Platform

One private network, four qualities.

Quadrant is a network platform as a service (NPaaS). Distributed routers, provisioned from one place, are joined by an encrypted overlay that runs over any carrier. You get one private network across all your sites, clouds and remote users, and a single place to manage it.

Always reachable

Your network survives the loss of a line, a carrier or a whole site, because every part of it can carry traffic for the rest.

A satellite dish and a radio dish side by side on a snowy plateau at blue hour, above low cloud.

Layered fallbacks, fast recovery

Every layer has a fallback, so the network rides out outages and attacks. Backups replicate between sites at high speed.

Most attacks start with a user rather than with the core of the network. Logging is therefore complete by default: kept safe, auditable and ready for forensic analysis, so that after any incident you know what happened, how, and where it began.

Under your jurisdiction

You decide where your data lives, who can reach it and what is recorded about it.

An old dry-stone wall crossing a misty mountain pasture, its top stones lit by the first sun.

Ghost data centres

Part of the network runs in data centres whose locations are not disclosed, not even to us. We are an unknown client to those suppliers, and they are unknown suppliers to us.

Everything is encrypted, at rest, in transit and in memory, so tens of these sites work as one network. As long as one of them is running, so is yours.

Territorial compliance

You decide what is logged and how long it is kept. We advise on retention rules country by country and jurisdiction by jurisdiction.

We deliberately operate across many jurisdictions and economic zones, so each part of your data and services can sit under the jurisdiction that suits it best.

Free to move

Your addresses and your workloads go where you need them, without renumbering and without downtime.

A long line of migrating geese flying low over a calm lake at dawn.

Your addresses, everywhere

Bring your own IPv4 and IPv6 addresses, or use ours. The encrypted overlay lets the same addresses work from several locations at once: for off-site copies of virtual machines and applications, or for moves between premises and clouds without changing a line of configuration.

Live migration

Move networks, virtual machines and applications between racks, sites or continents while they run. Sessions stay connected through migration and failover, established NAT state included.

Multi-master nodes, hot backups, database synchronisation and full-disk replication are supported. A migration API reserves up to 80 Gbps of bandwidth and tunes each transfer automatically, from TCP window sizing to layer 2 jumbo frames. Moving to another continent becomes no harder than moving to the next rack.

Secure from anywhere

People on the road, in branch offices and at headquarters work on one network, under the same rules.

A small wooden cabin at the edge of a snowy forest at dusk, one window glowing warm.

Remote access

Remote users join the same finely segmented network as people on site, with the same protection. Two-factor authentication, mutual certificate infrastructure, device integrity checks and 802.1X decide who gets in.

Firewalling at layers 2 and 3 decides what each user can reach: ARP control and MAC-based blocking, source and destination rules, and TLS inspection for authenticated users.

Secure communications

Voice, video and team collaboration come from ClearerLink, the secure telecom operator we own and run on every continent, in more than 70 jurisdictions. We control the service hardware and software end to end, so calls and meetings get the same protection as the network that carries them.

Visit the ClearerLink website

Technical specifications

For network and security engineers.

Architecture
Distributed routers provisioned from one platform, joined by an encrypted overlay over any carrier
Scale
From 10 to 10,000 sites in one network
Routing
BGP and OSPF; complex subnet topologies; roaming across sites and access technologies
Tunnels and access
IPsec, PPPoE, 802.1X
Addressing
IPv4 and IPv6; your own addresses or ours; floating IPs
Uplinks
Optical fibre, terrestrial radio, geostationary satellite; private MPLS, BGP peering, local breakouts
Encryption
At rest, in transit and in memory
Access control
Two-factor authentication, mutual certificates, system integrity checks
Firewalling
Layers 2 and 3; ARP control, MAC-based blocking, IP rules, TLS inspection
Migration
Live, with sessions and NAT state preserved; up to 80 Gbps reserved; window sizing and jumbo frames
Replication
Multi-master nodes, hot backups, database synchronisation, full-disk replication
Logging
Complete, protected and auditable; forensic analysis

See how it fits your network.

Every deployment starts from your sites, your clouds and the rules you work under.

Discuss your network