- Architecture
- Distributed routers provisioned from one platform, joined by an encrypted overlay over any carrier
- Scale
- From 10 to 10,000 sites in one network
- Routing
- BGP and OSPF; complex subnet topologies; roaming across sites and access technologies
- Tunnels and access
- IPsec, PPPoE, 802.1X
- Addressing
- IPv4 and IPv6; your own addresses or ours; floating IPs
- Uplinks
- Optical fibre, terrestrial radio, geostationary satellite; private MPLS, BGP peering, local breakouts
- Encryption
- At rest, in transit and in memory
- Access control
- Two-factor authentication, mutual certificates, system integrity checks
- Firewalling
- Layers 2 and 3; ARP control, MAC-based blocking, IP rules, TLS inspection
- Migration
- Live, with sessions and NAT state preserved; up to 80 Gbps reserved; window sizing and jumbo frames
- Replication
- Multi-master nodes, hot backups, database synchronisation, full-disk replication
- Logging
- Complete, protected and auditable; forensic analysis