SD-WAN enterprise networking
one fabric from HQ to every store
The more branches you run, the harder the network is to manage. Fredyun plans VPN, dedicated lines, SD-WAN and SASE as a single deployment — critical traffic on dedicated capacity, everything else over the internet, all of it orchestrated and monitored from one portal.
What this service covers
SD-WAN / SASE wide-area network
VPN, dedicated lines, SD-WAN and SASE planned and deployed together, with policy pushed centrally rather than configured box by box.
One-touch multi-branch onboarding
Built for national chains and distributed branch estates — a wide-area network covering the whole country that replaces traffic which never needed a dedicated line.
Application-aware QoS and steering
Central orchestration with application-level QoS; critical traffic gets priority and international segments are steered around congestion.
IP and cloud voice
Data, video, voice and imaging share one fabric, with voice quality protected by policy.
Store-opening kit
Switch, router, wireless and IP phone delivered as one unit — small commercial sites live quickly.
Insight and visual portal
Low-latency switching, business insight analytics and a single management and visibility portal.
Who uses it, and for what
Store networks and fast openings
- Already serving a leading listed F&B group across 140+ restaurants in 20+ cities
- Store-opening kit: switch, router, wireless, IP phone
- Unified networking and operations; stores are effectively plug-and-play
- Endpoint IT for retail and F&B covering 5,000+ users
Global wide-area networks
- MPLS / IEPL / SD-WAN across APAC, Europe and the Americas
- International segments carried over the three carriers' licensed networks
- IPv4 / IPv6 dual stack, dynamic or static BGP
- Already serving a listed logistics multinational
Branches and remote access
- Large, medium and small branches managed together
- IPsec and SD-WAN encrypted interconnect
- Premium international access for a better overseas experience
- 10 Mbps – 100 Gbps, upgradable in steps
Managed IDC plus SD-WAN
- Already serving a listed global luxury retail group
- Managed colocation combined with nationwide SD-WAN
- Single management plane and visual portal
- 24/7 NOC monitoring, 100% VIP fault tracking
Service parameters at a glance
These are network-wide figures. Anything that depends on a specific site — facility conditions, access method, exact schedule — is confirmed by survey.
| Item | Specification |
|---|---|
| Transport mix | VPN · dedicated lines · SD-WAN · SASE planned and deployed as one, with centrally orchestrated policy |
| Site onboarding | Sites with existing internet or dedicated access are configured and onboarded the day the CPE arrives; sites needing a new circuit take about 2 weeks; multiple sites delivered in parallel |
| Retail delivery | Store-opening kit (switch, router, wireless, IP phone as one unit) — about 1 week per store |
| Routing | IPv4 / IPv6 dual stack; dynamic BGP or static routing; application-level QoS and steering |
| Operations | Visual portal, business insight analytics, 24/7 NOC monitoring with proactive alerting |
| Billing | Monthly, by site count plus bandwidth tier, including orchestration and portal access; CPE purchased or rented; on-site support and other add-ons billed separately; short-term and temporary sites at short-term rates |
| Bandwidth | 10 Mbps – 100 Gbps, upgradable in steps |
| Service assurance | PoP-to-upstream-ISP availability 99.99%; end-to-end link availability 99.5%; 24/7 NOC monitoring and proactive alerting; 100% VIP fault tracking |
| Contract term | Flexible — no blanket minimum. Annual terms for steady services; short-term needs (events, exhibitions, temporary projects) from one day |
| Footprint | 60+ PoPs across Greater China, 120+ PoPs worldwide; measured latency between nodes is queryable on the coverage map |
How to think about it
Will SD-WAN replace your dedicated lines? Usually not — they are complementary. SD-WAN decides how links get used: application-aware steering, encryption and central orchestration across links of differing quality. A dedicated line decides how good the link itself is: deterministic bandwidth, latency and jitter.
The common pattern is hybrid. ERP, trading and voice ride IEPL or MPLS; day-to-day office and cloud traffic goes out over the internet; SD-WAN switches between them by policy in real time. You keep determinism where it matters and stop paying for it where it does not.
For fast-moving retail estates the constraint is standardisation rather than technology. The store-opening kit packages switching, routing, wireless and IP telephony into one delivery unit; combined with central orchestration, a new store comes up in about a week and multiple sites are delivered in parallel.
Licence scope
International and Hong Kong / Macau / Taiwan capacity is not built by Fredyun. China Mobile International (CMI), China Unicom Global (CUG) and China Telecom Global (CTG) hold the international telecom licences and supply the underlying circuits. Fredyun procures that licensed capacity and delivers convergence, routing, end-to-end provisioning and operations on top of it.
Fredyun itself holds a trans-regional value-added telecom business licence (B1-20235481) issued by China's Ministry of Industry and Information Technology, covering IDC, ISP, CDN and domestic internet VPN — trans-regional, not international. This boundary is stated explicitly in every proposal and contract.
What clients ask most
Where can SD-WAN reach?
60+ PoPs across Greater China and 120+ worldwide. Domestic coverage spans the Greater Bay Area (Hong Kong, Guangzhou, Shenzhen, Qianhai IX, Zhuhai, Hengqin, Macau, Jiangmen, Chengdu), East China (Shanghai, Hangzhou) and North China (Beijing, Xi'an); overseas coverage spans APAC (Taipei, Seoul, Tokyo, Osaka, Singapore, Kuala Lumpur, Manila, Jakarta, Ho Chi Minh City, Hanoi, Sydney), Europe (Amsterdam, Frankfurt, Moscow) and North America (Los Angeles, Seattle). Measured latency between nodes is queryable on the coverage map.
Is there a standard package for opening stores quickly?
Yes — the store-opening kit bundles switch, router, wireless and IP phone into a single delivery unit, combined with central orchestration so a small commercial site comes up quickly. It is already in use across retail and F&B estates, including a leading listed F&B group with 140+ restaurants in 20+ cities.
How do SD-WAN and SASE relate?
SD-WAN handles wide-area link orchestration and path selection. SASE builds on that by pulling security controls — access control, encryption, threat protection — out to the network edge. Fredyun deploys VPN, dedicated lines, SD-WAN and SASE as one line plan rather than separate products, so you do not end up with network policy and security policy that cannot see each other.
How long until a branch or store is live?
Branches with existing internet or dedicated access are configured and onboarded the day the CPE arrives; sites needing a new circuit take about 2 weeks. Standardised retail sites using the store-opening kit take about 1 week end to end, and multiple sites are delivered in parallel.
What is the minimum contract term?
Terms are flexible with no blanket minimum. Steady services are typically annual; temporary requirements — events, exhibitions, short projects, emergency circuits — can be billed from one day. Bandwidth runs 10 Mbps – 100 Gbps and can be stepped up.
Usually planned together
Need a link assessment for this design?
Tell us the site locations, bandwidth and latency targets
and we will come back with a workable topology and SLA proposal.
