First mile through last mile connectivity as one managed service.
The service is one managed path made of three segments. Ground Orbit provides, configures, and supports every element along it. Teams no longer have to compare transport offerings or work out how to connect their users and systems; they connect to the service, and we handle the rest. Monitoring and service-desk hours are set out in the service agreement.
First mile
Your field site connects over whatever is available on the ground: 5G, LEO satellite (such as Starlink) or a private circuit. Traffic leaves the site inside a post-quantum encrypted VPN. You get a site that is on your network the day the routers are powered on, over any transport, with no carrier decisions to make.
Middle mile
Traffic crosses our managed core: equipment in Equinix points of presence joined across AWS Direct Connect. You get private, resilient transport between sites and private access into AWS, without building or operating a core yourself.
Last mile
Headquarters, a corporate office or a partner site joins over private WAN transport on the same managed routers. The field site appears as part of your own network; there are no site-to-site tunnels for your team to build or maintain.
The same service on every transport
5G, LEO satellite, private WAN, colocation cross-connect and AWS Direct Connect all enter the same managed network. We select the transport per site. A site can carry more than one transport at once, so a cellular outage or a satellite weather event does not take it offline.
Secure by design
Security is built into the path rather than configured after the circuit is up. Traffic over commercial cellular and satellite carriers is wrapped in a post-quantum cryptography VPN from the first hop. Each customer runs in its own Layer 2 or Layer 3 segments across the shared infrastructure.
Two of everything
The reference design pairs every element: two routers at each site, two switches and two routers in every point of presence, two cross-connects into AWS, two private WAN circuits. Failover is handled by the service, not by your team.
Private cloud access
Cloud workloads are reached over Direct Connect from inside the managed network, never across the public internet. Private access to your AWS environment is part of the path, not a separate on-ramp project.
What the service covers
- Transport selection, contracts and management for every site
- Two managed Cisco 8000 series routers per site, delivered pre-configured, monitored, maintained and replaced by Ground Orbit
- Post-quantum encrypted VPN from field sites into the managed network
- Managed core across Equinix points of presence and AWS Direct Connect SiteLink
- Private access to your AWS environment
- Layer 2 or Layer 3 segmentation designed to your requirements
- Monitoring of transports, devices and paths; service desk; change management — scope and hours as set out in the service agreement
- Service levels, support tiers and reporting as set out in the service agreement
Doing it yourself, versus the service
| Task | Doing it yourself | With Ground Orbit |
|---|---|---|
| Choosing and buying transport | Evaluate carriers per site, sign contracts | Included in the service |
| Site hardware | Select, procure, configure, replace | Managed Cisco 8000 routers delivered pre-configured |
| Encryption and segmentation | Design and operate VPNs and policy | Post-quantum VPN and segmentation built into the path |
| Cloud connectivity | Order Direct Connect, build the on-ramp | Direct Connect inside the managed core |
| Colocation and cross-connects | Contract space, order cross-connects | Ground Orbit presence in Equinix |
| Monitoring and support | Staff a network team, on call | Included in the service design |
How an engagement runs
Site and mission review
Tell us where your sites are, what they have to reach, and the conditions they operate under.
Reference design
We design the path for your sites — transports, the paired reference design, and how traffic reaches headquarters and AWS.
Pilot site
Routers arrive pre-configured. The site joins the overlay and reaches the rest of your network over the managed path.
Operate
The service design includes monitoring of each transport, device and path, a service desk, and change management. Hours and tiers are set out in the service agreement.
Architecture design and reviews
Consulting remains available on its own, whether or not we go on to operate the path. It is not a site survey, and it is not a substitute for the managed service.
Architecture Design
Consulting that specifies the first-mile, middle-mile and last-mile design — including how traffic reaches headquarters and the cloud — before or alongside a deployment.
Architecture Reviews
Consulting that examines an existing design or production path and identifies where first-mile access, the core, last-mile delivery, or the destination does not match the operation.