Optical network vs Ethernet

Optical networking and Ethernet can both deliver high capacity, low latency connectivity. Which is right for your organisation?

Neos Networks | 2 April 2026

Optical Wavelengths

Get ultrafast, low latency optical connectivity

Defining optical and Ethernet networks

Optical networks

Optical networks send data as pulses of light through fibre optic cables. Unlike traditional networks based on copper cables, fibre supports much higher bandwidths and enables transmission over extremely long distances.

Optical networking also uses Wavelength Division Multiplexing, most commonly Dense Wavelength Division Multiplexing (DWDM). With DWDM, multiple data streams can travel simultaneously on different wavelengths over the same fibre, massively boosting capacity.

As a result, optical networking today underpins global digital infrastructure, from enterprise and metro links to backbone networks and data centre interconnects (DCI).

In this comparison, “optical networks” refers to high capacity, wavelength-based optical services such as Neos Networks Optical Wavelengths.

Ethernet

Ethernet is a wired networking technology that connects devices to networks for fast, reliable data transfer. Originally designed to connect local area networks (LANs) using copper cables, Ethernet has since evolved to support carrier-grade, high-bandwidth services over fibre.

Today, Ethernet is a vital element of business networks, from LANs to wide area and metro networks, linking offices, campuses and data centres.

In this comparison, Ethernet refers to managed Ethernet services, such as Neos Networks Business Ethernet.

Both optical and Ethernet services can provide high capacity connectivity. How do they differ, and which is the better fit for your business?

Optical networks vs Ethernet: key differences

Here’s a breakdown of how Optical Wavelengths differ from Business Ethernet services:

Optical Wavelengths Business Ethernet
Transmission Data carried as light on dedicated wavelengths over fibre Data carried as Ethernet frames across a provider network and delivered over fibre/copper on a standard Ethernet interface
Cables Fibre optic only Copper or fibre, depending on service and speed; fibre for higher capacity services
Network layer Operates at the Physical Layer (Layer 1), providing a dedicated point‑to‑point optical channel Operates at the Data Link Layer (Layer 2), using Ethernet framing and switching
Capacity High capacity, scalable in increments: 10/100/400Gbps+; DWDM enables multiple wavelengths per fibre Scalable bandwidth from 10Mbps to 100Gbps+
Distance Longer distance links (metro, regional, national, backbone, DCI) Local LAN and regional WAN connectivity; longer reach is delivered via the provider’s wider network
Latency Low or ultra-low on dedicated optical paths Low but can vary due to switching and buffering
Resilience High, depending on network design and diverse routing to achieve bespoke resilience levels High, depending on network design; typically run over an MPLS network with self-healing automatic path selection
Management Delivered as a dedicated optical connection; the provider manages the optical line system and endpoints Often delivered as a fully managed service, with monitoring, SLAs and bandwidth control
Uses Point‑to‑point for high capacity, long-distance connectivity, including DCI, backhaul and backbone networks Point‑to‑point, point-to-multipoint, or any-to-any connections for LANs, WANs and metro networks; Ethernet NNIs interconnect carrier or large enterprise networks

 

How scalable are optical and Ethernet networks?

Optical networks are highly scalable because DWDM lets you add multiple high capacity wavelengths on a single fibre. So it’s easy to boost capacity without installing new fibre. For example, Neos Networks Optical Wavelengths can operate at 10Gbps, 100Gbps or 400Gbps+. Adding or upgrading wavelengths at Layer 1 gives you substantial room to grow.

Ethernet is also easy to scale across LANs, WANs and metro networks, letting you increase capacity with demand. Neos Networks Business Ethernet services offer scalable bandwidth from 10Mbps to 100Gbps. Smaller bandwidth upgrades can often be delivered through configuration changes on the provider’s network. For larger upgrades, you may need new CPE if your existing hardware can’t support higher speeds.

In short, optical scaling is about adding or upgrading wavelengths at Layer 1; Ethernet scaling is about raising bandwidth within a managed Layer 2 service. Both scale well, but optical can reach far higher capacities.

Which delivers lower latency, optical or Ethernet services?

Optical wavelength services generally deliver lower latency than Ethernet on the same physical route. A wavelength follows a fixed end‑to‑end optical path, and optical components such as ROADMs and amplifiers add very little delay. So correctly engineered wavelength services can deliver very low, predictable latency.

In contrast, Carrier Ethernet crosses your provider’s switched Layer 2 network. Each switch hop introduces processing and queuing delay, especially under load. Even so, well‑engineered Carrier Ethernet can deliver consistently low latency over both metro and longer distance routes.

For both services, distance is the biggest factor impacting latency. Fibre propagation delay (the time it takes for a light signal to travel through fibre from A to B) is around 5 microseconds per kilometre, so that’s the physical lower limit.

If you need the lowest possible latency, a dedicated optical wavelength is usually the right choice. At Neos Networks, we configure services across our nationwide network with minimal hops to ensure low latency.

How reliable are optical and Ethernet networks?

Optical services are highly reliable for point‑to‑point, high capacity workloads because they use dedicated optical paths over fibre, which is immune to electromagnetic interference (EMI). DWDM line systems can be engineered with route diversity and optical protection. So a wavelength can fail over to an alternative path, maintaining predictable performance for mission‑critical use cases.

Ethernet services can also be highly reliable, depending on your provider’s end-to-end design. For example, Neos Networks Business Ethernet includes MPLS fast re-route and path protection on its core network. At the edge, you can add resilience and diversity options, such as Openreach’s RO2, which delivers dual Ethernet services on physically separate routes to eliminate single points of failure.

At lower speeds, Ethernet may be handed off over copper, which is more susceptible to EMI. But overall service reliability is determined by the provider’s core network and end-to-end resilience strategy.

For both optical and Ethernet services, good providers include stringent uptime and fault repair SLAs to keep you connected.

Are optical networks more secure than Ethernet?

Both optical and high capacity Ethernet services over fibre are highly secure when correctly configured. Fibre carries light, not electrical signals, so it’s harder to tap than traditional copper wires.

And both services provide robust traffic separation. Optical Wavelengths provide the highest isolation at the Physical Layer (Layer 1), giving you a dedicated wavelength – a private optical channel. Business Ethernet uses logical separation at Layer 2 with services such as EPL, EVPL and VPLS on a shared platform.

However, neither optical nor Ethernet services are completely immune to attacks. For sensitive traffic in regulated industries, adding end-to-end encryption is recommended for compliance.

How much do optical and Ethernet services cost?

Optical wavelength services are typically more expensive than Ethernet because you get a dedicated optical channel (wavelength) with fixed, high capacity bandwidth. Costs depend on the capacity (10/100/400Gbps+), circuit distance, and resilience and diversity requirements.

Business Ethernet is generally more cost-effective because it uses shared network infrastructure. Pricing varies by access type (fibre vs copper), bandwidth (10Mbps-100Gbps+), and resilience options such as RO2.

In short, consider optical services if you have specific bandwidth or latency requirements that justify the higher cost. Choose Ethernet for a balance of cost and performance for general enterprise applications such as WAN, SaaS and cloud access.

Ultimately, which is the better fit for your organisation depends on several factors.

Optical vs Ethernet service: which is right for your business?

Here are some key considerations to bear in mind when deciding between Optical Wavelengths or Business Ethernet connectivity:

  1. Use case: What are you trying to connect: two high‑capacity sites, multiple sites, data centres or external networks via NNIs?
  2. Capacity: Do your workloads need fixed 10/100/400Gbps+ bandwidth, or is flexible bandwidth up to 100Gbps enough?
  3. Latency: Do you need the lowest possible latency on a specific route, for example, for real-time applications?
  4. Distance: How far apart are your sites, and does the route length affect your latency or design requirements?
  5. Scaling plans: How much capacity do you expect to need as your organisation and network demands evolve?
  6. Cost constraints: For the network performance you require, do optical or Ethernet services better fit your budget?

Consider Optical Wavelengths if you:

Need dedicated, point‑to‑point connectivity between high capacity sites or data centres.
Want fixed, uncontended bandwidth at 10Gbps, 100Gbps, 400Gbps or higher.
Require predictable low or ultra-low latency on a dedicated, fixed route.
Operate sites that are far apart and need consistent performance over long‑distance fibre routes.
Expect rapid growth and want the ability to scale by adding or upgrading wavelengths at Layer 1.
Can justify the premium for dedicated optical capacity to meet specific critical performance requirements.

Optical Wavelengths

Get ultrafast, low latency optical connectivity

Consider Business Ethernet if you:

Need to connect multiple offices, branches or campuses across LANs, WANs or metro networks.
Want flexible bandwidth options up to 100Gbps, rather than fixed higher capacity wavelengths.
Require low latency that can vary slightly but supports most common enterprise applications.
Want a local or metro network delivered over a provider’s core, rather than dedicated long‑distance optical paths.
Want a service that can scale quickly as your bandwidth demands increase.
Find high capacity Ethernet gives you the best balance of performance and cost for your budget.

Business Ethernet

Get high capacity, low latency Ethernet

Not sure which is right for you?

At Neos Networks, we offer a range of high capacity, low latency Optical Wavelength and Business Ethernet services across our UK-wide network. If you want to discuss the best options for your business, talk to one of our experts.

Optical network vs Ethernet: FAQs

You might also like

  • Article

What is optical networking?

  • Optical
  • Article

What is Ethernet?

  • Ethernet
  • Article

What is 400G optical networking?

  • Optical

What is Dark Fibre and what are its benefits?

Dark Fibre is unused fibre optic cables you can “light” to create your own network. Is it right for your business?

Neos Networks | 5 March 2026

Build your high capacity network aross the UK with Dark Fibre

What is Dark Fibre?

Dark Fibre, also known as “unlit fibre”, is fibre optic cable that is installed but not in use. It’s called “dark” because it has no light signal passing through it. Network owners lease these unused fibres to organisations so they can build their own private network.

With provider-managed optical services (also known as “lit fibre”), the network operator supplies and manages the optical equipment for you. You get a “plug-and-play” service with a set bandwidth and performance. With Dark Fibre, you lease only the fibre. You install your own equipment at each end and control how the link operates. And you choose the technology, bandwidth and performance level your organisation needs.

So Dark Fibre gives you maximum control and flexibility to design a high capacity network with almost limitless scalability.

Learn more about Dark Fibre vs Lit Fibre

How does Dark Fibre work?

Dark Fibre is unused fibre optic cabling with no data transmission equipment attached. So it’s a physical path, not a service.

Fibre cables contain multiple strands. You lease a specific strand or multiple strands between two fixed network points, such as offices, data centres or network nodes.

Fibre optic cable

Fibre optic cable showing multiple coloured strands that can leased as dark fibre

 

You then install the optical equipment needed to “light” the fibre. That equipment generates the light signals that carry your data.

As it’s your dedicated line, you choose the protocol, data rate, modulation and equipment configuration. Capacity, latency, encryption and overall performance all depend on the equipment you deploy, not provider presets. And with technologies like Dense Wavelength Division Multiplexing (DWDM), you can increase the capacity by running multiple wavelengths on the same strand.

In other words, the provider manages the physical layer: fibre cables, ducts and the physical route. You handle network monitoring, troubleshooting, upgrades and optical power levels.

What are the benefits of Dark Fibre?

The main advantage of Dark Fibre is that you have complete control over your network. Here are the key benefits.

Customisation

Choose your own networking equipment, protocols and specifications to suit your business needs. For example, you can use DWDM to increase the number of channels per fibre.

Scalability

As Dark Fibre is unused optical fibre, it offers almost limitless capacity. You can scale up your bandwidth as your business grows by simply updating the optical hardware.

Low latency

You have exclusive access to your fibre strand, so you’re not competing with others for bandwidth. By choosing the right equipment and network design, you can create low or ultra-low latency connections.

Security

Dark Fibre gives you a private physical connection that isn’t shared with other organisations. You can add your own encryption to meet specific operational or regulatory requirements.

Reliability

You design the network, so you can build in resilience with diverse paths or redundant equipment. And when faults occur, you can diagnose and resolve them immediately without waiting for a provider to troubleshoot.

Cost efficiency

Dark Fibre requires more upfront investment than fully managed optical services. But it can be more cost-effective if you have heavy, long-term data demands because you control usage and upgrades.

However, Dark Fibre has its challenges, and you’ll need to weigh them carefully before taking the plunge.

Dark Fibre challenges

Here’s what to bear in mind if you’re considering Dark Fibre:

  • Upfront capital cost: You need to buy and install all the active optical equipment, such as high capacity transceivers and DWDM systems. Are you ready for this high initial capex?
  • Specialist skills: Running a Dark Fibre network requires significant expertise to select install hardware and manage the network. Do you have the right expertise in-house?
  • Operational responsibility: With Dark Fibre, you operate the entire active layer, including network monitoring, maintenance, troubleshooting and hardware upgrades. Do you have the necessary resources?
  • Route availability: If Dark Fibre isn’t available on an existing route, you’ll need to build, which adds time and cost. Is Dark Fibre available for your planned routes?
  • Resilience strategy: You’ll need to design and implement your own resilience measures, such as diverse routing, failover mechanisms and redundant hardware.

So Dark Fibre gives you unrivalled control, which is ideal for certain use cases. But it’s not the right solution for everyone.

Who is Dark Fibre suitable for?

Dark Fibre can work well if you need secure, high capacity, low latency connectivity and want full control over network performance and design.

Here are some examples of how Dark Fibre is used today.

Industry/sector Example use case
Hyperscalers and cloud providers High capacity data centre interconnects (DCI) to transfer large volumes of traffic across core networks and cloud regions
Network service providers ISPs using Dark Fibre for new access, backhaul or metro routes, and carriers expanding reach or adding specialised optical services
Government and public sector NHS trusts handling large volumes of clinical images and patient data, and government bodies delivering public services
Financial services Banks and trading firms requiring low latency links for real-time trading and private, deterministic site-to-site connectivity
Large enterprises High capacity links between sites, supporting data replication, private cloud, AI and IoT
Broadcast and media Real-time transfer of uncompressed 4K content between studios, production facilities and data centres
Research and education Research centres running data-heavy workloads and universities transferring data between labs and high-performance computing clusters

 

How much does Dark Fibre cost in the UK?

The total cost of Dark Fibre varies widely depending on the provider, location, route availability and the optical equipment you need for your network.

First, leasing strands on-net, where fibre already exists, is far cheaper than commissioning off-net build work. And if you need to build off-net, costs may vary significantly between urban, suburban and rural areas because civil works and permissions are major cost drivers.

Second, you need to buy your own optical equipment, such as transceivers, DWDM systems, amplifiers and related hardware. High capacity DWDM can significantly increase your upfront capex.

Third, you need to factor in the staff costs of deploying and running the network. With Dark Fibre, you manage network monitoring, maintenance, troubleshooting and upgrades, which all adds to ongoing operational costs.

Fourth, Dark Fibre attracts business rates, also known as “fibre tax”, but only once the fibre is lit. These annual charges, levied by local authorities per connection, add to your ongoing network costs.

Finally, the contract type matters. An IRU (Indefeasible Right of Use) is a long‑term right to use specific fibre pairs, bought upfront as a one‑off capital purchase. That means higher initial capex but lower annualised costs. In contrast, an annual lease cuts the upfront spend but can cost more across the term due to recurring annual charges.

Given these factors, is Dark Fibre worth the investment for your organisation?

Is Dark Fibre worth it?

Dark Fibre can make financial sense if you need total control over your network, your bandwidth and your budget.

Consider Dark Fibre if you:

Expect significant long-term bandwidth growth: Scaling Dark Fibre via equipment upgrades can be more cost-efficient than buying increasingly high capacity lit services.
Need predictable low latency: You get full control to minimise latency for real-time applications like data centre interconnects, financial trading, AI and IIoT.
Have in-house optical expertise: Without the skills to deploy and maintain your network, the operational burden can outweigh the benefits.
Need a private, isolated network: You can apply your own encryption to meet security and compliance needs in regulated industries such as healthcare and finance.
Can make maximum use of the fibre: The more capacity you use, the lower the cost per bit over time.
Have key sites already on-net: If most of your routes are off-net, the build costs could be significantly higher.

To assess the business case for Dark Fibre, you’ll need to:

  • Estimate long-term bandwidth and latency requirements.
  • Evaluate your internal capability to run the network.
  • Consider any industry-specific privacy and security measures for compliance.
  • Check whether key sites are on-net with your chosen provider.

If you think you’ve got a case for Dark Fibre, the next step is availability. Where can you get it?

Where is Dark Fibre available in the UK?

Dark Fibre is generally available across national backbone and regional backhaul networks, but coverage depends on where there are spare fibre strands.

Spare fibre exists across the UK. The London area, Manchester and other major urban corridors have the largest Dark Fibre footprints because they have long-established fibre networks and high capacity demand.

However, availability varies by provider. Some operators have large national networks with many routes on-net. Others rely mainly on third-party tails or new build work to extend their reach.

At Neos Networks, we operate one of the UK’s largest, business-only fibre networks, with extensive national, regional and metro Dark Fibre routes.

Dark Fibre solutions for your business

If you’re looking for a UK Dark Fibre solution, we can help. With our UK-wide network and wide range of third-party tails, we specialise in serving hard-to-reach areas. Download our network map to check our nationwide reach.

Our experts work with you to map the optimal route, overcome challenges and plan for growth. Whether you need a flexible, short-term lease or a 25-year IRU, we design the best solution for you and your budget.

Build your high capacity network aross the UK with Dark Fibre

Want to talk to one of our Dark Fibre experts? Get in touch. We’ll be happy to make Dark Fibre work for your organisation.

Dark Fibre: FAQs

You might also like

  • Article

What is optical networking?

  • Optical
  • Article

What is 400G optical networking?

  • Optical

DIA vs Ethernet

Dedicated Internet Access (DIA) and Ethernet both offer enterprise-grade, high capacity connectivity. Which is right for your business?

Neos Networks | 25 February 2026

Dedicated Internet Access (DIA)

Private, high-speed internet for your business

What is DIA?

Dedicated Internet Access (DIA) is a private, uncontended internet connection between your premises and your internet service provider (ISP). Unlike business broadband, which is a shared service, DIA gives you bandwidth reserved for your organisation alone. That means your network performance stays consistent, even during peak periods.

Learn more about DIA vs business broadband

With symmetrical upload and download speeds, DIA provides reliable connectivity for real-time cloud, VoIP and SaaS applications. For example, Neos Networks Dedicated Internet Access (DIA) offers upload/download speeds you can scale from 10Mbps to 10Gbps.

What is Ethernet?

Ethernet is a wired networking technology that connects devices to local area networks (LANs) for fast, reliable data transfer. But in this context, we’re talking about high capacity connectivity services like Neos Networks Business Ethernet.

Business Ethernet services give you private, fixed-bandwidth connectivity between your sites or between sites and data centres or cloud services. Options include point-to-point, point-to-multipoint or any-to-any connectivity. And for network service providers and large enterprises, Ethernet network-to-network interfaces (NNIs) allow you to connect to other networks and extend your reach.

Like DIA, Ethernet services are uncontended, with guaranteed bandwidth and symmetrical upload/download speed. In fact, DIA is often delivered over an Ethernet access network.

The main difference is that DIA is just a private connection to the internet. In contrast, Business Ethernet provides high-bandwidth site-to-site, site-to-cloud or network-to-network connectivity without routing traffic across the public internet.

DIA vs Ethernet: key differences

Here’s a summary of how DIA services differ from Business Ethernet:

Dedicated Internet Access (DIA) Ethernet
Purpose Private, uncontended connection to the public internet Private Layer 2 connectivity between sites and data centres or cloud endpoints, as well as NNIs
Delivery Often delivered over Ethernet access; connects to the internet via your ISP’s network End‑to‑end private connectivity with no internet breakout unless you design it in
Bandwidth Guaranteed, typically 10Mbps-10Gbps, with symmetrical upload/download speeds Guaranteed, typically 10Mbps-100Gbps, with symmetrical upload/download speeds
Scalability Capacity limited to 10Gbps on the DIA bearer and the available access technology Highly scalable, with bearer options up to 100Gbps and flexible topologies for multi-site expansion
Uses Consistent, high-speed internet access for real-time cloud, SaaS and VoIP services High capacity site‑to‑site, site‑to‑cloud or network-to-network private connections
Topology Single connection per site to the ISP Point‑to‑point, point‑to‑multipoint, hub‑and‑spoke or any‑to‑any
Resilience SLA‑backed uptime and fix times; avoids the “best efforts” support model used by shared broadband services Private network with SLA‑backed availability and performance
Security Traffic crosses the public‑internet, so relies on firewalls, DDoS protection and other security measures Traffic stays off the public internet, reducing exposure and risk
Cost A dedicated line, so higher than business broadband; cost depends on provider, bandwidth and location Typically similar to DIA; cost depends on provider, bandwidth, distance and topology; often cheaper than DIA for higher bandwidths

 

Which is faster: DIA or Ethernet?

DIA offers bandwidths from 10Mbps to 10Gbps. Ethernet can go much higher: most managed Business Ethernet services can scale to 100Gbps, depending on the provider. Higher Ethernet rates exist but are mainly used in specialist carrier and data centre environments.

Both DIA and Ethernet give you dedicated bandwidth reserved for your business, so you get the full rate you purchase. And both offer symmetrical upload/download speeds.

However, end-to-end performance differs. Ethernet provides private Layer 2 connectivity between two endpoints (site-to-site or network-to-network). Traffic remains within the provider’s network unless you add an internet connection. By contrast, DIA is a direct connection to the public internet, so real-world throughput can be affected by internet routing and congestion.

Similarly, Ethernet usually delivers more consistently low latency and jitter because traffic stays on the provider’s private network. DIA latency is often stable on the access network, but it can vary depending on internet traffic.

In short, DIA is great for high-speed internet access up to 10Gbps, though actual speeds may vary slightly beyond your circuit. Ethernet is better when you need a private network with higher capacities and more consistently low latency.

How resilient are DIA and Ethernet?

Both DIA and Ethernet are highly resilient. Unlike the “best efforts” support offered by shared business broadband services, both typically include SLAs for uptime and fault repair times.

Trusted providers offer a resilient core network for both DIA and Ethernet. For example, Neos Networks DIA is supported by a meshed MPLS backbone with multiple upstream transit and peering partners to ensure service continuity. Ethernet by default stays on the provider’s controlled core network.

Beyond the core, DIA resilience may vary with the access tail. For example, FTTP/FTTC-based tails support lower bandwidths and depend on shared access infrastructure. However, if delivered over full fibre Ethernet tails, DIA can support last-mile resilience and diversity options, such as RO2.

Ethernet also supports diverse fibre routes, separacy and RO2 dual‑path engineering by design. In addition, Ethernet offers flexible topologies (point-to-point, point-to-multipoint, etc), so building in resilience at scale is easier, especially for multisite networks.

So DIA offers good resilience per site and reliable internet access for cloud and SaaS traffic. Ethernet is better for consistently resilient site-to-site connectivity across multiple locations.

How secure are DIA and Ethernet?

Both DIA and Ethernet offer stronger security than business broadband because they run over dedicated connections rather than shared public paths. But they differ in their exposure to attacks and risk.

DIA is a private circuit but connects to the public internet, so protection ultimately depends on your security stack: firewalls, traffic filtering and DDoS protection. That's why at Neos Networks we offer tiered DDoS Mitigation for DIA to suit your risk profile.

With Ethernet, traffic stays on the provider’s private domain (unless you design an internet breakout), reducing the external attack surface and exposure to threats. Security can be further hardened by using virtual local area networks (VLANs) to isolate sensitive traffic.

So DIA delivers secure internet access, as long as you have the right security controls in place. Ethernet offers stronger inherent isolation, giving you more controlled end-to-end security across every connected site.

How much do DIA and Ethernet cost?

As DIA and Ethernet use the same underlying fibre infrastructure, they often cost roughly the same at standard bandwidths. In the UK, prices typically start from a few hundred pounds a month, depending on the provider, bandwidth and configuration.

If new fibre is needed to reach your premises, both services may incur Excess Construction Charges (ECCs). And for certain Ethernet configurations, such as point-to-point (P2P) links, costs can rise significantly with the distance between two sites. That can make Ethernet more expensive than DIA for equivalent bandwidths.

In short, DIA and Ethernet costs vary widely based on bandwidth, distance, location and topology. You’ll need to weigh which option best fits your needs and budget.

Should you choose DIA or Ethernet for multi-site organisations?

Dedicated Internet Access can be a good fit for smaller multi-site organisations if most of your business traffic goes to SaaS, cloud services or the public internet. With DIA, you get guaranteed, symmetrical upload and download bandwidth up to 10Gbps and avoid routing everything back through a central HQ or data centre.

However, if you’re a larger organisation and most of your traffic flows between your sites or data centres, Business Ethernet may be the better choice. It gives you predictable low latency, higher capacity options up to 100Gbps and a private Layer 2 environment to build secure any-to-any connectivity, such as VPLS, to protect highly sensitive data.

A third option is hybrid: use Ethernet for your core network and DIA for your branch offices. If you want maximum flexibility, SD‑WAN can help route traffic intelligently across DIA, Ethernet and other access types while providing efficient direct access to cloud services.

DIA vs Ethernet: which is right for your business?

So, whether Dedicated Internet Access or Business Ethernet is right for your organisation depends on several factors, including:

  1. Organisation size: Are you a small business with one or two sites or a large, multi-site organisation?
  2. Traffic flows: Does your traffic mainly go to the internet and cloud services or between your sites?
  3. Bandwidth needs: Is 10Gbps enough, or do you need to scale to 100Gbps+?
  4. Performance demands: Can your applications tolerate internet variations in latency and jitter?
  5. Data sensitivity: Do you handle highly sensitive data that needs to stay off the public internet?
  6. Resilience needs: Do you need simple access-level resilience or end-to-end diversity across multiple sites?
  7. Scaling plans: Will you grow by adding per-site DIA links, or do you need a more flexible, multi-site topology?
  8. Cost constraints: For the network architecture, performance and scalability you require, does DIA or Ethernet better fit your budget?

Choose DIA if you:

Are a smaller organisation one or a few sites that need direct access to the internet
Rely mainly on SaaS, cloud or internet services
Need reliable, uncontended, symmetrical bandwidth up to 10Gbps
Want high performance but can tolerate some variability in latency and jitter
Can secure your data across the public internet with firewalls, filtering and DDoS protection
Can meet your resilience needs with SLA‑backed uptime and optional diverse access tails when available
Want fast deployment and a simple way to add sites to your network

Learn more about Dedicated Internet Access

 

Choose Business Ethernet if you:

Are a medium or large organisation that needs private connectivity across multiple sites
Rely on high capacity site‑to‑site or data centre links
Need reliable, symmetrical bandwidth from 10Gbps up to 100Gbps and beyond
Require consistently low latency and jitter for critical applications
Manage highly sensitive or regulated data that must stay off the public internet
Need coordinated resilience across sites, including guaranteed diverse routing such as RO2
Want a flexible, scalable multi‑site topology you can expand as you grow

Learn more about high capacity Business Ethernet

 

Not sure which is right for you?

At Neos Networks, we offer a range of high capacity, low latency business connectivity across our UK-wide network, including DIA, Business Ethernet, SD-WAN, Optical Wavelengths and Dark Fibre. If you want to discuss the best connectivity options for your business, talk to one of our experts.

We’ll be happy to make connectivity work for you.

DIA vs Ethernet: FAQs

You might also like

What is optical networking?

Optical networking underpins today's digital infrastructure, from enterprise networks to the global internet. Is optical connectivity right for your business?

Neos Networks | 11 February 2026

Get ultrafast, low latency Optical Wavelengths

 

What is optical networking?

Optical networking is a data-transfer technology that uses pulses of light to transmit data. Instead of electrical signals travelling over copper wires, data is carried as optical signals through fibre optic cables. This delivers far higher bandwidth than traditional copper-wire networks and allows data to be transmitted over extremely long distances.

Light travelling in a fibre optic cable: the light reflects at the core/cladding interface, a process known as total internal reflection

How optical networking works: diagram showing a light ray in a fibre optic cable reflected at the interface between the glass core and the cladding (total internal reflection) back into and along the cable

 

Optical fibre underpins modern IT networks, from high-bandwidth enterprise links to backbone networks, data centre interconnects (DCI) and 5G mobile backhaul. Starting at 10Gbps for standard enterprise needs, optical networks scale up to 100Gbps or 400Gbps for DCI and backbone networks, with hyperscalers now transitioning to 800Gbps and 1.6Tbps.

From local enterprise and metro networks to national and international links, optical networking forms the backbone of today’s internet and telecoms infrastructure.

How do optical networks work?

In simple terms, network equipment converts electrical data into optical signals, which are sent as pulses of light through fibre cables. At the far end, receivers convert the optical signal back into an electrical signal for processing.

To increase capacity, optical networks use Wavelength Division Multiplexing (WDM), most commonly Dense Wavelength Division Multiplexing (DWDM). DWDM allows multiple data streams to travel simultaneously over a single fibre, each carried on a different optical wavelength (colour of light). At one end, a multiplexer combines these wavelengths. At the receiving end, a demultiplexer separates them into individual data streams.

Over long distances, light signals gradually lose power and can become unreadable. To prevent this, optical amplifiers are widely used to amplify many DWDM channels simultaneously, extending reach between regeneration points.

To steer the signal, reconfigurable optical add‑drop multiplexers (ROADMs) can direct any wavelength to any output port. This means you can remotely add or drop signals, or allow them to pass through, at different sites. So you can create a flexible, mesh-based optical network without manually reconfiguring intermediate nodes.

For longer distances and higher capacities, optical networks rely on coherent optics combined with digital signal processing (DSP). By encoding and recovering more information from each wavelength, these technologies maximise both the reach and efficiency of DWDM networks.

Finally, Optical Transport Network (OTN) is commonly used at the transport layer. Standardised by ITU-T G.709, OTN “wraps” different types of traffic (IP, Ethernet, etc) into a managed frame, improving resilience and efficiency for long-distance transport.

Let’s look at some of the key components optical networks rely on.

Optical networking components

Optical fibre cables

An optical fibre cable is constructed from bundles of individual optical fibres. Each one has a core, typically made of glass, through which the light travels. Wrapped around the core is glass or plastic cladding, which prevents the light from escaping. Outer coatings protect the cable from physical damage.

Cross-section of a fibre optic cable

Cross-section of a fibre optic cable, the basic medium of optical networks, showing the glass core, cladding and various outer coatings

 

Most modern networks use single-mode fibre, which supports extremely high-bandwidth, long-distance transmission with low attenuation (signal loss). For short-distance connections, such as within a data centre building, thicker multi-mode cables are used.

Transmitters and receivers (transceivers)

Transmitters use a laser or LED light source to convert the electrical signals into light pulses to send data. At the receiving end, a photodiode receiver converts the signals back into electrical signals. Today, the standard solution is to use transceivers, a compact network device combining both functions: sending and receiving data.

Multiplexers and demultiplexers

To expand network capacity, multiplexers (also known as muxes) combine multiple optical signals onto a single fibre. At the destination, demultiplexers (demuxes) separate them again. A vital component in DWDM and CWDM networks, they enable a dramatic increase in the capacity of existing fibre infrastructure without laying additional cables.

ROADMs

In modern DWDM networks, advanced multiplexers called ROADMs dynamically manage multiple wavelengths to enable flexible routing and rapid reconfiguration. Within a ROADM, wavelength selective switches (WSS) can switch incoming optical signals to different output ports based on their wavelength. This allows you to reconfigure optical paths as needed remotely.

ROADM WSS basic function

Functional diagram showing how a ROADM wavelength selective switch (WSS) separates incoming signals into individual wavelengths and reroutes them to multiple output fibres

 

Optical amplifiers

As wavelengths degrade over long distances, amplifiers can be used to boost the optical signal without converting it back into electrical form. The most commonly used are erbium‑doped fibre amplifiers (EDFAs), which are typically placed every 70-100km on the network. Together with coherent transceivers and ROADMs, amplification enables multi‑span links from hundreds to thousands of kilometres.

Optical fibre vs copper networks

By using light rather than electrical signals, fibre networks provide higher bandwidth and lower latency over longer distances than traditional copper-based networks. Here’s a summary of how they differ.

Optical fibre vs copper networks

Optical fibre Copper
Transmission Light signals Electrical signals
Bandwidth Commonly 10/40/100/400Gbps per link, with aggregate capacity scaling to multiple terabits per second Typically up to 10Gbps over twisted-pair (Cat6A) cabling; higher using very short direct-attach copper (DAC) cabling
Distance Up to 70-100km per span on single-mode fibre without amplification; hundreds to thousands of kilometres with multi-span amplification Up to around 100m at rated speeds for twisted-pair Ethernet; DAC links are limited to a few metres
Interference Immune to electromagnetic interference (EMI) and radio frequency interference Susceptible to EMI and radio frequency interference
Latency Consistently low latency over long distances due to optical amplification and fewer active regenerations Increases over long distances because electrical signals need more frequent regeneration
Security No electromagnetic signals, so interception is significantly more difficult Electromagnetic signals can potentially be intercepted, so tapping is easier
Uses High capacity, long‑distance connectivity such as access, metro and backbone networks, data centre interconnect and mobile backhaul Short‑distance connectivity such as Ethernet LANs, legacy access networks and device connections

 

Benefits of optical networks

Optical fibre networks offer several advantages for your business, particularly compared to traditional copper-based networks. Benefits include:

  • High capacity: Delivers bandwidths from 10Gbps up to 400/800Gbps, with cutting-edge coherent optics now enabling 1.6Tbps per wavelength.
  • Low latency: Consistently low or ultra-low latency supports real-time applications like cloud services, AI, 5G and IoT.
  • Easy scalability: Quickly scale capacity by adding new wavelengths through DWDM.
  • Enhanced security: Light transmission is harder to intercept than electrical signals, improving data confidentiality.
  • Long-term cost: Wavelength-based scaling and reduced maintenance can deliver lower long-term operational costs

Despite the advantages, choosing the right optical architecture for your organisation can be challenging. Let’s consider the different types of optical networks.

Types of optical networks

Optical fibre networks can be broadly classified by their scale and the technologies they use. Among the most common are:

  • Long-haul backbone networks: From nationwide links to international subsea cables, long-haul optical networks form the backbone of global communications. Typically operated by wholesale carriers and hyperscalers, they use DWDM, coherent optics and amplification to maintain high bandwidths over very long distances.
  • Metro networks: Metro networks interconnect points of presence (PoPs) in cities or large urban regions, aggregating traffic between long-haul and access layers. Increasingly DWDM-based, metro networks often use Metro Ethernet and cover distances around 10-100km or more.
  • Data centre interconnect (DCI): DCI links connect data centres, from short cross‑campus connections to wider metro or regional routes. Optimised for high bandwidth, low latency and reliability, they often use DWDM and high-speed Ethernet (100-800Gbps). Data centre operators may opt for Dark Fibre for maximum control or managed optical wavelengths for simpler scaling.
  • Access networks: Also known as the last mile, access networks connect end users or subscribers to their service provider’s core network. They may be active optical networks (AONs), which use powered equipment and deliver dedicated point-to-point links. In the UK, examples include Openreach EAD and OSA tails for Ethernet and Optical Wavelengths. In contrast, passive optical networks (PONs) provide point-to-multipoint links to multiple subscribers, such as fibre-to-the-premises business broadband.

The above network layers aren’t mutually exclusive. Organisations often use more than one. If you’re considering high capacity optical connectivity, you’ll need to choose the right service model for your business.

Providers typically offer a range of options, depending on how much control you want over your network:

  • Wavelength services: A fully managed optical service, like our Optical Wavelengths, where the provider delivers a single wavelength with a fixed capacity (e.g. 10Gbps, 100Gbps or 400Gbps). You don’t manage any optical equipment – just plug in and go.
  • Spectrum services: You lease a block of optical spectrum (e.g. 75GHz) and can light it with your own transponders and DWDM line system equipment (or use the provider’s equipment). This gives you more control than a wavelength service with less complexity than managing an entire fibre. It can be a cost-effective stepping stone to Dark Fibre.
  • Managed Optical Fibre Networks (MOFN): Like Spectrum, either you or the provider owns and manages the DWDM line system and transponders, depending on the setup. However, the provider typically manages the service, network operations and maintenance.
  • Dark Fibre: You lease the entire fibre strand and manage everything end to end, including the optical equipment and signal transmission. It gives you maximum control with almost limitless scalability.

When choosing your model, you’ll need to consider your current and long-term use cases.

Optical networking use cases

Optical connectivity plays a critical role in various sectors. Here are some examples of real-world applications:

Industry/sector Example uses
Data centre interconnect (DCI) Linking data centres for real-time data replication, disaster recovery and fast scaling for cloud, AI and high-performance computing (HPC)
Enterprise WAN Connecting dispersed business sites and data centres with high-bandwidth, low latency links
Wholesale telecoms Delivering regional and national backhaul for mobile operators, ISPs and altnets
AI and cloud services Providing high-bandwidth connectivity for AI training, inference and hybrid or multi-cloud environments
Long-haul backbone networks Supporting hyperscale cloud services and global enterprise applications
Financial services Providing ultra-low latency links for real-time market data, trading and synchronous data replication
Media and broadcast Delivering high-bandwidth, ultra-low latency links for live broadcasts and uncompressed video transport
Manufacturing and IIoT Providing high‑bandwidth, low‑latency connectivity for sensor data, analytics and plant automation

Whatever your use case, you’ll want a network you can scale as your data demands evolve.

How scalable are optical networks?

Modern optical networks are highly scalable in both capacity and reach.

To increase bandwidth, you can add more wavelengths or use the optical spectrum more efficiently. Flexible-grid DWDM lets you pack in wavelengths more densely. Coherent optical technology boosts the data rate per wavelength. And coherent pluggable modules, such as 400ZR, make it easy to boost capacity without installing new fibre.

Similarly, you can extend network reach with optical amplification and digital signal processing (DSP). EDFA and Raman amplifiers boost signals across regional and long‑haul routes, including subsea cables. Coherent DSP compensates for signal degradation, enabling high-speed data transfer over hundreds or thousands of kilometres. And with ROADMs, you can expand your network flexibly without manually reconfiguring individual nodes.

For example, our managed Optical Wavelengths services allow you to easily scale up to 400Gbps (or higher on request) across our high capacity, UK-wide fibre network. If you need more control and maximum scalability, Dark Fibre gives you almost limitless capacity and flexibility.

Optical networking solutions

At Neos Networks, we design optical networks to meet your unique business and scale as you grow. With scalable bandwidth from 10Gbps to 400Gbps across the UK, you can connect your organisation nationwide to meet the growing data demands of AI, 5G and IoT.

If you want to discuss if optical connectivity is right for your organisation, get in touch. Or download our Optical Wavelengths brochure to find out more.

Get ultrafast, low latency Optical Wavelengths

Optical networking: FAQs

  • How do optical networks support AI workloads and high-performance computing (HPC)?

    Optical networks provide the high capacity, low latency transport needed to keep distributed GPU clusters synchronised for AI and HPC workloads. This consistent performance is essential for large-scale AI training and inference.

  • When should you choose Dark Fibre over managed optical wavelengths (“lit fibre”)?

    Choose Dark Fibre over lit fibre if you have in-house DWDM expertise and want complete control over your network. With Dark Fibre, you control the equipment, security and routing, giving you maximum flexibility and almost limitless scalability. Choose lit fibre if you need a managed service with low upfront costs, fast provisioning and predictable monthly opex. Learn more about Dark Fibre vs lit fibre.

  • What’s the difference between DWDM and CWDM?

    DWDM packs many tightly spaced wavelengths onto a fibre, giving much higher capacity for long‑haul transmission with amplification. CWDM uses wider wavelength spacing and supports fewer channels over shorter distances – a simpler, lower cost option for metro and enterprise links. Learn more about DWDM and CWDM.

  • What’s the difference between single-mode fibre (SMF) and multi-mode fibre (MMF)?

    The main difference between SMF and MMF is the core diameter and how they transmit light. SMF has a very small core (around 9µm) and carries a single light path, so it supports long-distance transmission with minimal dispersion. In contrast, MMF has a larger core (typically 50µm or 62.5µm) and supports multiple light paths. As this increases dispersion, MMF is limited to short-distance links like local area networks and building-to-building connections.

  • What are coherent pluggable modules?

    Coherent pluggable modules are optical transceivers that integrate high-speed optics and digital signal processing (DSP) into a single, compact unit to send data over long distances. Because they slot directly into compatible switches and routers, you can scale from 100Gbps to 400Gbps or higher by simply swapping modules, provided the host equipment supports the higher specification. This eliminates the need for bulky external hardware, saving both power and rack space as you upgrade.

  • How easy is it to scale optical networks from 10Gbps to 400Gbps?

    Modern optical networks are easy to scale because you can upgrade optical hardware and host equipment without replacing your underlying fibre. For example, with our Optical Wavelengths, you can increase bandwidth in simple steps from 10Gbps to 100Gbps or 400Gbps with minimal disruption.

  • How secure are optical networks?

    Optical networks are highly secure when deployed correctly. Unlike copper wires, fibre doesn’t emit electromagnetic signals, so optical networks are harder to tap. However, they’re not completely immune to attacks. For sensitive traffic, combining route diversity and Layer 1 encryption is recommended to reduce risk.

  • What makes an optical network resilient?

    A resilient network uses diverse fibre paths so traffic can be rerouted if a primary route is damaged or fails. Automatic failover mechanisms ensure traffic switches to secondary routes to maintain service if a fault or fibre breakage occurs.

  • What are the typical lead times for deploying optical connectivity in the UK?

    Deploying business‑grade optical connectivity typically takes 45-90 working days in the UK, depending on location, existing fibre availability and the need for wayleaves or civil construction works. But with Neos Networks' rapid activation, you can get up to 100Gbps Optical Wavelengths deployed in key UK data centres and exchanges in as little as 10 days.

  • What factors influence the cost of optical networking solutions?

    Optical networking costs include upfront capex like fibre installation, cables and optical hardware. Costs depend on the route design, distance and whether new fibre must be deployed or whether you can use existing infrastructure. Operational expenses include maintenance, power and ongoing support. However, with a managed service like Optical Wavelengths you can minimise upfront capex and get predictable monthly opex. With Dark Fibre, you have higher upfront capex but complete control over your network, giving you scope to minimise long-term costs.

You might also like

What is 400G optical networking?

Learn how 400G optical connectivity can help you meet the rapidly growing data demands of AI, 5G and IoT. Does your business need 400G?

Neos Networks | 30 January 2026

Get ultrafast, low latency Optical Wavelengths

What is 400G?

400G is optical networking technology that can transfer data at speeds of up to 400 gigabits per second on a single optical wavelength. It provides high-capacity bandwidth to support data-hungry use cases such as data centre interconnects, AI, 5G and IoT.

The terms 400G, 400Gbps and 400GE/400Gbe are sometimes used interchangeably, but they’re not the same:

  • 400G refers to optical transport that delivers 400Gbps capacity on one wavelength.
  • 400Gbps is the data transfer rate of these networks – 400 billion bits every second.
  • 400GE or 400GbE (400Gb Ethernet) is an Ethernet standard set by IEEE 802.3bs and used to connect switches, routers and servers at 400Gbps.

How does 400G work?

400G uses advanced modulation techniques to increase the amount of data carried over optical fibre. The technology you use depends on the distance and application:

  • For short to medium reach, PAM4 modules are common. PAM4 uses four amplitude levels to double the bits per symbol. This supports 400G over distances ranging from hundreds of metres to several kilometres, depending on the optics and fibre type.
  • For metro and long‑haul transport, 400G uses coherent optical Coherent transceivers apply formats such as QPSK or QAM and digital signal processing (DSP) to maintain clear signals over long distances.

As a result, 400G wavelengths can carry one 400GbE service or multiple lower-rate channels, depending on how they're deployed.

400G optical wavelengths

400G optical wavelength carrying either 4 x 100GbE or 400GbE

 

What standards define 400G?

No single standard defines 400G end to end. Instead, it’s based on a set of Ethernet, coherent optical and transport standards that work together. Here are some common standards in use today – a far from exhaustive list.

IEEE 802.3bs defines 400 Gigabit Ethernet (400GbE). It’s the client interface used on routers and switches to deliver 400Gbps services.

For coherent optical connectivity, OIF 400ZR specifies how to carry 400GbE traffic over DWDM fibre for data centre interconnects up to around 120km using amplified links. Building on that, OpenZR+ extends the range for longer metro and regional distances, supporting flexible bandwidths (commonly 100/200/400Gbps) up to several hundred kilometres or more.

To carry these signals reliably across networks, ITU-T G.709 (OTN) defines how client traffic like 400GbE is packaged, combined and monitored end to end, ensuring carrier-grade performance.

Together, these standards make 400G practical, scalable and interoperable across diverse network environments.

What challenges does 400G solve?

Emerging technologies like AI, 5G and IoT are fuelling unprecedented data growth. Coherent optical wavelengths, scalable from 100Gbps to 1.6Tbps, let you scale to meet this ever-growing demand.

Because 400G delivers more capacity per wavelength, you can simplify network design and cut costs. For example, one 400Gbps port costs less per bit than four 100Gbps ports and consumes considerably less power – one of several benefits of 400G.

What are the benefits of 400G wavelengths?

Deploying 400G wavelengths has several potential advantages for your network, including

  • High capacity: Bandwidth up to 400Gbps is ideal for core networks supporting 4K video streaming, AI, 5G and IoT.
  • Efficiency: Compared to aggregating multiple 100G links, 400G coherent optics reduce capex and use fewer router ports.
  • Energy saving: Consolidating traffic reduces power use and cooling needs, cutting your energy bills.
  • Scalability: 400G ZR and ZR+ coherent pluggable optics support flexible data rates (100/200/400G) and make it easy to extend DCI and metro networks.
  • Simplicity: With fewer ports, interfaces and fibre links for a given capacity, 400G reduces network complexity.

With managed 400G services, your provider operates and monitors the optical layer end to end. So you can scale up to 400G as you grow without the complexity or cost of managing the transport layer.

Who are 400G optical networks suitable for?

Global data demand is rising relentlessly, but not every business needs 400G today. It’s suitable for organisations that need to transmit huge volumes of data with low latency and high reliability.

Here are some industries and sectors that can benefit from 400G right now.

400G optical networks – typical applications

Industry/sector Example use case
Telecoms providers Core networks, 5G backhaul and edge networking to support increasingly digital lifestyles
Hyperscalers and AI data centres Data centre interconnect (DCI), cloud computing, and AI inference and training
Media companies Live 4K video streaming and content distribution
Financial services High-frequency trading and real-time transaction processing
Manufacturing Real-time control of industrial operations via the Industrial Internet of Things (IIoT)
Healthcare organisations Sharing medical images, patient records and research data

 

400G optical solutions for your business

If you think 400Gbps optical connectivity might work for you, we can help. At Neos Networks, we design our optical networking solutions to meet your unique business needs now and in the future.

Extend your reach using our high capacity, low latency UK-wide network built for Critical National Infrastructure. With Neos Networks Optical Wavelengths, you get:

  • Flexibility: Optical services scalable from 10Gbps to 100Gbps or 400Gbps, with options for multiple services between your sites
  • Nationwide availability: Connect from up to 400+ exchanges and 90+ data centres across the UK
  • Reliability: Robust, ultra-high bandwidth data transfer using the latest ROADM and DWDM technology with stringent uptime SLAs
  • Route diversity: On-net and off-net routing tailored to your business for maximum resilience
  • Low latency: Network engineered with the shortest hops for low or ultra-low latency

To find out more and discuss which optical solutions are right for you, get in touch. We’ll be happy to make optical connectivity work for your business.

Get ultrafast, low latency Optical Wavelengths

400G optical networks: FAQs

You might also like

VPLS networks explained

VPLS is a type of virtual private network that securely links multiple sites in a single domain. Could it benefit your business?

Neos Networks | 12 January 2026

Get high-bandwidth Business Ethernet

 

What is VPLS?

VPLS (Virtual Private LAN Service) is a virtual private network (VPN) that links multiple sites into a single Ethernet-based domain. It connects dispersed local area networks (LANs) into one secure, high-speed wide area network (WAN), so your remote offices act as if they share the same local network.

VPLS provides any-to-any connectivity: each site connects directly to every other site. For example, here’s Neos Networks VPLS, which leverages our high capacity, UK-wide core network:

Neos Networks VPLS

Neos Networks EPL, an Ethernet point-to-point service, showing a dedicated Ethernet link between two customer premises via the Neos Networks backbone and third-party access networks.

 

How does VPLS work?

VPLS emulates the functionality of a traditional Ethernet LAN, making distant locations behave as if they’re on the same LAN. It typically runs over your provider’s MPLS backbone, which ensures predictable paths and low latency.

The service learns MAC addresses and works like a large virtual switch, forwarding traffic to the correct destination. Every site can talk to every other one on the network without routing through a central hub, reducing latency and improving resilience.

What’s the difference between VPLS and MPLS?

The key difference between VPLS and MPLS is that MPLS is the underlying transport technology, while VPLS is a service built on top of it to extend LAN functionality:

  • MPLS operates between Layer 2 and Layer 3 of the OSI model. It uses labels to route IP packets and supports advanced Quality of Service (QoS) and traffic engineering.
  • VPLS works at Layer 2. It acts like a giant Ethernet switch across all your sites, forwarding traffic to the right destination.

MPLS Layer 3 VPNs typically use point-to-point (P2P) or hub-and-spoke design, and they don’t forward Ethernet broadcast or multicast traffic by default.

By contrast, VPLS uses pseudowires (virtual connections) to create an any-to-any network, forwarding Ethernet traffic like a LAN – ideal for business applications such as voice and video.

In short, MPLS can work well if you need granular IP routing, traffic engineering and advanced QoS across a WAN. VPLS is better if you simply want to extend your Ethernet LAN seamlessly across your sites without moving to a Layer 3 architecture.

But what if you need to combine Ethernet with other connection types?

VPLS vs SD-WAN

Both VPLS and SD-WAN connect multiple sites, but SD-WAN gives you more flexibility:

  • VPLS extends your Ethernet LAN across your sites, typically using MPLS as the transport. It works at Layer 2 and relies on predefined MPLS paths for predictable performance.
  • SD-WAN creates a software-defined overlay at Layer 3 that sits on top of any underlay – MPLS, internet or 4G/5G. It routes traffic dynamically across multiple connection types, giving you centralised control, real-time visibility and direct access to cloud services.

So if you need fast, low latency LAN-like performance for critical applications, VPLS may be right for you. If you need more flexible, hybrid connectivity with easy cloud integration, SD-WAN may be the better choice.

Learn more about SD-WAN

Is VPLS secure for my business?

VPLS is secure because it runs over your provider’s private core network, not the public internet. Customer traffic is logically separated using MPLS labels, so each organisation’s data stays isolated.

VPLS also limits external visibility. Your Layer 2 traffic is carried across the provider’s network, but your internal IP addressing and routing decisions remain within your own network.

However, VPLS doesn’t encrypt traffic by default. If traffic were compromised inside a provider’s core network, the data packets could theoretically be read.

So if you’re in a regulated sector like healthcare, finance or the public sector, you should add encryption. MACsec or IPsec overlays are commonly used to meet compliance and data-protection regulations.

Overall, VPLS provides a secure network for most business use cases. But security ultimately depends on your provider’s infrastructure. Choose a provider you can trust with a resilient, B2B-only backbone and proven track record.

What are the advantages of VPLS?

VPLS offers several benefits if you need to link multiple sites across a wide area network:

  Feature What it means for your business
LAN-like Ethernet connectivity over a WAN Extends your LAN across sites, so remote locations feel as if they’re on one local network.
Any-to-any connectivity Connects every site directly to every other without backhauling traffic.
High performance Delivers reliable, low latency connectivity over a resilient MPLS backbone.
Control Keeps routing and IP addressing within your network, reducing reliance on your provider.
Scalability Makes it easy to add new sites without deploying complex point‑to‑point links.
Simplicity Relies on familiar Ethernet technology, making it easy for your IT team to manage.
Cost Runs over established Ethernet and MPLS infrastructure, often more cost-effective than legacy WAN services.

 

Common VPLS limitations

VPLS is secure, but it doesn’t have native encryption. If you’re in a highly regulated industry, you may need to add external encryption to meet compliance requirements.

You can easily add new sites to your network using a full mesh of pseudowires – virtual point-to-point connections. But the design can become complex as the number of sites grows.

VPLS also transmits all broadcast (one-to-all), unknown unicast (one-to-one when the destination isn’t known), and multicast (one-to-many) traffic across the entire mesh. In larger deployments, this can use unnecessary bandwidth and increase the risk of traffic flooding.

So VPLS can be a great choice for small or medium-sized networks that need LAN-like performance across multiple sites. It’s less suited to very large, complex or cloud-first network architectures.

VPLS use cases

A VPLS network can be ideal for several enterprise applications, including:

  • Connecting multisite businesses: VPLS links all your offices into one Ethernet domain, so teams share resources as if they’re on the same LAN.
  • Data centre interconnects: It delivers high capacity, low latency connectivity for syncing workloads, storage and backup.
  • Financial services: Low latency and consistent performance support trading platforms and real-time data feeds.
  • Healthcare: Hospitals and clinics can share large imaging files across sites without relying on the public internet.
  • Retail: You can run centralised point-of-sale systems and inventory management across multiple branches with consistent performance.
  • Manufacturing: Factories can connect production systems and IoT devices to headquarters for real-time monitoring and control.

But whatever your sector, your VPLS network will only perform as well as your provider’s underlying infrastructure.

How to choose a VPLS provider

From initial design to long-term growth, you need a provider that can deliver the performance, scale and reliability your organisation depends on. Here are some questions to consider when weighing your options.

Network reach

Can they connect all your sites, including remote locations? Do they offer a choice of access tails?

Performance guarantees

Do they offer SLAs that support your business‑critical applications? Do they spell out the uptime and fix times you can expect?

Resilience and reliability

Do they run a resilient core network with built-in redundancy? Do they offer diverse routing and failover options across your network?

Security options

How is your traffic separated on their infrastructure? Do they support encryption methods like MACsec and IPsec?

Service flexibility

Can you upgrade bandwidth and add sites quickly? Can they integrate with MPLS, SD‑WAN or cloud services as your needs evolve?

Operational support

Do they offer proactive monitoring and fast fault resolution? Do they have 24/7, UK-based customer service and engineering teams?

Commercial transparency

Are the costs clear, with predictable pricing for access, bandwidth and contract changes? Do the contract terms give you the flexibility your organisation needs?

Track record

Do they have experience delivering complex VPLS deployments for businesses like yours? Providers may promise the earth, but can they deliver?

Ultimately, do you trust them to deliver what they promise, when they promise it?

VPLS solutions

If you’re looking for a VPLS provider you can trust to deliver, Neos Networks can help. Enterprise and public sector organisations trust us to connect Critical National Infrastructure across the UK.

To explore our high capacity, low latency Business Ethernet services – including VPLS for multisite connectivity – download our brochure.

Get high-bandwidth Business Ethernet

Not sure whether VPLS, SD-WAN or another service is right for your organisation? Get in touch. We’ll help you build a future-ready network you can scale as you grow.

VPLS: FAQs

You might also like

  • Article

What is Ethernet?

  • Ethernet
  • Article

What is point-to-point Ethernet?

  • Ethernet

EPL vs EVPL networks

EPL and EVPL both provide a secure, high capacity Ethernet connection between your sites. Which is right for your business?

Neos Networks | 24 December 2025

Get high-bandwidth Business Ethernet

What is Ethernet Private Line (EPL)?

Ethernet Private Line (EPL) is a point-to-point (P2P) connection between two locations. It provides high capacity, low latency connectivity with guaranteed bandwidth. And because it’s a dedicated line for your business, it’s inherently secure.

For example, Neos Networks EPL connects your sites using a pair of dedicated User Network Interfaces (UNIs) and our high capacity fibre network.

Neos Networks EPL: point-to-point Ethernet

Neos Networks EPL, an Ethernet point-to-point service, showing a dedicated Ethernet link between two customer premises via the Neos Networks backbone and third-party access networks.

 

What are the benefits of EPL?

EPL gives you guaranteed performance for critical site-to-site connectivity, including:

  • A dedicated connection: private P2P connectivity between two locations
  • Scalability: high capacity scalable from 10Mbps to 10Gbps+
  • Security: the connection doesn’t cross the internet, so it’s inherently secure
  • Reliability: no traffic congestion from other users ensures consistent performance
  • Low latency: no other users contend for bandwidth, so latency remains stable

In short, EPL is a high capacity P2P connection that’s ideal for mission-critical links between two sites.

EPL use cases

EPL’s reliable, P2P connectivity is ideal for critical business operations, such as:

  • Linking headquarters to branch offices for video, voice and real-time data exchange
  • Connecting data centres for data replication, backup and disaster recovery
  • High-bandwidth, latency-sensitive applications in sectors like finance and the media
  • Secure data transfer for regulated sectors like healthcare, finance and government
  • Connecting directly to major cloud service providers to ensure performance and security

What is Ethernet Virtual Private Line (EVPL)?

Like EPL, Ethernet Virtual Private Line (EVPL) offers a dedicated connection that doesn’t cross the public internet. However, EVPL supports multiple Ethernet Virtual Connections (EVCs) on a single UNI, so you can create point-to-multipoint (P2MP) links.

For example, Neos Networks EVPL allows you to securely connect a central hub to several other premises via our high capacity network.

Neos Networks EVPL: point-to-multipoint Ethernet

Neos Networks EVPL, showing a dedicated Ethernet link between one customer hub and multiple customer premises via the Neos Networks backbone and third-party access networks

 

What are the benefits of EVPL?

EVPL gives you a secure, high capacity connection like EPL, but with added flexibility. P2MP functionality means you can add sites as your business grows. It’s a cost-effective way to link several locations to a central hub – a “hub-and-spoke” model – without installing multiple dedicated lines.

EVPL use cases

EVPL can work well for organisations that need secure, scalable connectivity across multiple sites. Typical scenarios include:

  • Linking a head office to several regional branches
  • Running real-time services such as voice, video and collaboration tools across locations
  • Giving multiple sites direct, high-speed access to cloud platforms
  • Expanding your network easily without installing separate dedicated circuits

EPL vs EVPL networks

Both EPL and EVPL give you secure, high capacity connectivity you can scale up to 10Gbps or more. They combine the simplicity of private connections with the flexibility and scalability of MPLS technology.

The key difference is that EPL is point-to-point (P2P), while EVPL is point-to-multipoint (P2MP). Here’s a summary of how they differ:

EPL EVPL
Topology P2P – connects two sites directly P2MP – connects a central hub to multiple branches (hub and spoke)
EVC/UNI configuration One Ethernet Virtual Connection (EVC) per physical port (UNI) Multiple EVCs can share a single UNI
Scalability Limited: each new site needs a new dedicated line High: easily add new sites via virtual circuits without new physical lines
Bandwidth Typically up to 10Gbps+ on a dedicated line Up to 10Gbps+ on a dedicated line but shared across multiple virtual circuits
Performance Fully dedicated path for consistent performance and the lowest latency Shared bandwidth across EVCs: performance can vary slightly depending on traffic allocation
Cost Higher for networks with many branches as each one needs a dedicated line More cost-effective for multisite networks as it uses virtual circuits

 

EPL vs EVPL: which is right for your business?

If you need a simple, secure link between two sites with guaranteed bandwidth and the lowest latency, EPL could be a good choice. Choose EVPL if you want a more cost-effective solution for multiple locations – a hub-and-spoke network you can scale easily.

EPL and EVPL are both E-Line Ethernet services, as defined by the Mplify Alliance. There are various other Business Ethernet options, such as VPLS (E-LAN) for any-to-any connections or NNI (E-Access), a high capacity connection to external networks.

At Neos Networks, we offer a range of high capacity, low latency Ethernet services across our UK-wide network. If you’d like to discuss which Ethernet service is best for your organisation, get in touch. Or download the brochure to find out more.

Get high-bandwidth Business Ethernet

EPL vs EVPL: FAQs

  • What is the core difference between EPL and EVPL?

    EPL connects two sites with a dedicated point-to-point (P2P) link. EVPL can be P2P, but it also supports service multiplexing. This enables point-to-multipoint (P2MP) connectivity, so you can link one site to several others in a hub-and-spoke network.

  • What is service multiplexing in EVPL?

    Service multiplexing lets you run multiple Ethernet Virtual Connections (EVCs) over a single physical port (UNI) using VLAN tags to separate traffic. This means you can connect several sites or services without installing extra circuits, giving you greater flexibility and cost efficiency.

  • Which is more cost-effective, EPL or EVPL?

    EVPL is usually more cost-effective if you need to connect three or more sites. It uses service multiplexing with VLAN tags to run multiple virtual circuits over a single physical port, so you avoid installing dedicated lines for each location.

  • Are EPL and EVPL both secure?

    Yes, both EPL and EVPL are secure because they don’t cross the public internet, reducing exposure to cyber threats. EPL is slightly more isolated because it provides a dedicated physical path, while EVPL uses logical separation via VLAN tagging on a single physical port.

  • Are EPL and EVPL both scalable?

    Yes, you can easily scale bandwidth for both services from 10Mbps to 10Gbps or more. For network growth, EVPL offers greater flexibility because you can add multiple sites without installing new physical circuits.

  • Can EPL and EVPL support cloud connectivity?

    Yes, both services can connect directly to major cloud providers for secure, high-performance access. EPL is ideal if you need a dedicated, low-latency link to cloud services for a single location. EVPL works well when multiple sites need direct cloud access through a hub-and-spoke design.

  • How does EPL and EVPL differ from SD-WAN?

    EPL and EVPL are both private Ethernet services that give you dedicated, high capacity connectivity. In contrast, SD-WAN creates a software-defined overlay that routes traffic dynamically across multiple connection types, including MPLS, internet and 4G/5G, giving you flexibility, visibility and centralised control.

You might also like

  • Article

What is Ethernet?

  • Ethernet
  • Article

What is point-to-point Ethernet?

  • Ethernet
  • Article

What is 10 Gigabit Ethernet (10GbE)?

  • Ethernet

What is SD-WAN (Software-Defined Wide Area Network)?

Learn what SD-WAN is, how it works and why it’s transforming connectivity for cloud-first businesses. Is it right for your organisation?

Neos Networks | 23 December 2025

Connect your multisite business for the future with SD-WAN

What is SD-WAN?

SD-WAN (Software-Defined Wide Area Network) is a networking technology that uses software to bring together your sites, cloud platforms and remote users in one secure wide area network (WAN).

With centralised management and real-time visibility, you have full control over how your network performs. Designed to support cloud-first strategies and digital transformation, SD-WAN is ideal for multisite organisations that need secure, high-performance connectivity.

SD-WAN vs traditional WANs

Traditional WANs rely on fixed routing and centralised traffic paths, often over MPLS or IP-VPN.

MPLS

MPLS (Multiprotocol Label Switching) is a common underlay in traditional enterprise WANs. Providing reliable, low latency connectivity with high QoS (quality of service), it’s ideal for real-time applications like voice or video. But MPLS can be expensive and slow to scale across multiple sites.

IP-VPN

IP-VPNs use MPLS to create private, secure connections between sites in traditional WANs. While suitable for businesses with strict security and business needs, IP-VPNs rely on fixed routing, which can limit performance and scalability.

In contrast, SD-WAN allows you to integrate MPLS with other connection types, like internet and LTE/5G, giving you more flexibility and cost efficiency.

Traditional WANs typically backhaul all traffic through a central data centre, creating a potential bottleneck. SD-WAN takes a different approach, using dynamic path selection to route traffic over the best available link, enhancing resilience and user experience.

How does SD-WAN work?

SD-WAN applies Software-Defined Networking (SDN) principles to your wide area network. It creates a virtual overlay across all your connections – MPLS, internet and LTE/5G – enabling intelligent traffic steering instead of static routing.

It continuously monitors network conditions like latency, jitter, packet loss and bandwidth. Using this data, SD-WAN routes traffic dynamically along the best-performing path based on real-time performance and business intent.

Management is centralised through a single dashboard, so you can define and enforce traffic policies across all sites. This ensures business-critical applications like voice, video and SaaS tools are prioritised.

SD-WAN also enables direct access to cloud services at each site, reducing delay and improving efficiency. Security features such as encryption and firewalls are built in and can be extended with SASE for cloud-based protection across your network.

For example, Neos Networks SD-WAN is powered by the next-generation HPE Aruba Networking EdgeConnect platform, enabling centralised orchestration, direct cloud access and automated security.

Neos Networks SD-WAN

Neos Networks SD-WAN: how SD-WAN works showing links to HQ and branches, automated security, centralised orchestration and cloud services.

 

What are the benefits of SD-WAN?

SD-WAN delivers a range of benefits that go beyond connectivity:

Benefit What it means for your business
Centralised control Manage all sites, users and traffic policies through a single dashboard.
Flexibility and scalability Adapt and grow your network easily, using multiple connection types across all locations.
Real-time visibility Monitor network performance and respond instantly when needed.
Dynamic traffic steering Route traffic over the best path based on live conditions and business needs.
Application prioritisation Prioritise business-critical apps like voice, video and SaaS for peak performance.
Cloud performance Connect sites directly to cloud platforms for faster, more reliable access.
Resilience and uptime Keep teams connected with automatic failover and path conditioning.
Automated security Enforce security policies across your network, with optional SASE integration.
Cost efficiency Route traffic over the most cost-effective connection without compromising quality.

 

Who is SD-WAN for?

SD-WAN is ideal if you need secure, high-performance connectivity across multiple sites, cloud platforms and remote users. It’s a smart choice if you want to:

  • Modernise your organisation’s legacy WAN
  • Roll out cloud-first or SaaS strategies
  • Support a distributed or mobile workforce
  • Simplify network management and security

It’s especially useful for sectors where uptime, visibility and cloud performance are critical, such as:

  • Enterprise and multisite organisations: Manage complex networks with centralised control and consistent performance.
  • Financial services: Support trading, payments and data-heavy operations with resilient, secure connectivity.
  • Public sector: Deliver scalable, secure networks aligned with the UK government's Cloud First strategy.
  • Transport and logistics: Connect offices, stations and depots while supporting mobile teams and remote access.
  • Energy and utilities: Interconnect critical infrastructure and distributed operations with full visibility and control.
  • Healthcare: Enable secure access to cloud-based records, applications and remote diagnostics across multiple locations.

How does SD-WAN support SaaS and cloud services?

SD-WAN improves SaaS and cloud performance by enabling direct, secure access at each site without backhauling traffic through a central data centre. It’s built for cloud-first strategies, with centralised orchestration and policy control across all sites and users. Here’s how it helps.

Local breakout to cloud services

Sites connect directly to platforms like Microsoft Azure, AWS and Google Cloud, reducing latency and improving user experience.

Avoid backhaul bottlenecks

Routing traffic locally avoids the delays and costs of traditional WAN configurations.

Optimise SaaS performance

SD-WAN allows you to prioritise business-critical apps like Microsoft 365, Salesforce and Zoom, so users get a consistent experience.

Steer traffic dynamically

Real-time monitoring of latency, jitter and packet loss lets SD-WAN route traffic down the best-performing path.

Secure cloud access

Integrated security and optional SASE support protect users and data as they access cloud services from any location.

So is SD-WAN as secure as traditional, MPLS-based WANs?

How secure is SD-WAN?

SD-WAN can be more secure than MPLS if it’s implemented correctly. MPLS uses dedicated connections and is private by design, but it lacks native encryption and relies on separate security layers.

Modern SD-WANs build security into the network architecture:

  • Encrypted VPN tunnels (IPsec or SSL) protect data over public networks.
  • Next-generation firewalls protect against unauthorised access.
  • Zero-trust segmentation limits movement across your network.
  • Real-time detection and analytics help identify and respond to threats fast.
  • Centralised management enforces policies consistently across all locations and users.

Unlike MPLS, SD-WAN often uses the public internet, so it can present a wider potential attack surface if misconfigured. However, that risk is mitigated by implementing SD-WAN with SASE.

With encryption, firewalls and other protections combined with SASE, SD-WAN is typically more secure than MPLS alone, especially for modern, cloud-first networks.

How does SD-WAN integrate with SASE?

SD-WAN is the foundation of SASE. It provides the connectivity and traffic optimisation while SASE delivers network-wide security.

SD-WAN connects sites, cloud platforms and remote users. SASE layers on security functions like secure web gateway (SWG), zero-trust network access (ZTNA) and cloud access security broker (CASB), which helps protect SaaS and other cloud services.

Together, SD-WAN and SASE ensure security policies apply across all your locations, remote users and cloud apps without complex on-premises hardware. This integration gives you a single, unified framework for secure, reliable connectivity across your entire WAN.

How to choose an SD-WAN provider

Start by understanding your organisation’s needs. Ask yourself:

  • How many sites and remote users do you need to connect?
  • What weaknesses in your current network do you need to fix?
  • Where do you plan to scale and how quickly?
  • How important is direct access to cloud and SaaS platforms?
  • Which applications are business-critical?
  • What level of security and compliance do you require?
  • What SASE integration do you need?

Then look for a provider that offers performance, security and flexibility without adding complexity or cost. Here are some key features to look for in a service:

Network reach Can they connect all your sites, including remote or hard-to-reach locations, with diverse access options?
Scalability and flexibility Support for multiple underlay types and the ability to grow with your business
Performance and reliability Features like dynamic path control, tunnel bonding and automatic failover to keep critical apps running
Centralised control A single dashboard for real-time visibility, easy policy management and reporting
Cloud and SaaS optimisation Direct cloud access and prioritisation for tools like Microsoft 365, Zoom and Salesforce
Integrated security Edge-to-edge encryption and seamless SASE integration for consistent protection
Ease of deployment Zero-touch provisioning and automated updates to simplify rollouts
SLAs and support Clear SLAs and 24/7 expert support for guaranteed performance.

 

Above all, choose a provider with a proven track record of delivery.

Why Neos Networks for SD-WAN?

If you’re considering SD-WAN for your organisation, we can help. As a UK Critical National Infrastructure (CNI) provider with nationwide reach, we tick all the boxes above and more.

With Neos Networks SD-WAN you get:

  • UK-wide, B2B-only network: Built for CNI, forming the backbone of your WAN.
  • Flexible connectivity options: Combine Ethernet, Optical, internet and LTE/5G underlays with cloud and SaaS platforms.
  • End-to-end management: From circuit design to device management and optimisation, delivered and operated by Neos.
  • SASE integration: Works with leading providers like Zscaler, Netskope and Palo Alto Networks for cloud-based security.
  • Exceptional service: 24/7 UK-based Network Operations Centre support, dedicated account management and industry-leading NPS.
  • Trusted expertise: Over 20 years’ experience connecting UK business-critical networks.

Ready to explore SD-WAN? Get in touch. Our pre-sales team will be happy to design an SD-WAN that meets your business goals.

Connect your multisite business for the future with SD-WAN

You might also like

  • Article

What is enterprise WAN?

  • WAN
  • Article

What is Ethernet?

  • Ethernet
  • Article

DIA vs Ethernet

  • DIA

What is Ethernet?

Learn how Ethernet connects everything from small business LANs to carrier-grade regional networks. Is it right for your business?

Neos Networks | 8 December 2025

Get high-bandwidth Business Ethernet

What is Ethernet?

Ethernet is a wired networking technology that connects devices to local area networks (LANs) for fast, reliable data transfer. It works over copper or fibre cables to deliver high capacity, low latency connectivity. For example, if you plug your laptop into a router at home or work, you’re using Ethernet.

Ethernet cable plugged into a home router

An Ethernet cable plugged into a home router

 

Because it’s wired, Ethernet typically offers higher speeds, lower latency and greater security than Wi-Fi (WLAN).

How has Ethernet evolved?

Ethernet was invented in the 1970s and first standardised in 1983 with a speed of 10Mbps. Since then, it’s evolved into Carrier Ethernet, delivering up to 100Gbps or more over long distances.

Today, you’ll find Ethernet everywhere. From home LANs to large enterprise wide area networks (WANs) and metropolitan area networks (MANs), it forms the backbone of many wired networks worldwide.

How does Ethernet work?

Ethernet divides data into small chunks called frames, which are transmitted over standardised cables. Ethernet works primarily at the data link layer (Layer 2) of the OSI model, with some elements operating at the physical layer (Layer 1).

The seven layers of the OSI Model

# Layer Function
7 Application layer Enables humans or software to interact with the network through applications like file sharing, email clients and databases
6 Presentation layer Formats, encrypts and decrypts data for the application layer
5 Session layer Starts, maintains and ends connections between applications
4 Transport layer Transfers data across the network, for example, using TCP or UDP transport protocols
3 Network layer Enables communication between multiple networks and determines the data’s path, for example, applying IP addresses
2 Data link layer Manages connections between physically connected nodes on a network
1 Physical layer Transmits raw data bits over physical media like cables or wireless connections

 

At the physical layer, Ethernet typically uses twisted-pair copper or fibre optic cables to connect devices. For example, below is a twisted-pair Ethernet cable with a standard RJ45 connector.

Ethernet cable and RJ45 connector

A Cat5e twisted-pair Ethernet cable with a standard RJ45 connector

 

At the data link layer, Ethernet defines the protocols used to transmit data between connected devices as follows.

MAC addresses

Ethernet uses 48-bit Medium Access Code (MAC) addresses. MAC addresses uniquely identify devices on the network.

Ethernet frames

To transmit data, Ethernet packages data into frames containing the source and destination MAC addresses, error-checking data and other standard information. Only devices on the network with the matching destination MAC address will process the frame.

Collision handling

In traditional Ethernet, if two devices transmit data simultaneously, a collision occurs. To prevent this, devices “listen” to the network to see if it’s free. They use CSMA/CD (Carrier Sense Multiple Access with Collision Detection) – an algorithm that allows frames to be retransmitted without collisions.

Today, modern Ethernet networks use switches to forward frames to MAC addresses on the network, reducing collisions and enhancing performance.

In addition, full-duplex mode allows devices to send and receive data simultaneously, doubling the network bandwidth. The total available bandwidth of an Ethernet network depends on the standard used.

Ethernet standards

Ethernet was first standardised in 1983 as IEEE 802.3. At that time, it used thick coaxial cables to transmit data at just 10Mbps over a few hundred metres. All devices shared one channel on a single cable.

Today, Ethernet uses twisted pair or fibre optic cables with switches to forward data efficiently. Here are some key milestones in the evolution of Ethernet standards:

  • Original Ethernet (10BASE): 10Mbps (early 1980s)
  • Fast Ethernet (100BASE): 100Mbps (mid-1990s)
  • Gigabit Ethernet (1000BASE): 1Gbps (late 1990s)
  • 10 Gigabit Ethernet (10GBASE): 10Gbps (early 2000s)
  • 40/100 Gigabit Ethernet (40GBASE/100GBASE): 40Gbps and 100Gbps (2010)

Common Ethernet standards

(Note: Multimode fibre optic cables divide optical wavelengths into multiple paths for different channels; single-mode fibre cables feature a single path for longer distances.)

Ethernet standard IEEE specification Max speed Max distance Common name
10BASE5 802.3 10Mbps 500m (coaxial) Thicknet
10BASE2 802.3a 10Mbps 185m (coaxial) Thinnet
10BASE-T 802.3i 10Mbps 100m (twisted pair) 10 Megabit Ethernet
100BASE-TX 802.3u 100Mbps 100m (twisted pair) Fast Ethernet
100BASE-FX 802.3u 100Mbps 2km (fibre optic, multimode) Fast Ethernet
1000BASE-T 802.3ab 1Gbps 100m (twisted pair) Gigabit Ethernet
1000BASE-SX 802.3z 1Gbps 550m (fibre optic, multimode) Gigabit Ethernet
1000BASE-LX 802.3z 1Gbps 5km (fibre optic, single-mode) Gigabit Ethernet
10GBASE-T 802.3an 10Gbps 100m (twisted pair) 10 Gigabit Ethernet
10GBASE-SR 802.3ae 10Gbps 300m (fibre optic, multimode) 10 Gigabit Ethernet
10GBASE-LR 802.3ae 10Gbps 10km (fibre optic, single-mode) 10 Gigabit Ethernet
40GBASE-T 802.3bq 40Gbps 30m (twisted pair) 40 Gigabit Ethernet
40GBASE-SR4 802.3ba 40Gbps 150m (fibre optic, multimode) 40 Gigabit Ethernet
40GBASE-LR4 802.3ba 40Gbps 10km (fibre optic, single-mode) 40 Gigabit Ethernet
100GBASE-SR10 802.3bj 100Gbps 100m (fibre optic, multimode) 100 Gigabit Ethernet
100GBASE-LR4 802.3bj 100Gbps 10km (fibre optic, single-mode) 100 Gigabit Ethernet

 

The latest Ethernet standards support speeds up to 400Gbps (IEEE 802.3bs), and 800Gbps and 1 Terabit Ethernet are currently under development.

Most Ethernet-enabled devices are backwards compatible, but your network will only run at the speed of its slowest component.

Get high-bandwidth Business Ethernet

Ethernet components

Ethernet relies on standardised components that work together to enable data transfer. Here are some of the key elements of an Ethernet network:

  • Network interface cards (NICs): Also known as network adapters, NICs are built into devices like servers, computers and printers and allow them to “talk” to an Ethernet network.
  • Ethernet cables: Cables connect devices to the network. Twisted-pair Category 5e (Cat5e) and Category 6 (Cat6) cables are commonly used for Gigabit Ethernet; fibre optic cables are used for longer distances.
  • Ethernet ports and RJ45 connectors: Ports are the physical sockets on devices that Ethernet cables plug into using a standard RJ45 connector (see image above).
  • Switches: Switches connect multiple devices to a network and direct traffic to the right device, reducing data collisions and improving network efficiency.
  • Hubs: A legacy component, hubs connect multiple devices to a network but broadcast data to all the devices, so they’re less efficient than switches.
  • Routers: Links your LAN to other networks or the network, assigning IP addresses and managing traffic.

As components are standardised, Ethernet networks are often “plug-and-play” with little or no setup required – one of several advantages of Ethernet connectivity.

Why use Ethernet connectivity?

Ethernet is widely used in business networks because it’s fast, reliable and easy to scale. Here are the main benefits of Ethernet.

Speed

Business Ethernet services typically provide low latency and high-speed data transmission up to 100Gbps+ with symmetrical upload/download speeds. That’s ideal for large file transfers and real-time tasks like video conferencing, cloud applications or other mission-critical networks.

Cost

Ethernet components are widely available, relatively cheap, and easy to install. So you get high capacity connectivity at a relatively low cost.

Scalability

It’s easy to scale up Ethernet bandwidth as your network grows. And you can usually add devices by cables and switches with minimal setup.

Reliability

Ethernet is a dedicated, wired connection that is less susceptible to interference or disruption than wireless connections. In addition, business Ethernet services typically offer SLAs that guarantee network uptime.

Resilience

Ethernet offers resilience and diversity options to keep you connected if part of the network fails. Options include RO2, dual-homing and shadow VLANs, which provide added protection for mission-critical services.

Learn more about Ethernet resilience

Security

Compared to wireless LANs (WLAN), Ethernet networks are less vulnerable to unauthorised access. Physical ports are easier to secure than Wi-Fi access points.

Interoperability

Ethernet is a global standard, so almost all computers, printers and network storage devices support it. That means easy compatibility across vendors.

So Ethernet is fast, reliable and easy to scale, but it costs more than a simple business broadband connection. How do they differ?

Business Ethernet vs business broadband

Ethernet is fundamentally a Layer 2 technology that connects devices or sites over a dedicated, leased line. It can link a single business site or multiple sites and also provide internet access: it’s the foundation for Dedicated Internet Access.

In contrast, business broadband is a Layer 3 service. It’s simply an IP-based internet connection delivered over shared, mass-market infrastructure.

Here’s how business Ethernet and business broadband compare:

Feature Business Ethernet (leased line) Business broadband
Connection type Dedicated, point-to-point, point-to-multipoint or any-to-any link exclusively for your business site(s) Internet connection shared with other users in the area
Bandwidth Guaranteed, uncontended bandwidth Bandwidth varies depending on local network traffic
Speed Symmetrical upload/download speeds up to 100Gbps Asymmetrical speeds, typically up to 1Gbps
Reliability High reliability with enterprise uptime SLAs Lower reliability, “best effort” service
Scalability Easy to upgrade as your organisation grows Limited by local network capacity
Latency Consistently low Can fluctuate depending on network load
Installation Longer install times – engineer build required Quick install over existing broadband infrastructure
Cost Higher monthly cost as it’s a dedicated service Lower cost

 

Ethernet over FTTP/FTTC

If you want some of the benefits of Ethernet but at a lower bandwidth and cost, you can connect your business with Ethernet over FTTP or FTTC (EoFTTx).

FTTP (Fibre to the Premises) uses pure fibre from the exchange to your site for higher speeds. FTTC (Fibre to the Cabinet) combines fibre to your local street cabinet with copper to your premises for a lower-cost option.

Neos Networks EoFTTx offers bandwidths from 80Mbps to 1Gbps – ideal for smaller organisations that need reliable connectivity at a lower price. For larger organisations, our EoFTTX NNI enables you to take an NNI at your chosen data centre and run any Ethernet services over it.

Learn more about EoFTTx

Business Ethernet use cases

Given Ethernet’s speed, reliability and wide availability, it’s commonly used by organisations that need consistent, high capacity connectivity for critical operations.

Typical use cases include:

  • Multisite networking: secure links between offices (WANs), data centres (DCIs) and remote locations.
  • Video conferencing and collaboration: enabling smooth, real-time communication without delays.
  • Cloud and SaaS: providing dependable access to hosted applications and services.
  • E-commerce and ERP systems: maintaining accurate, up-to-date data for transactions and inventory.
  • Data-heavy workloads: supporting AI, IoT and analytics that demand high capacity.
  • Real-time operations: enabling financial trading, media streaming and healthcare systems.

Ethernet services can be as simple as a point-to-point connection or as flexible as an any-to-any network, depending on your use case. Let’s look at the main service types.

Types of business Ethernet services

Various Carrier Ethernet services provide high-bandwidth data transmission for enterprise applications. Below are the main types of Carrier Ethernet services, as defined by Mplify:

Carrier Ethernet services

Service type Topology Description
E-Line (Ethernet Line Service) Point-to-point or point-to-multipoint Directly connects two business sites
E-LAN (Ethernet LAN Service) Multipoint-to-multipoint Allows multiple sites to exchange data directly with each other
E-Tree (Ethernet Tree Service) Rooted multipoint Connects a central site to multiple sites, but the “leaves” (branch nodes) of the tree don’t exchange data directly
E-Access (Ethernet Access Service) Network-to-network Provides a local access connection to another carrier’s network

 

Good network service providers typically offer various business Ethernet services based on these standards.

Get high-bandwidth Business Ethernet

Choosing a business Ethernet service

Which service is right for your business depends on your specific needs. At Neos Networks, we offer a range of business Ethernet services you can scale up to 100Gbps. Here are some services we can configure for your business.

Point-to-NNI

If you’re a larger customer and want to connect multiple premises back to your network, an Ethernet network-to-network interface (NNI) could be ideal. With point-to-NNI connectivity, you can connect your sites as efficiently as possible at bandwidths you can scale.

Ethernet point-to-NNI

Point to NNI Ethernet showing a customer NNI connecting to multiple customer premises via Neos Networks national fibre network and third-party access tails

 

Point-to-point Ethernet

If you need a high-bandwidth, low latency connection between two locations, Ethernet Private Line (EPL) is a good choice. A kind of E-Line service, EPL provides Ethernet point-to-point (P2P) connectivity between a pair of dedicated user network interfaces (UNIs).

EPL point-to-point Ethernet

Example of an Ethernet point-to-point service, Neos Networks EPL, showing a direct, dedicated Ethernet link between two customer premises via the Neos Networks cloud and third-party access networks.

 

Point-to-multipoint Ethernet

If you want to connect multiple sites, Ethernet Virtual Private Line (EVPL) may be for you. EVPL is a type of E-Line service that supports point-to-multipoint (P2MP) connectivity by enabling multiple Ethernet Virtual Connections (EVCs) per UNI.

EVPL point-to-multipoint Ethernet

Example of an Ethernet Virtual Private Line service, Neos Networks EVPL, showing a dedicated Ethernet link between one customer hub and multiple customer premises via the Neos Networks cloud and third-party access networks

 

Any-to-any Ethernet

If you need flexibility to link any of your premises to any other, Virtual Private LAN Service (VPLS) could be ideal. VPLS connects multiple sites in a single domain through IP routing or MPLS.

VPLS any-to-any Ethernet

VPLS any-to-any Ethernet network

 

Overall, which Ethernet service is right for your business depends on your specific use case, budget, and plans for future growth. If you’d like to discuss which is best for your business, get in touch. We’ll be happy to make Ethernet work for you.

Get high-bandwidth Business Ethernet

Ethernet FAQs

  • How fast is Ethernet today?

    The latest Ethernet standards support speeds from 10Mbps up to 400Gbps, with 800Gbps and 1Tbps under development. Most business services scale between 100Mbps and 100Gbps, depending on your network design and hardware. Your network will only run at the speed of its slowest component.

  • Does Ethernet support symmetrical upload and download speeds?

    Yes. Ethernet is a synchronous technology, so upload and download bandwidths are identical. That’s a key advantage over business broadband, which usually offers faster downloads than uploads. Symmetrical bandwidth makes Ethernet ideal for real-time applications like video conferencing and cloud services.

  • How secure is an Ethernet network?

    Ethernet is inherently more secure than wireless because it’s a physical, wired connection. Access requires plugging into a port, which makes unauthorised entry harder than over Wi-Fi. Business Ethernet adds further protection with private circuits and optional encryption for sensitive data.

  • Is Ethernet suitable for multisite businesses?

    Yes. Ethernet is designed to connect multiple sites securely and efficiently. Services like E-Line, E-LAN and VPLS allow point-to-point, point-to-multipoint or any-to-any connectivity, making it ideal for data centre interconnects and enterprise wide area networks (WAN), including SD-WAN.

  • Can Ethernet support cloud and SaaS applications?

    Yes. Ethernet gives you high bandwidth, low latency and reliability for fast, stable access to cloud platforms and SaaS tools. Its symmetrical upload and download bandwidth is perfect for real-time apps and large file transfers.

  • What resilience options are available for Ethernet?

    Business Ethernet services include resilience features to keep you connected if part of the network fails. Options include dual-homing, diverse routing and RO2 (Resilience Option 2), which uses separate paths for added protection. Some providers also offer shadow VLANs and MPLS fast re-route for rapid failover.

  • How does EPL differ from EVPL and VPLS?

    EPL (Ethernet Private Line) gives you a dedicated point-to-point link between two sites. EVPL (Ethernet Virtual Private Line) also uses E-Line but supports multiple virtual connections from one site to others.

    VPLS (Virtual Private LAN Service) is different: it creates an any-to-any Ethernet network so all your sites can communicate directly.

  • How does Ethernet pricing compare to other connectivity options?

    Ethernet is generally more cost-effective than other high capacity, dedicated connectivity option. It scales easily from low to very high bandwidths without changing the underlying technology. While it costs more than business broadband, Ethernet offers far higher reliability, symmetrical speeds and guaranteed performance, making it a better long-term choice for mission-critical applications.

  • How quickly can Ethernet be installed?

    Installation times vary by service type and location. Standard Business Ethernet can take several weeks because it needs a dedicated build. Ethernet over FTTP or FTTC uses existing fibre infrastructure, so it’s much faster – often delivered in half the time.

You might also like

  • Article

What is 10 Gigabit Ethernet (10GbE)?

  • Ethernet
  • Article

What is point-to-point Ethernet?

  • Ethernet
  • Article

What is Metro Ethernet?

  • Ethernet

What is RO2 (Resilience Option 2) in networking?

Discover how RO2 can help protect your business from costly network downtime.

Neos Networks | 14 November 2025

Business Ethernet

Resilient, high-bandwidth connectivity for your business

What is RO2?

RO2 (Resilience Option 2) is an Openreach service that provides two physically separate fibre paths in the last mile, the access network connecting your business to your network service provider’s core network. Combined with the right failover, RO2 helps protect against single points of failure. If one path fails due to cable damage, roadworks, exchange faults or node outages, traffic automatically switches to the second.

RO2 offers end-to-end physical separation from building entry to exchange node, giving a higher level of protection than standard dual-circuit setups. It’s the only Openreach-supported method that guarantees diverse routing between two circuits, and it’s available for both Ethernet and optical services.

As a key part of network resilience strategies, RO2 is used by enterprises, financial institutions and other data-intensive organisations where uptime is critical.

How does RO2 work?

RO2 provides two completely separate fibre routes between sites: a primary and a secondary path. Each circuit is built through different ducts, cables and building entry points wherever possible, so a single local incident won’t take both routes down.

Each circuit terminates in its own Network Terminating Equipment (NTE) at both ends, meaning there are no shared physical components between the two paths.

RO2 (Resilience Option 2)

RO2 (Resilience Option 2) diagram showing separate primary and secondary fibre routes connected to different NTEs at each network endpoint.

 

Where available, circuits are also routed via different Openreach access nodes or exchanges, protecting your service from local exchange or node failures.

You or your connectivity provider decides how traffic moves between the two routes. Most businesses use automatic failover built into routers, firewalls or SD-WAN controllers. If the primary circuit is disrupted, traffic automatically switches to the secondary.

Protection should also continue through the provider’s core network, avoiding shared backhaul routes.

For example, with Neos Networks Business Ethernet, your network is routed through our diverse MPLS network. Self-healing and rerouting mean resilience is built in. For optical connectivity, you can configure diverse routes across our core network.

Because RO2 involves separate routing, a site survey is always needed to confirm viable routes and any excess construction charges (ECCs) before installation.

Why does RO2 matter for your business?

In 2024, 72% of senior UK IT decision-makers said that inadequate resilience led to disruption or downtime.

Downtime costs money. It can disrupt operations, break SLAs and damage reputations. Even short outages can affect customer experience, compliance or productivity.

RO2 matters because it’s the only Openreach-supported way to guarantee true end-to-end diversity between two circuits.

Ordering two circuits separately (even from different providers) doesn’t guarantee resilience. They often share ducts, exchanges or backhaul routes. As Openreach controls the access network, only RO2 can ensure full physical separation at the infrastructure level.

If your operations are mission-critical, time-sensitive or regulated, RO2 provides assured physical diversity in the Openreach access network.

What are the benefits of RO2?

Here’s how RO2 strengthens your network and supports your business.

Benefit What it means for your business
End-to-end physical diversity No shared ducts, cables or exchanges, from building entry to core network. Eliminates single points of failure across your wider network.
Maximum uptime and business continuity Minimises network disruption during faults, engineering works or local outages, helping to prevent costly downtime.
Supports compliance and SLAs Underpins trust and brand reliability for always-on services. Supports SLAs and regulatory uptime obligations in sectors like finance, health care and government.
Flexible design options Can be configured for the same site, split-site or dual-site resilience (see below for details). Available across Ethernet and optical services to suit different bandwidths and latency requirements.
Long-term value May require higher upfront installation cost but mitigates potential future losses from outages.

 

How to implement RO2 with your provider

When planning RO2 with your connectivity provider, it’s important to know what to ask for. Here are some key questions to confirm before going ahead.

What kind of resilience do you need?

Start by identifying where your network is most vulnerable. Do you need complete end-to-end diversity? Your provider should help assess which areas need diversity most based on your risk profile, network setup and location – from your local site to the access node, exchange and core network.

Which services will you use RO2 for?

RO2 is available for a range of Ethernet and optical services. Your provider should help you choose the right product based on bandwidth, latency and site requirements.

Here’s how RO2 strengthens your network and supports your business.

Service type Use case
Ethernet Access Direct (EAD) Most common RO2 deployment. Suitable for high capacity business connectivity.
Ethernet Backhaul Direct (EBD) Used for aggregating multiple Ethernet circuits. RO2 adds resilience to backhaul routes.
Optical Spectrum Access (OSA) Ideal for ultra-low latency and high-bandwidth applications. RO2 ensures physical diversity.
Optical Spectrum Extended Access (OSEA) Extends OSA reach. RO2 protects long-distance optical connectivity.

 

How should you configure the A-end and B-end of your connection?

RO2 supports three configurations depending on your site layout and resilience needs:

  • Same-site configuration: Both circuits run between the same A-end and B-end locations.
  • Split-site configuration: Circuits share the same A-end but terminate at two different B-end sites.
  • Dual-site configuration: Circuits terminate at different A-end and B-end locations.

Your provider should help you choose the right setup based on your business continuity strategy and network design.

Can your provider guarantee full physical separation?

Ask for confirmation that both circuits take completely independent routes. Only RO2 delivered by Openreach guarantees this level of resilience, avoiding shared ducts, exchanges and backhaul routes.

Will the circuits be routed through different Openreach access nodes or exchanges?

RO2 can route circuits via separate Openreach exchanges or access nodes, depending on availability and location. This protects you against local exchange or node failures.

Will each circuit have its own Network Terminating Equipment (NTE)?

Each RO2 circuit should terminate on independent NTEs, so a single equipment fault doesn’t affect both services.

How is traffic switched between the primary and secondary circuits?

Will you or your provider manage the failover? Most organisations use automatic failover through routers, firewalls or SD-WAN.

RO2 vs other diversity options

RO2 gives you route and exchange diversity in the access layer, removing single points of failure between your sites and the network. But it’s just one part of a wider Ethernet resilience strategy.

To build complete end-to-end resilience, combine RO2 with other design principles such as dual-homing, router redundancy, shadow VLANs, DDoS resilience and core network resilience.

Learn more about Ethernet resilience and diversity

Is RO2 right for your business?

If downtime isn’t an option for your business, RO2 is worth considering as part of your wider network resilience strategy. It’s ideal for:

  • Financial services, healthcare, utilities and media organisations that rely on always-on connectivity and strict uptime SLAs
  • Data centre operators and cloud providers needing resilient, high-capacity last-mile links
  • Public sector and emergency services where network continuity supports essential services and compliance
  • Organisations with mission-critical operations where even short outages can cause major disruption or financial loss

If you’re exploring resilience options for your network, Neos Networks can help. As a UK Critical National Infrastructure provider, supporting everything from energy to emergency services, we understand RO2 – the vital role it plays in delivering resilience for critical networks.

With over 600 PoPs and 90 data centres on-net, we deliver true end-to-end diversity across Ethernet and optical services nationwide. Our pre-sales team can help design a resilience solution that fits your network architecture and business goals.

Business Ethernet

Resilient, high-bandwidth connectivity for your business

You might also like

  • Article

What is Ethernet?

  • Ethernet
  • Article

DIA vs Ethernet

  • DIA

Enabling AI: is fibre the overlooked foundation of the UK’s AI future?

New research with 300 data centre operators, enterprises and local government leaders shows a clear consensus: without new high capacity fibre backbones, the UK won’t achieve its AI ambitions.

The UK’s ambition – AI superpower

The UK is determined to be an AI superpower. The government’s AI Opportunities Action Plan and AI Growth Zones are accelerating research, new data centres and advanced computing nationwide.

Billions of pounds in investment are already pouring in. The US-UK Technology Prosperity Deal alone commits £31bn from leading tech and AI firms.

But there’s a missing link. Without ultra-low latency, high-bandwidth fibre, data can’t move at scale and AI growth stalls. So how ready are the UK’s fibre networks for AI?

We surveyed 300 data centre operators, enterprise IT leaders and local government stakeholders. Their responses reveal both the risks and the opportunities ahead.

The fibre challenge – what the research shows

The findings highlight a shared concern: fibre availability is a critical barrier to AI growth:

  • 82% of data centre operators have delayed site builds or expansions due to fibre availability.
  • 89% of local government stakeholders report digital projects delayed by fibre gaps.
  • 45% of enterprises cite fibre as the key bottleneck holding back AI and digital infrastructure.

Almost half of local authorities (46%) say their region isn’t fully ready to support AI and data centres.

Yet regional hubs are emerging as the next growth engines. The Midlands and the North are fast becoming corridors of AI investment. Scotland and the North of England are uniquely positioned as a bridge between hyperscale clusters in North America and Europe, especially in the Nordics, where abundant renewable energy is driving growth.

Graphic showing where survey respondents expect data centres to be built in the UK, showing 28% for North of England and Scotland; 17% Midlands; 9% Wales & N. Ireland; 10% South West England; 13% South East; and 23% Greater London.

AI is also pushing computing to the edge. By 2030, almost all data centre operators (97%) expect up to half of their UK capacity to sit at the edge, dispersed across regional and local sites.

How can these growing hubs be connected? Without resilient, high capacity fibre between regions, the UK risks falling behind in the global AI race. But that risk also highlights a once-in-a-lifetime opportunity.

The fibre opportunity – building the foundation of UK AI

From data centres and enterprises to local government, the leaders we surveyed are united on the way forward: new fibre backbones are critical to unlocking AI growth.

Almost all respondents (95%+) said these projects would boost AI and data centre growth. And more than half of local authorities said such projects would be transformative for their regions.

The opportunity is clear: building national fibre backbones is essential for the UK to achieve its AI ambitions.

Download the full report for insights on:

  • Why fibre is the foundation of the UK’s AI future
  • How data centre operators, enterprises and local authorities see the risks and opportunities
  • The role of new backbone projects in transforming UK competitiveness

Ethernet resilience and diversity: building a reliable network for your business

Strengthen your UK business network with RO2, shadow VLANs and more.

Neos Networks | 26 September 2025

Business Ethernet

Resilient, high-bandwidth connectivity for your business

What is Ethernet resilience?

Ethernet resilience is the ability of your Ethernet network to maintain or quickly recover service when faults, failures or cyberattacks occur.

You can achieve resilience by design. That means building in diversity, redundancy and failover:

  • Diversity (separation): two or more independent paths, such as fibre routes entering your building through different ducts.
  • Redundancy: spare capacity or duplicate components that take over if one fails, for example, dual routers or twin power supplies.
  • Failover: the mechanism that switches traffic from a failed component or route to the backup.

Failover plays a vital role. Without it, diverse paths or spare capacity won’t protect your business when the primary service fails.

Why does Ethernet resilience matter for your business?

Ethernet resilience is vital because network outages can cost you dearly. In 2024, 72% of senior IT decision makers said that resilience problems led to disruption or downtime. And over 50% of businesses admitted suffering substantial financial losses after a major resilience disruption.

Strong resilience minimises downtime and disruption. By keeping your network running, it ensures business continuity when disaster strikes. But it’s not just about money.

It protects your reputation. Customers expect you to be available, and repeated outages can quickly erode trust.

It also underpins disaster recovery and data protection. In 2024, 43% of UK businesses reported experiencing a cybersecurity breach or attack. With a resilient network design, you can restore services quickly and reduce the risk of data loss.

And it supports growth. A resilient network keeps your team connected and productive, giving your business the stability it needs to thrive.

To build resilience, you first need to understand the threats your Ethernet network faces.

What are the main threats to Ethernet connectivity?

Cyberattacks overtook hardware failures as the leading cause of IT outages in UK businesses in 2024, accounting for 24% of incidents, up from just 10% in 2018. However, physical risks, such as fibre duct damage from roadworks, deliberate cable cuts, or infrastructure faults, remain common threats to Ethernet connectivity.

Here’s a summary of the main threats:

Threat Impact on your Ethernet network
Cyberattacks From ransomware to phishing, malicious actors can cause downtime, data loss and reputational harm.
DDoS attacks Attackers can overwhelm your network with traffic, disrupting service availability unless defences are in place.
Outdated systems or devices Legacy equipment with old firmware or insecure protocols creates vulnerabilities and instability.
Physical disruption / WAN link failures Fibre cuts, duct damage, or exchange faults can take you offline instantly.
Insufficient bandwidth Congested links slow performance and risk outages during peaks or heavy workloads.
Equipment misconfiguration Human error in setup or maintenance remains a significant cause of downtime.

 

That's why you need resilience designed into your Ethernet network.

Resilience options for your business Ethernet

Resilience depends on removing single points of failure. That means building in diversity, redundancy and failover across every layer of your Ethernet service.

Resilience Option 2 (RO2)

Resilience Option 2 (RO2) provides true route diversity in the last-mile/access network connecting your business to your provider’s infrastructure. RO2 provides two circuits with separate physical routes into your local site, for example, different ducts, cabling or entry points. This protects against physical damage, like fibre cuts and roadworks, one of the most common causes of downtime.

Without RO2, even if you order two circuits from Openreach or through different providers, Openreach will install via the shortest available path. So the two circuits will often share the same local routing.

RO2 provides local route diversity at the Physical Layer (Layer 1 of the OSI model). Paired with the right routing or redundancy protocols, it enables seamless failover: if one circuit goes down, the other seamlessly takes over.

Dual-homing

Dual-homing means connecting to two points of presence (PoPs) or network-to-network interfaces (NNIs). Even if you’ve bought RO2, both circuits may still terminate at the same provider PoP or NNI. That means a single point of failure.

Two separate hand-off points remove that risk: if one PoP fails, your traffic routes via the other.

Router redundancy

A third resilience option is redundant routing at the customer edge – where your premises connects to the access network. Even with RO2 and dual-homing, your customer premises equipment (CPE) or router can be a single point of failure. If your router or default gateway fails, it can cut off your whole site.

Using a virtual default gateway protocol like VRRP, a backup router automatically takes over if your primary router fails.

Shadow VLANs

A fourth option is shadow VLANs, which provide resilience at the Data Link Layer (Layer 2). A VLAN (virtual local area network) lets providers run independent, isolated connections over shared infrastructure, keeping your traffic safe and separate.

With shadow VLANs, a backup VLAN runs alongside your primary one. If the main data link fails, traffic can be redirected to the secondary data link using the shadow VLAN. That protects against faults or misconfigurations inside the provider’s Ethernet platform, adding a second, independent logical path through the provider’s core.

DDoS resilience

The physical and logical diversity options above strengthen your Ethernet connectivity, but they won’t protect your internet access if your connection is overwhelmed by malicious traffic. That’s where DDoS resilience comes in.

With Dedicated Internet Access (DIA), leading providers offer DDoS protection that filters or “scrubs” attacks before they reach your network. This helps ensure you stay online even under DDoS attack, protecting your business from one of the most common causes of downtime.

Core network resilience

The resilience of your Ethernet connection is only as strong as your provider’s core network. Leading carriers invest in high capacity, low latency backbones engineered for resilience.

For example, Neos Networks’ UK-wide core network uses a resilient mesh topology with diverse fibre routes. MPLS and IP fast reroute keep traffic moving seamlessly if a path goes down. Meanwhile, our Network Operations Centre (NOC) monitors the network 24/7, detecting and resolving faults before they affect your service.

All the above options can add resilience to your Ethernet network. The challenge is choosing the right mix for your business. That’s where Neos Networks can help.

Ethernet resilience and diversity solutions

At Neos Networks, our Business Ethernet services are built on our high capacity, UK-wide core network designed for Critical National Infrastructure. Scalable up to 100Gbps, they come with a full range of resilience options, from RO2 to shadow VLANs and more.

Business Ethernet

Resilient, high-bandwidth connectivity for your business

If you’re looking for Dedicated Internet Access (DIA), we provide services up to 10Gbps with resilience options including RO2, dual-homing and DDoS protection – all delivered using Ethernet as an underlay across our nationwide core network.

Not sure what connectivity is right for your mission-critical network? Get in touch. We’ll help you choose the resilient connectivity your business needs.

You might also like

  • Article

What is Ethernet?

  • Ethernet
  • Article

What is 10 Gigabit Ethernet (10GbE)?

  • Ethernet
  • Article

DIA vs Ethernet

  • DIA

How to prevent DDoS attacks – advice for UK businesses

DDoS attacks are rising across the UK. Learn how to detect and stop them before they disrupt your business.

Neos Networks | 7 July 2025

DDoS Mitigation for DIA

Get Dedicated Internet Access with automated, 24/7 DDoS protection

What’s a DDoS attack?

A distributed denial-of-service (DDoS) attack is a cyber threat that aims to make your website, server or online service unavailable by flooding it with excessive traffic from multiple sources. Like a traffic jam on a digital motorway, legitimate users get stuck behind a flood of fake or harmful requests – malicious traffic that blocks access to your services.

DDoS attacks block legitimate users

E-Line Carrier Ethernet showing a direct point-to-point connection between two locations across a provider's network

There are different types of DDoS attacks, often targeting different network layers. Volumetric attacks flood a site with traffic to consume bandwidth. Protocol attacks exploit weaknesses in how network protocols handle connections. Application-layer attacks mimic real users and overwhelm specific application functions.

Each requires a different mitigation approach, and many modern attacks combine methods for maximum impact.

Learn more about types of DDoS attacks

Why do DDoS attacks happen?

DDoS attackers may target your business for a variety of reasons:

  • Extortion: Attackers may demand a ransom, often in cryptocurrency, threatening to keep you offline until you pay up.
  • Sabotage: A rival business might launch DDoS attacks to undermine your services and gain a competitive advantage.
  • Hacktivism: Individuals or activist groups may use DDoS as a political protest to draw attention to their cause.
  • Diversion: A DDoS attack can act as cover for more serious threats like data breaches or deploying malware on your network.
  • Revenge: Disgruntled staff, former employees or customers might attack your systems out of personal grievance.

Understanding the motivation behind an attack can help shape how you respond. For example, extortion may require law enforcement or legal action, while politically motivated attacks might call for a PR response. But whatever the cause of a DDoS attack, you need the right technical defences to detect and stop it.

How to prevent DDoS attacks?

Stopping DDoS attacks involves a combination of early detection, automated mitigation and reducing DDoS attack vulnerabilities. Here’s how they work together.

DDoS detection

Early detection is vital to stopping a DDoS attack before it disrupts your business. Modern DDoS protection services continuously monitor traffic using various techniques to detect attacks, including:

  • Deep Packet Inspection (DPI) scans headers and payloads in real time, identifying malicious packets with greater precision.
  • Out-of-band monitoring uses flow data and telemetry from network devices to spot anomalies in traffic patterns, such as sudden spikes in demand.
  • Behavioural analytics uses baselines and data analytics to flag traffic that deviates from normal usage in real time, helping to identify covert or evolving threats.

Together, these methods give you fast, automated insight into abnormal traffic, enabling DDoS mitigation.

DDoS mitigation

Once an attack is identified, action must be taken immediately to block malicious traffic while allowing legitimate users through. Key mitigation measures include:

  • Infrastructure-based blocking: Routers and switches use DPI and real-time telemetry to filter malicious traffic at the network edge.
  • Rate limiting: The number of requests per IP or user is capped within a set time window to prevent your resources from being overwhelmed.
  • Scrubbing: Suspicious traffic is rerouted to a scrubbing centre, where it’s inspected and filtered before reaching your network.

Overall, you need layered protection across the network, transport and application layers (OSI layers 3, 4 and 7) to stop all major types of DDoS attacks.

DDoS attack surface reduction

A third pillar of DDoS prevention is reducing your network’s exposure to attack. Keep software up to date and patch known vulnerabilities promptly. Limit the number of exposed ports, services and endpoints to minimise the paths attackers can exploit.

In addition, use firewalls and access controls to restrict access to critical systems. Load balancers can also distribute incoming traffic across multiple servers, helping to absorb traffic spikes and maintain your services.

Overall, monitoring and detection, automated mitigation and a reduced attack surface provide robust defence against evolving DDoS threats.

DDoS Mitigation for DIA

Get Dedicated Internet Access with automated, 24/7 DDoS protection

The growing DDoS threat

DDoS attacks are rising fast. In 2024, global DDoS attacks surged by 550%, according to the Radware 2025 Global Threat Analysis Report. Europe, including the UK, saw the sharpest increase, linked to escalating geopolitical tensions.

Telecoms providers, financial services and government remain among the most targeted sectors: telcos were hit by 43% of global network-layer DDoS traffic, while financial organisations saw a 400% rise in attack volume year-on-year. The UK’s National Cyber Security Centre (NCSC) also reported a “stark increase” in state-aligned hacktivist DDoS strikes targeting critical infrastructure.

But all UK businesses are now vulnerable. As DDoS attacks become faster, cheaper and more automated, the NCSC urges organisations to strengthen their resilience against all cyber attacks.

5 tips to prepare for DDoS attacks

You can’t always prevent your business from being targeted, but you can reduce the risk of disruption. The NCSC recommends five practical steps to help you prepare for and respond to DDoS attacks.

1. Understand your service

Attackers can target different parts of your network to exhaust resources and cause disruption. Check which services are exposed to the internet, which are business-critical and who is responsible for protecting them – your team, your hosting provider or your network service provider.

2. Upstream defences

Your network provider is key in protecting you from large-scale DDoS attacks. Ensure they’re able to detect and deflect malicious traffic before it hits your systems. An automated service like Neos Networks' DDoS Mitigation for Dedicated Internet Access (DIA) can absorb attacks at the network edge and keep your services online.

3. Scaling

To handle sudden spikes in traffic during a DDoS attack, your network must have the flexibility to scale. For example, Neos Networks DIA offers automated DDoS Mitigation with bandwidth options up to 10Gbps, giving you the capacity to absorb large attacks and maintain service.

4. Response plan

If you’re hit by a DDoS attack, a clear response plan helps minimise disruption to your vital services. Your plan might include prioritising trusted traffic sources (such as UK-only IP addresses), preserving administrative access, and setting up fallback options for essential systems.

5. Testing and monitoring

Finally, regular testing helps ensure your defences are ready when you need them. Continuous monitoring lets you detect attacks early and respond before they escalate. Services like Neos Networks DDoS Mitigation and DDoS Monitoring give you the 24/7 visibility you need to keep your network secure.

DDoS solutions

At Neos Networks, we’ve designed our DDoS Mitigation to ensure you stay online, with always-on protection, real-time monitoring and layered defence.

We use Corero’s SmartWall ONE technology to deliver full edge protection for even the largest provider networks. Choose from three tiers of protection to suit your business needs:

  1. DDoS Mitigation: Real-time circuit-level auto-mitigation, 24/7 monitoring, weekly threat reports and custom configuration
  2. DDoS Monitoring: 24/7 monitoring, monthly threat reports and fast upgrade to DDoS Mitigation when needed
  3. DDoS Standard: DDoS-protected core network included with all DIA circuits at no extra cost

Learn more about DDoS protection

Ready to protect your business? Get a quote online with LIVEQUOTE.

DDoS Mitigation for DIA

DDoS protection for business internet: What is it and why do you need it?

DDoS attacks on UK businesses are rising fast and getting harder to stop. Here’s how they work, how they could affect your business and how to defend against them effectively.

Neos Networks | 3 July 2025

DDoS Mitigation for DIA

Get Dedicated Internet Access with automated, 24/7 DDoS protection

What is a distributed denial-of-service (DDoS) attack?

A distributed denial-of-service (DDoS) attack is a type of cyber threat that aims to disrupt websites, applications or online services by overwhelming them with excessive internet traffic.

Unlike a traditional denial-of-service (DoS) attack, which typically comes from a single source, a DDoS attack is “distributed” – launched simultaneously from multiple systems or IP addresses. This makes it much harder to trace and defend against.

DDoS attacks are often used to:

  • Disrupt business operations
  • Demand ransom payments
  • Make political or ideological statements

While they don’t breach systems or steal data, they can cause serious downtime, damage customer trust and lead to financial losses.

How do DDoS attacks work?

A DDoS attack works by overwhelming a website, server or network with an extraordinarily high volume of traffic from multiple sources, causing it to slow down or crash.

These attacks are typically launched using a network of compromised devices connected to the internet. Computers, servers or Internet of Things (IoT) devices are infected with malware, turning them into “bots” under the attacker’s control. Together, these bots form a “botnet”.

The botnet then sends a flood of requests to the target’s IP address – all at once from many different locations. This sudden surge overwhelms the system’s capacity, denying access to genuine users and effectively taking the service offline.

DDoS attack

E-Line Carrier Ethernet showing a direct point-to-point connection between two locations across a provider's network

 

Types of DDoS attacks

DDoS attacks can be categorised into three main types, targeting various aspects of a network or service. They typically focus on specific layers of the OSI model, particularly the Network Layer (layer 3), the Transport Layer (4) and the Application Layer (7).

Volumetric attacks

Volumetric attacks aim to saturate the target's bandwidth by overwhelming it with a massive volume of traffic. Techniques include UDP floods, DNS amplification and ICMP floods. These attacks typically operate at layers 3 and 4 of the OSI model.

Protocol attacks

These attacks exploit weaknesses in network protocols to exhaust server resources. Examples include SYN floods, Ping of Death and IP fragmentation attacks. They also target layers 3 and 4, disrupting how systems handle connections.

Application-layer attacks

Targeting layer 7, application-layer attacks mimic legitimate user behaviour to overwhelm specific applications or services. Common methods include HTTP floods and Slowloris attacks, which can be difficult to detect as they look like normal traffic.

Whatever the method, the impact of a DDoS onslaught can be severe, taking critical services offline and damaging customer trust.

The impact of DDoS attacks on UK businesses

UK businesses faced a 550% year-on-year surge in web DDoS attacks in 2024, according to the Radware 2025 Cyber Threat Report. The sharp increase was largely driven by hacktivist activity and rising geopolitical tensions.

The consequences have been significant. Across sectors, DDoS incidents have caused operational disruption, financial loss and reputational harm.

For example, a DDoS attack on the Royal Mail in 2024 caused widespread parcel delivery delays. Meanwhile, the telecommunications sector was the target of 43% of global network DDoS attacks, followed by the financial sector at 30%.

The lesson is clear: whatever your industry or business size, DDoS protection is now essential.

How to mitigate DDoS attacks effectively

DDoS mitigation starts by monitoring traffic to establish normal traffic patterns. That way, anomalies like bot activity or spoofed requests can be identified in real time.

Traffic is then filtered using IP reputation checks, deep packet inspection and rate limiting. The best systems use scrubbing, which removes malicious traffic before it reaches your network. In contrast, blackholing – which drops all traffic to a target IP address – can block both malicious and legitimate traffic.

Manual mitigation is no longer viable as modern attacks are too large and fast for human response alone. Instead, you need a DDoS protection service with:

  • Real-time monitoring: Detects abnormal spikes or suspicious patterns before they disrupt services
  • Layered defence: Protects at the network, transport and application layers to guard against all attack types
  • Traffic filtering and rate limiting: Controls the flow of requests to prevent overload
  • Scalable infrastructure: Includes built-in capacity to absorb attacks while mitigation takes effect
  • Always-on protection: Automated tools ensure round-the-clock defence, even when you're not watching

This is how we’ve designed our future-ready DDoS protection for Dedicated Internet Access (DIA) – to keep your services secure and connected at all times.

Neos Networks DDoS protection for DIA

Our DIA service now offers three levels of DDoS protection, so you can choose the option that fits your business needs:

1. DDoS Mitigation – Always-on, circuit-level protection

E-Line Carrier Ethernet showing a direct point-to-point connection between two locations across a provider's network
  • Real-time auto-mitigation of volumetric, protocol and application-layer attacks
  • 24/7 monitoring of all IPv4 and IPv6 traffic
  • Weekly DDoS threat reports
  • Easy customisation to fit your business needs

 

2. DDoS Monitoring – Visibility with upgrade path

E-LAN Carrier Ethernet showing any-to-any connections across a provider's network
  • Continuous DDoS monitoring for each DIA circuit
  • Monthly DDoS threat reports
  • Fast upgrade to DDoS Mitigation when needed

 

3. DDoS Standard – Core protection included as standard

E-Tree Carrier Ethernet connecting a central site to multiple sites across a provider's network, but the “leaves” (branch nodes) of the tree don’t exchange data directly
  • DDoS-protected core network (tails not included)
  • Included with all DIA circuits at no extra cost

Protect your business against tomorrow’s threats today. Get a quote for DIA with DDoS protection in minutes using LIVEQUOTE.

DDoS Mitigation for DIA

Project Reach: The UK’s biggest core fibre network deployment in decades will power the UK’s digital ambitions

Neos Networks | 26 June 2025

Neos Networks has today been selected by Network Rail to deliver Project Reach. This landmark initiative will see Neos Networks upgrade fibre connectivity along key Network Rail transport routes, transforming rail operations and improving customer connectivity along key routes.

But at its core, Project Reach is more than just an upgrade for the railways, it’s a critical step in advancing the nation’s digital capabilities. By deploying high capacity fibre across the country, Neos Networks is creating a digital backbone that will underpin future innovation. The demand for robust connectivity has never been greater, as businesses of all sizes increasingly rely on data-intensive applications, from new AI-driven analytics services to real-time cloud computing.

The new network will serve the dual purpose of enhancing railway operations while also enabling wider commercial use, supporting industries that depend on high-bandwidth, low latency connectivity.

A nationwide fibre backbone

The first phase of the rollout will see Neos Networks deploy 1,000km of ultrafast, state-of-the-art fibre optic cable along the lengths of the East Coast Main Line (the route from London King’s Cross to Newcastle); the Chiltern Main Line from Marylebone to Birmingham, and the West Coast Main Line from Birmingham to Manchester; and the Great Western Main Line (the route from London Paddington to Cardiff).

By extending the network across these strategic routes, Neos Networks is connecting key business hubs, data centres and core subsea landing stations that connect the UK to North America and wider Europe. As demand for connectivity surges – from AI-driven services, to edge computing and low latency business connectivity – the network will provide the resilience and capacity needed to support the UK’s digital economy.

For Neos Networks CEO Lee Myall, the project represents a milestone in national connectivity: “This is the largest core fibre network deployment across the UK in decades. It won’t just transform Network Rail’s services and the connectivity offered to customers, but also advance the UK’s digital ambitions by connecting key data centres that will underpin the future of AI, and vital submarine infrastructure that is bringing global data into the region.

“The deployment of this network will have far-reaching benefits across industries, from finance and healthcare to media and manufacturing. High-speed, low latency connectivity will unlock new opportunities, accelerating 5G rollout, cloud services, and AI-driven innovation. Project Reach demonstrates the combined power of public and private investment – seeing transport and telecoms infrastructure come together to drive economic and technological progress.”