Continuity and security, designed into the network.
FajrFiber designs for continuity and security together: how a connection is engineered to handle a failure, who sees the problem first, and what is protected within an agreed scope.
Security & Resilience
Designed for failure, layer by layer.
Your network
Beyond the FajrFiber handoff, your internal network remains yours unless a managed service is agreed.
Access
No single fiber path should decide whether your site is online.
Enterprise connections are engineered with dual fiber paths as standard, with diverse PoP termination used to reduce single-path dependency.
Engineering detail
ITU-T G.8032 Ethernet Ring Protection is used where applicable within the transport architecture.
FajrFiber Dedicated Internet is engineered with dual fiber paths as standard. Where the site and network topology support it, those paths terminate toward separate FajrFiber PoPs to reduce common-path dependency.
Upstream
Six active international upstream IIG relationships with multi-path fiber connectivity, engineered for upstream failure and rapid capacity expansion during exceptional network events.
Engineering detail
Routing is governed by explicit engineering policy with defined preferred and secondary upstream behaviour.
Operations
A human-operated Network Operations Center monitors your service 24/7/365, and technical support is staffed around the clock.
Reliability is an architecture decision.
These are design measures, not a promise of uninterrupted service. What is committed is defined in your service agreement.
Security inside the design, scoped to your environment.
Secure network architecture: security designed into how the network is built.
Security is considered in every architecture review and service scope.
Network-security services within agreed scope, based on an assessment of your environment.
The FajrFiber network uses multi-layer DDoS mitigation, combining BGP FlowSpec, Anycast-based mitigation and hardware enforcement.
Engineering detail
Mitigation architecture designed to support attack traffic up to 500 Gbps.
Cryptographic transport protection is engineered according to the service topology, including MACsec with AES-256-GCM for suitable Layer-2 transport and IPsec with IKEv2/AES-256-GCM for routed WAN and Internet-based connectivity.
Cisco and Juniper routing and switching platforms.
A FortiGate-based network security layer operates within FajrFiber's own infrastructure.
This describes FajrFiber's own infrastructure. The security scope of any customer service is agreed per engagement.
Dedicated DNS infrastructure.
Someone is watching when it fails.
Network and service disruptions trigger automated alarms, and NOC engineers investigate without waiting for you to report the problem.
- Alarm
- Investigation
- Customer contact
- Engineering action
Affected customers are contacted proactively, within minutes, as part of how the NOC operates.
Commitments, written down.
Standard availability objective for eligible Dedicated Internet services: 99.99% or higher, subject to the applicable SLA definition, exclusions and service design.
IN DEVELOPMENT
AI-assisted Network Threat Defense is being developed by FajrFiber. It is not yet available as a service.
Start with a review.
- Your sites.
- Your current providers.
- What an outage costs the business.
- Known single points of failure.
- Your security requirements.