Built for high-throughput, low-noise environments.

Managed routing

Dedicated BGP capacity over the IS-RNET backbone. Multi-homed at every PoP through tier-1 carriers (Cogent, Telia, Lumen) with internal traffic engineering and per-tenant route policies.

• Per-tenant ASN announcement and prefix protection (RPKI / IRR)
• Anycast endpoints across all PoPs, single config
• Integrated DDoS scrubbing — L3/L4 inline, L7 on request
• Per-port flow telemetry available via API and S3-compatible export

# Sample route policy (read-only excerpt)
tenant "acme-eu":
  prefer: low-latency
  avoid_as: [3216, 8359]
  scrub:
    l3: enabled
    l7: enabled
  peers:
    - frankfurt-de-cix
    - amsterdam-ams-ix
    - bucharest-interlan

# Per-tenant transport tunnel (excerpt)
cipher:    chacha20-poly1305
kx:        x25519
auth:      ed25519 + mTLS
mtu:       1420
replay:    strict
forwarding: per-tenant vrf

Encrypted transport

Layer-3 tunnels stitched across our backbone with per-tenant keying material. No shared keys, no shared crypto, no shared paths. Customer endpoints can be your own hardware, or one of our supplied transport boxes.

• Modern AEAD only — ChaCha20-Poly1305, AES-128-GCM
• TLS 1.3 control plane with mutual certificates
• HKDF-based session rekey every 30 minutes
• Per-tenant routing tables, never collapsed into a shared table

Secure file delivery

Our most-used service. Customer-to-customer transfer of arbitrarily large files (multi-TB), accepted at any PoP, delivered to any PoP, with end-to-end encryption and chain-of-custody logging.

• Up to 8 Gbit/s sustained per tenant
• Resumable uploads, parallel chunking, integrity hashes (BLAKE3)
• Per-transfer audit trail signed with HSM-backed keys
• S3-compatible API for programmatic integration

More on file delivery →