Service types

Dedicated optical channel on a DWDM ring. Fixed capacity, deterministic latency, no contention.

Raw fiber pair you light yourself with your own transponders. Maximum control, highest setup cost.

Point-to-point Ethernet circuit, no other traffic on the path. Strict CoS, easy to scope.

Multipoint Ethernet over a shared backbone with VLAN separation. Cheaper than EPL when you have many sites.

Carrier Ethernet across a metro footprint — typically MEF-certified, with rate-limited port speeds.

Internet routing access via a carrier's AS. Commit + burst pricing, BGP-peered.

Routed any-to-any private WAN with carrier-managed routing. Legacy but still common in renewals.

Symmetric dedicated fiber to a building, SLA-backed. Standard enterprise primary access in NA + EU.

Asymmetric DOCSIS-3.1 over coax — cheap and fast-to-install, weak SLA. Common as failover.

IP transit + cross-connect, delivered inside a colo. Burstable, multi-carrier blend possible.

On-demand L2/L3 between any two ports on a global fabric (Megaport, Equinix Fabric, PacketFabric, etc.).

Private virtual circuit to AWS Direct Connect / Azure ExpressRoute / GCP Interconnect / OCI FastConnect / IBM Direct Link.

Vendor-managed overlay across mixed transports — fiber, cable, 5G, satellite — with policy + zero-touch.

5G FWA from T-Mobile / Verizon / AT&T / Bell / Rogers / Telus. Useful as primary in non-fiber locations and as failover.

Cradlepoint / Peplink / Inseego routers bonding cellular paths for resilient branch access.

Rack / cage / cabinet space in a third-party data center, with cross-connect access to carriers and clouds.

Cloud-hosted calling, messaging, video, presence — RingCentral, 8x8, Zoom Phone, Webex Calling, Teams Operator Connect, Dialpad. Per-seat pricing.

Wholesale voice termination/origination + DID inventory for on-prem PBXs or hybrid stacks. Per-channel or per-minute pricing.

8XX inbound numbers with per-minute or flat-rate pricing. Origination from Bandwidth, Intelepeer, Twilio, Voxbone, others.

Compliant 911 routing with location dispatch for VoIP — RAY BAUM's Act + Kari's Law for multi-site orgs. Often bundled with UCaaS.

LTE/IP-backed analog line replacement for alarms, elevators, fax, fire panels. Granite POTS-in-a-box, Ooma AirDial, Lumen QCC.

Standalone meeting / webinar / large-event platforms when UCaaS isn't the right vehicle — Zoom Meetings, Webex Meetings, GoTo, BlueJeans (sunset).

Cloud-delivered network + security stack: SD-WAN + SWG + CASB + ZTNA + FWaaS converged. Cato, Zscaler, Palo Alto Prisma, Netskope, Cloudflare One, Versa, Aryaka.

Security half of SASE without the SD-WAN — SWG + CASB + ZTNA + DLP. Right when the buyer already has a WAN strategy and only needs security.

VPN replacement — per-app identity-aware access without giving users a route to the network. Zscaler ZPA, Palo Alto Prisma Access, Cloudflare Access, Cisco Duo / Secure Connect, Cato.

Visibility + control over SaaS app usage — shadow IT discovery, DLP for M365/Salesforce/Box, malware scanning, threat protection. Netskope, Skyhigh, Microsoft Defender for Cloud Apps, Palo Alto.

Vendor-operated firewalls — on-prem appliances managed by the vendor, or cloud-delivered FWaaS. Fortinet FortiSASE, Palo Alto Prisma SASE, SonicWall MSSP, Check Point Quantum.

24x7 security monitoring + response — combines SIEM tooling with human analysts. Arctic Wolf, eSentire, CrowdStrike Falcon Complete, Sophos MDR, Rapid7 MDR, Critical Start, Cybereason.