Control Planes.
Not Control Rooms.
The Broadwan Platform.

Bidirectional Forwarding Detection (BFD) runs at 10ms hello intervals on all tunnels. When a link failure is detected, the BFD session drops immediately, triggering an instant route withdrawal in the local FIB without waiting for BGP hold-down timers. The BW-X1 ASIC executes the FIB update in hardware — the total failover path from detection to reroute is typically 30–48ms. ECMP pre-computation means the backup path is already installed before the failure occurs.

For TCP sessions, most survive failover entirely via FEC (Forward Error Correction) which provides packet-level redundancy across paths. UDP flows (VoIP, video) use packet replication to secondary paths 10ms before the primary is declared dead. TCP sessions where packets are lost recover via normal TCP retransmission — typically under 200ms, invisible to most applications.

PathIQ maintains a continuous multi-dimensional model of every link in the network — measuring RTT, jitter, packet loss, BGP route stability, interface error counters, CPU/memory on edge nodes, and 195 other signals every second. A gradient-boosted model predicts degradation probability for each path over the next 30s, 60s, and 90s windows. Traffic is steered to the path with the lowest predicted degradation probability for each application class, not just current observed quality.

Yes. Broadwan runs as a vCPE (virtual CPE) on standard x86 hardware, most major hypervisors (VMware, KVM, Hyper-V), and cloud instances (AWS EC2, Azure VM, GCP GCE). Minimum spec: 4 vCPUs, 8GB RAM, 2x10G NICs. We also support physical CPE deployment on our purpose-built BW-100, BW-500, and BW-2000 appliances if you prefer vendor-managed hardware.

When a new CPE is powered on, it makes a DHCP request and then calls home to the Broadwan cloud controller via an HTTPS bootstrap URL. The controller authenticates the device by its pre-provisioned serial number and X.509 certificate, then pushes the full configuration — routing policy, tunnel parameters, QoS maps, security policies — over an encrypted control channel. The device converges in under 15 minutes. You ship the box; your team plugs it in and walks away.

Everything. NetFlow v9 and IPFIX records for all flows, per-application latency histograms, per-tunnel RTT/jitter/loss time-series at 10s resolution (1s on request), BGP routing table history, security event logs, CPE hardware health, and PathIQ confidence scores for every active path. All data is available via REST API, gRPC streaming, Kafka topic export, or direct S3 sink. Retention is 13 months at full resolution in our platform, or unlimited in your own storage.