PCCW Global builds and manages full, end-to-end MPLS customer networks as part of a package that includes customer edge (CE) routers, local loops, access provider edge (PE) routers and backbone transmission network. All elements are monitored and managed 24/7 by our Global Service Operation Center (GSOC), using industrial-grade network management tools.

Network Diversity

PCCW Global’s MPLS network offers full redundancy in terms of equipment and backbone trunks, with dual core P routers and dual access PE routers connected in fully-meshed fashion in each Point of Presence (PoP).

PoPs are interconnected via multiple backbone network trunks in a way that enables backup paths to handle all MPLS traffic and ensure continuity of service if the primary trunk fails. In providing extended coverage, PCCW Global establishes at least two interconnection links with major inter-carrier interconnect (ICI) partners to eliminate risks posed by a single point of failure.

Customers are able to implement dual local loops and dual CE routers connected to different PE routers to ensure maximum resilience in the access network.

Alternatively, customers can maintain basic connectivity by deploying IPSec backup in the event of the primary local loop going down.

Network Security

Security is top priority for PCCW Global, which houses all network equipment in high-availability, carrier-grade data centers served by cooling, a backup power supply, state-of-the-art surveillance systems and redundant carrier facility entrance points.

GSOC’s technical staff monitor and maintain the network 24/7, thereby guarding against unauthorized access round the clock.

Only authorized persons can access network equipment by following a predefined security procedure that is reviewed and updated by PCCW Global on a regular basis.

In fact, PCCW Global’s meticulous approach to MPLS network security is evidenced by certification that includes BS7799 and ISO/IEC 17799 (Information Technology – Code of practice for information security management), ISO 9000, TL 9000, 5S Certificate and SunTone certificates.

A high level of security is further assured by deploying separate access routers for MPLS and Internet services to isolate MPLS VPN traffic from the web. Indeed, PCCW Global’s MPLS VPN is a closed network with dedicated routers and links connecting all PE routers.

Each MPLS VPN has an internal virtual routing and forwarding (VRF) table unique to every customer to ensure that one VPN’s traffic never overlaps with another. Even if the core network is shared between different customers, their MPLS VPN traffic will remain independent and isolated.

Applied to all MPLS network routes, an access control list (ACL) grants entry only to specified IP addresses used by authorized PCCW Global support staff. In addition, customers have the option of deploying application encryption mechanisms, such as IPSec, to provide an extra level of security.

Network Performance

An engineering team performs regular checks and ongoing maintenance to ensure PCCW Global’s MPLS network remains highly available and scalable, while the GSOC monitors performance 24/7 in a constant state of alert to network degradation or failure.

In the case of CE routers managed by PCCW Global, authorized personnel can access the customer portal to check VPN performance and collect reports on routers, traffic, QoS and applications. Highly-competitive service level guarantees (SLG) covering performance parameters, such as availability, latency, packet loss and jitter, also provide customers with peace of mind.