
    "auth_type": "ip-based",
    "gateways": [
      {
        "gateway_address": "21467306465797919.zt.plivo.com",
        "port": 5060,
        "priority": 1
      }
    ],
    "ip_identifiers": [
      { "ip_address": "15.207.90.192/31" },
      { "ip_address": "204.89.151.128/27" },
      { "ip_address": "13.52.9.0/25" }
    ],
    "transport": "transport-udp",
    "inbound_enabled": true
  }'

{
  "id": "01HQXYZ789GHI012JKL",
  "name": "Plivo Elastic Trunk",
  "provider": "plivo",
  "auth_type": "ip-based",
  "gateways": [
    {
      "id": "01HQXYZ222BBB222CCC",
      "gateway_address": "21467306465797919.zt.plivo.com",
      "port": 5060,
      "priority": 1,
      "created_at": "2026-05-09T10:00:00Z"
    }
  ],
  "ip_identifiers": [
    { "ip_address": "15.207.90.192/31" },
    { "ip_address": "204.89.151.128/27" },
    { "ip_address": "13.52.9.0/25" }
  ],
  "phone_numbers": [],
  "transport": "transport-udp",
  "media_encryption": "no",
  "media_encryption_optimistic": false,
  "is_active": true,
  "inbound_enabled": true,
  "created_at": "2026-05-09T10:00:00Z",
  "updated_at": "2026-05-09T10:00:00Z"
}

Example — Twilio Elastic SIP Trunk, TLS + SDES (encrypted)

curl -X POST https://api.bolna.ai/sip-trunks/trunks \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Twilio Production (encrypted)",
    "provider": "twilio",
    "auth_type": "userpass",
    "auth_username": "<your-sip-username>",
    "auth_password": "<your-sip-password>",
    "gateways": [
      {
        "gateway_address": "your-trunk.pstn.twilio.com",
        "port": 5061,
        "priority": 1
      }
    ],
    "transport": "transport-tls",
    "media_encryption": "sdes",
    "media_encryption_optimistic": false,
    "allow": "ulaw,alaw",
    "disallow": "all",
    "inbound_enabled": true
  }'

{
  "id": "01HQXYZ555TLS888SDES",
  "name": "Twilio Production (encrypted)",
  "provider": "twilio",
  "auth_type": "userpass",
  "gateways": [
    {
      "id": "01HQXYZ333CCC333DDD",
      "gateway_address": "your-trunk.pstn.twilio.com",
      "port": 5061,
      "priority": 1,
      "created_at": "2026-05-09T10:00:00Z"
    }
  ],
  "transport": "transport-tls",
  "media_encryption": "sdes",
  "media_encryption_optimistic": false,
  "inbound_enabled": true,
  "is_active": true,
  "created_at": "2026-05-09T10:00:00Z",
  "updated_at": "2026-05-09T10:00:00Z"
}

Add Phone Numbers to Your Trunk

After creating a trunk, add your DID phone numbers using the Add Phone Number API.

curl -X POST https://api.bolna.ai/sip-trunks/trunks/01HQXYZ123ABC456DEF/numbers \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "phone_number": "919876543210",
    "name": "Mumbai Support Line"
  }'

{
  "id": "01HQNUMBER111222333",
  "phone_number": "919876543210",
  "byot_trunk_id": "01HQXYZ123ABC456DEF",
  "telephony_provider": "sip-trunk",
  "deleted": false,
  "created_at": "2026-05-09T10:05:00Z",
  "updated_at": "2026-05-09T10:05:00Z"
}

Save the id field — this is the phone number ID used when setting up inbound call routing or making outbound calls.

Phone number format: Bolna stores the number exactly as provided. When matching inbound calls, the platform performs a flexible lookup that checks both the number with and without a + prefix. Use a consistent format across your trunk and inbound DID configuration.

Create Trunk field reference

Field	Type	Required	Default	Description
`name`	string	Yes	—	Human-readable label. Must be unique per account.
`provider`	string	Yes	—	SIP provider name (e.g. `"twilio"`, `"plivo"`, `"telnyx"`, `"vonage"`, `"custom"`).
`description`	string	No	`null`	Optional description for internal reference.
`auth_type`	string	Yes	—	`"userpass"` or `"ip-based"`.
`auth_username`	string	Conditional	`null`	Required when `auth_type` is `"userpass"`.
`auth_password`	string	Conditional	`null`	Required when `auth_type` is `"userpass"`.
`gateways`	array	Yes	—	At least one gateway. Each has `gateway_address` (required), `port` (default `5060`, use `5061` for TLS), `priority` (default `1`).
`ip_identifiers`	array	Conditional	`[]`	Required when `auth_type` is `"ip-based"`. List of `{ "ip_address": "..." }` objects.
`allow`	string	No	`"ulaw,alaw"`	Comma-separated codecs to allow. Always include `ulaw`.
`disallow`	string	No	`"all"`	Comma-separated codecs to disallow.
`inbound_enabled`	boolean	No	`false`	Set `true` to receive inbound calls.
`outbound_leading_plus_enabled`	boolean	No	`true`	Prepend `+` to outbound dialed numbers.
`transport`	enum	No	`"transport-udp"`	One of `"transport-udp"`, `"transport-tcp"`, `"transport-tls"`.
`media_encryption`	enum	No	`"no"`	One of `"no"`, `"sdes"`. `"sdes"` requires `transport="transport-tls"`.
`media_encryption_optimistic`	boolean	No	`false`	When `media_encryption="sdes"`, fall back to clear RTP if the carrier does not offer crypto in its SDP.
`direct_media`	boolean	No	`false`	RTP routed directly between caller and callee. Keep `false`.
`rtp_symmetric`	boolean	No	`true`	Symmetric RTP. Required for NAT.
`force_rport`	boolean	No	`true`	Force responses to source port. Required for NAT.
`qualify_frequency`	integer	No	`60`	SIP OPTIONS ping interval in seconds. `0` to disable.
`phone_numbers`	array	No	`[]`	Optional phone numbers to add at creation time.

Troubleshooting

Inbound calls connect but the caller hears silence (one-way audio)

The most common cause is an SRTP mismatch between Bolna and your carrier. If the trunk has media_encryption="sdes" but the carrier has SRTP disabled (or vice versa), the SIP call sets up but the media path never establishes.

Confirm SRTP is enabled on your provider’s side.
If you need a quick test, set media_encryption_optimistic=true — Bolna will fall back to clear RTP if the carrier does not offer crypto in its SDP.
If you don’t need encrypted media, set media_encryption="no" and use UDP or TCP transport.

`422` from Create / Update with `media_encryption='sdes' requires transport='transport-tls'`

SDES exchanges its keys inside SDP, so it must travel over an encrypted signaling channel. Either:

Switch transport to "transport-tls" (and update the gateway port to 5061), or
Set media_encryption back to "no".

Outbound INVITE fails or rings forever on a particular carrier

If your carrier sends large SIP headers (long Diversion, P-Asserted-Identity, multiple Route headers), the INVITE may exceed the UDP MTU and get fragmented or dropped silently.

Switch transport to "transport-tcp" — this avoids UDP fragmentation. You don’t need TLS for this; TCP alone is enough.

Next steps

Set up inbound calls to route incoming calls to your AI agents
Make outbound calls from your SIP trunk numbers
Manage your trunk using the full SIP Trunk API

Quickstarts

Phone Numbers & Calling Setup

Outbound Calling

Inbound Calling

Native Telephony Integrations

Managing Live Calls

Prompting & Personalization

Tools & Function Calling

Post-Call & Analytics

No-Code & Automation

SIP Trunking Guide

Set Up Your SIP Trunk on Bolna

Prerequisites

1. Whitelist Bolna’s IP Address

2. Set the Origination URL (for inbound calls)

3. Codec Configuration

4. Decide on media encryption (optional)

Create your trunk

Full API examples

Example — Twilio Elastic SIP Trunk (userpass)

Example — Plivo Elastic SIP Trunk (ip-based)

Example — Twilio Elastic SIP Trunk, TLS + SDES (encrypted)

Add Phone Numbers to Your Trunk

Create Trunk field reference

Troubleshooting

Inbound calls connect but the caller hears silence (one-way audio)

`422` from Create / Update with `media_encryption='sdes' requires transport='transport-tls'`

Outbound INVITE fails or rings forever on a particular carrier

Next steps

​Prerequisites

​1. Whitelist Bolna’s IP Address

​2. Set the Origination URL (for inbound calls)

​3. Codec Configuration

​4. Decide on media encryption (optional)

​Create your trunk

​Full API examples

​Example — Twilio Elastic SIP Trunk (userpass)

​Example — Plivo Elastic SIP Trunk (ip-based)

​Example — Twilio Elastic SIP Trunk, TLS + SDES (encrypted)

​Add Phone Numbers to Your Trunk

​Create Trunk field reference

​Troubleshooting

​Inbound calls connect but the caller hears silence (one-way audio)

​422 from Create / Update with media_encryption='sdes' requires transport='transport-tls'

​Outbound INVITE fails or rings forever on a particular carrier

​Next steps

Prerequisites

1. Whitelist Bolna’s IP Address

2. Set the Origination URL (for inbound calls)

3. Codec Configuration

4. Decide on media encryption (optional)

Create your trunk

Full API examples

Example — Twilio Elastic SIP Trunk (userpass)

Example — Plivo Elastic SIP Trunk (ip-based)

Example — Twilio Elastic SIP Trunk, TLS + SDES (encrypted)

Add Phone Numbers to Your Trunk

Create Trunk field reference

Troubleshooting

Inbound calls connect but the caller hears silence (one-way audio)

`422` from Create / Update with `media_encryption='sdes' requires transport='transport-tls'`

Outbound INVITE fails or rings forever on a particular carrier

Next steps