Network — Wayscom Cloud Guyane Française

Local datacenter — Cayenne, French Guiana SD-WAN WireGuard ChaCha20-256 bits — government-grade encryption Cloud VPS Direct Connect from €4.50/mo SD-WAN Auto failover < 5 seconds Reseller Pool from €189.90/mo — per-client network isolation GDPR DOM — data hosted on French territory Local French support — same time zone Stable prices in 2026 — controlled rates WireGuard stealth port — invisible to network scanners Post-quantum resistance available (WireGuard PresharedKey) Local datacenter — Cayenne, French Guiana SD-WAN WireGuard ChaCha20-256 bits — government-grade encryption Cloud VPS Direct Connect from €4.50/mo SD-WAN Auto failover < 5 seconds Reseller Pool from €189.90/mo — per-client network isolation GDPR DOM — data hosted on French territory Local French support — same time zone Stable prices in 2026 — controlled rates WireGuard stealth port — invisible to network scanners Post-quantum resistance available (WireGuard PresharedKey)

What is SD-WAN?

The WAN network reimagined for the modern enterprise

Multi-site companies heavily depend on the quality of their network links. A saturated link or outage can directly impact productivity and revenue.

SD-WAN is an intelligent software solution that uses all types of links simultaneously (fiber, microwave, 4G, satellite) and tests their performance in real time. In case of failure, traffic automatically switches to the available link — with no interruption for your users.

Failover < 5 seconds

Automatic switch to available link. No human intervention required.

Load Balancing

Up to 4 simultaneous links to optimize bandwidth and performance.

Unified dashboard

Complete visibility across all your sites from a single screen. Real-time alerts.

WAN Failover & Load Balancing — 4 ISP links

Wayscom Network — Guiana & Caribbean

SD-WAN Wayscom

All the features your network needs

WAN Failover

Failover & Load Balancing

Your network uses up to 4 internet links simultaneously. If one fails, traffic automatically switches to available links — result: maximum uptime, zero interruption.

VPN

Automatic site-to-site VPN

Interconnect your branches with automatically deployed encrypted VPN tunnels. Hub-and-spoke or full mesh topology as needed. Secure remote access included.

🎯

QoS

Traffic prioritization

VoIP, ERP, business applications automatically prioritized across your links. Even under congestion, your phone calls and critical applications remain smooth.

Monitoring & Supervision

Unified NOC dashboard for all your sites. Latency, availability, usage, email alerts — all in real time. Wayscom monitors your network from Guiana.

Centralized security

Security policies, content filtering, blacklists deployed across all your devices simultaneously. Next-gen firewall (Routeur Wayscom / Routeur Wayscom) centrally managed.

Simplified deployment

Zero-touch provisioning: send the equipment on site, it auto-configures on connection. No need to send a technician for each site opening.

Supported link types

All your links, unified management

Fiber Optic

Guaranteed bandwidth (CIR), symmetrical or asymmetrical. Recommended primary link for critical sites.

Microwave Links

2,650 km operated by Wayscom in Guiana. Ideal for non-fibered areas or inter-site links without trenching.

📶

4G / LTE

Backup or primary link for mobile sites. Natively integrated into SD-WAN for failover.

VSAT Satellite

For the most isolated sites in Guiana. Integrated into SD-WAN as a last-resort link.

MPLS / VPN MPLS

High-availability site interconnection. Ideal for companies with several regional branches.

Security & DDoS

Next-gen firewall, DNS filtering, DDoS protection. All your links protected from our infrastructure.

VPN tunnel security

WireGuard encryption — the next-generation standard

Our SD-WAN inter-site tunnels use WireGuard on Routeur Wayscom — a modern, audited cryptographic architecture recognized by government and military agencies worldwide.

ChaCha20-Poly1305

Data encryption

256-bit keys. A modern alternative to AES-256, faster on processors without dedicated hardware acceleration — ideal for Routeur Wayscom routers deployed in Guiana.

Curve25519

Key exchange

Elliptic curve cryptography (ECDH). International standard recognized for its resistance to side-channel attacks. Private keys never leave the router.

BLAKE2s

Hashing & key derivation

Faster and just as secure as SHA-3. Used for session key derivation and peer authentication. No algorithm negotiation — no attack surface.

Why WireGuard is a hardened infrastructure

Minimal attack surface

Less than 4,000 lines of code — compared to hundreds of thousands for IPsec or OpenVPN. Far easier to audit, statistically fewer exploitable vulnerabilities.

Stealth mode — invisible port

WireGuard does not respond to any UDP packet not signed by a valid key. For any attacker scanning your infrastructure, the port appears completely closed — native protection against scans and DoS attacks.

Post-quantum resistance (optional)

WireGuard supports a symmetric pre-shared key (PresharedKey) in addition to public keys. This option hardens the tunnel against future quantum computer interception — available on request.

🔄 Controlled key management

Private keys are generated directly in Routeur Wayscom routers and never leave them. Only public keys transit during configuration. Hardened control plane: restricted SSH services, strict firewalls, tracked RouterOS updates.

WireGuard vs classic VPN protocols

Criterion	WireGuard	IPsec	OpenVPN
Lines of code	~4 000	~400 000	~600 000
Encryption	ChaCha20/AES	Variable	Variable
Performance	Excellent	Good	Average
Stealth port	✓ Natif	✗	✗
Reconnection	< 1 sec	5-30 sec	10-60 sec
Post-quantum	Optional	Partial	✗

On Routeur Wayscom: WireGuard keys are natively generated in the router. No private key transits over the network. The control plane is hardened independently of the tunnel — restricted SSH services, perimeter firewalls, tracked updates.

Network — SD-WAN WireGuard & Links