Private Link

For one site and one server you can, and your firewall will do it. What Private Link changes is where the tunnel ends: in our network rather than on each server, so one link reaches every service you agree with us, in any of our four sites, instead of one tunnel per machine. Your private ranges are announced to us over BGP under your own ASN, our firewall lets through only what we agreed, and the 99.9% by contract covers our end. If you would rather run no tunnel at all, we install our router at your site and monitor both ends.

No, despite the name. Those give a service inside one cloud a private address in your own network in that same cloud. Ours connects your sites, meaning offices, plants and your own datacenter, to the services you run with us. If what you need is a private connection from our sites into your own network at AWS, Azure, Google Cloud or Oracle, that is a private interconnect, and we study it per customer. Our direct peering with those clouds at European exchange points is a separate thing again: it carries traffic to their public services, not into your private network there.

Start from what the site already has. A line you are happy with, and no wish to run the equipment: we install our router on it, configured, in up to 14 days. A site in Madrid, Amsterdam, Munich or Helsinki where you want the line to be ours too: our fibre and our router, in 14 to 35 days, because the fibre has to be laid. Equipment of your own that speaks WireGuard or IPsec: a tunnel from it, live in 24 to 48 hours. Every way in is encrypted and lands at our site nearest you.

Only what you agree with us. Each link lands at our site nearest to it, and our firewall lets through the services and destinations we set up together and nothing else. From there our own Layer 2 network reaches the other three sites, so a link that lands in Madrid can reach a server in Helsinki. Our services keep their own addresses, and your private ranges are announced to us over BGP, so each side knows the way back.

From 50 Mbps to 10 Gbps, set per link for what the site needs. The rate is best effort, not a guaranteed floor, and on a tunnel your own connection sets the ceiling.

BGP, with your own ASN, public or private. Your private ranges are announced to us, and our services keep their own addresses. It carries IPv4 only: IPv6 is not carried over Private Link. MTU and the other parameters are agreed in the design, site by site.

A standard link is a single path from one site of yours to our site nearest it, so while it is down that site has no private path in. Our other three sites are reached through the same link, not in place of it. On our router or our fibre we monitor both ends, and on a tunnel our end. If our router fails, we replace it, and in the four cities where our datacenters are, the time it is down counts against the 99.9%. If a site cannot be without its link, a redundant setup is available on request.

Private Link, by contract, with automatic credits if we miss it: the same figure as every product we tie to an SLA. It covers what is ours: the router we install, our fibre, our network and our end of a tunnel. In the four cities where our datacenters are, replacing a failed router is inside it too. The line you already have, and the connection a tunnel runs over, are your carrier's, and we cannot answer for them.

We configure our router, install it at your site, and help you extend your network to it or use it as it is. On our fibre, a European partner lays the last mile and we do the rest. Either way, we monitor both ends. On a tunnel we monitor our end and help you configure yours, and specific parameters or algorithms can be agreed per customer. Support is free, with a 4-hour target response time on support requests, as on everything we sell.

A tunnel is live in 24 to 48 hours. Our router over the line you already have takes up to 14 days. Our fibre and our router take 14 to 35 days, because the fibre has to be laid first.

Six months. When the contract ends, we collect the router and, where there is one, remove the fibre; a tunnel is switched off. There are no prices on this page: you get one in your quote.

Yes. You can buy it on its own and connect a site before anything moves. It reaches nothing until a service runs with us, though: a link leads only to services you run with us.

Every way in is encrypted from your site to ours, and so is the traffic between our four sites. Nothing on our fibre or our network between the four sites runs over a network owned outside the EU, and the partner that lays our last mile is European. The line under our router, and the connection under a tunnel, are your carrier's, and we cannot choose where your carrier sends your traffic: that is what the encryption is for.

Because an order served on the company that runs a network can reach the traffic on it. The router and the network your link lands on are run by DIVERSITY, a European company with no parent company, US or otherwise, so there is no entity above us for a court outside the EU to compel. On your carrier's line, what it carries is encrypted from your site to ours.