MPLS / IP-VPN
A private Layer-3 VPN that connects every office, plant, data centre and cloud on-ramp with any-to-any routing, six QoS classes and end-to-end SLAs - over Dollu's 1.4 Tbps backbone and domestic last-mile partners worldwide.
1.4 Tbps
Global backbone capacity
40+
Points of presence
99.99%
Core network availability
What is MPLS / IP-VPN?
Dollu MPLS / IP-VPN is a managed Layer-3 virtual private network that joins your offices, factories, data centres and cloud on-ramps into a single private routing domain. Each site attaches to a dedicated VRF on our provider-edge routers, so traffic between any two locations takes the shortest path across our core rather than hair-pinning through a hub, and no other customer can see or reach your address space. The service is delivered end to end - access circuit, managed CPE, core transport, QoS policy and monitoring - under one contract and one SLA, so there is a single accountable party when something needs fixing.
The core is a 1.4 Tbps MPLS backbone with more than 40 points of presence across Europe, North America, the Middle East and Asia-Pacific, including our own interconnect PoPs in London, Frankfurt, Amsterdam, Ashburn, Mumbai and Singapore. Access is delivered over fibre, Ethernet, licensed microwave or broadband through domestic last-mile partners, so a head office in Noida, a warehouse near Rotterdam and a support centre in Manila can all sit on the same VPN with consistent addressing, policy and performance, and can be ordered, monitored and billed through one portal.
Quality of service is what separates an IP-VPN from a bundle of internet tunnels. We classify and police traffic into up to six classes at the CPE - real-time voice, interactive video, business-critical applications, standard data, bulk transfer and a customer-defined class - and honour those markings on every hop through the core. Round-trip delay, jitter and packet loss are guaranteed per class and per region, measured continuously by probes on the CPE and on our PE routers, and reported in the portal alongside utilisation and availability so you can hold us to the numbers.
MPLS is not an either/or decision. Most Dollu customers run IP-VPN as the deterministic underlay for voice, ERP, payment and OT traffic while adding Dedicated Internet Access or broadband for SaaS and internet-bound flows, and we can layer managed SD-WAN over both so application policy decides which path each session takes. Our engineers design the topology, migrate sites from your incumbent provider with parallel running and agreed cut-over windows, and operate the network from a 24×7 NOC with proactive circuit monitoring and 15-minute response on P1 incidents.
Hybrid WAN: MPLS, internet and 5G under one SD-WAN policy.
Why choose Dollu for mpls / ip-vpn.
The advantages of buying from a carrier that owns its network, interconnects and operations - rather than a reseller.
Predictable performance for real-time traffic
Voice, video and transactional applications get guaranteed latency, jitter and loss per class, so a call between two branches sounds the same on a Monday morning as it does at midnight.
One provider, one SLA, everywhere
We contract and manage the last mile in each country, stage and ship the CPE and own the fault end to end - you never have to referee between an access carrier and a core provider.
Traffic separation without tunnel overhead
Per-customer VRFs isolate your routes and addresses at the network layer, with no IPsec throughput penalty on the CPE and no dependence on the public internet for site-to-site traffic.
Grows with your footprint
Add a site, raise a circuit from 100 Mbps to 1 Gbps or add a cloud VRF without redesigning the network; any-to-any routing means new locations reach everything on day one.
A clean path to SD-WAN and cloud
Keep MPLS as the deterministic underlay and let Dollu managed SD-WAN blend it with internet and 5G, or extend the same VRF straight into AWS, Azure, Google Cloud or Oracle.
Capabilities in detail.
Everything included with MPLS / IP-VPN - the platform features, options and controls you get from day one.
- 01
Layer-3 VPN service (RFC 4364)
BGP/MPLS IP-VPN with per-customer VRFs, IPv4 and IPv6 dual-stack, route-target-based extranets and support for overlapping private address space between separate VPNs.
- 02
Six-class QoS model
DSCP-based classification, marking and policing at the CPE; strict-priority queue for voice, bandwidth-guaranteed queues for video and critical data, configurable per site and per class in 1% increments.
- 03
Access diversity
Fibre and Ethernet from 2 Mbps to 10 Gbps, licensed microwave where fibre is slow to build, and broadband, LTE or 5G as secondary access, all delivered and managed by Dollu through domestic partners.
- 04
Managed CPE
Cisco, Juniper or Fortinet edge routers sized per site, with dual power supplies, LTE backup module and zero-touch staging; single, dual-router or dual-router dual-circuit configurations.
- 05
Flexible routing to your LAN
Static, BGP or OSPF between CPE and your core, multi-VRF CPE for segmented sites, and route-policy controls for advertising summaries, defaults or specific prefixes into the VPN.
- 06
Internet and cloud gateways
Centralised internet breakout through a Dollu managed firewall, local breakout at selected sites, and cloud VRF extensions to AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect and Oracle FastConnect.
- 07
Resilience options
Diverse-path circuits into separate PE routers, BFD-triggered failover in under one second, LTE/5G last-resort backup and geo-redundant internet gateways for sites that cannot go dark.
- 08
Visibility and reporting
Portal with per-site utilisation, per-class SLA compliance, NetFlow application breakdown and CPE health; monthly SLA reports, API access and SNMP or syslog feeds into your own tooling.
- 09
Migration and lifecycle
Design workshops, addressing and QoS plans, parallel running with your incumbent, agreed cut-over windows per site, and quarterly capacity reviews with your named account manager.
How it works.
From first conversation to live traffic - a tracked, engineer-led onboarding with a named owner at every step.
- Step 01
Design
We survey each site, agree bandwidth, resilience level and QoS profile per location, choose the topology and produce an addressing and routing plan you sign off.
- Step 02
Provision
Access circuits are ordered through our last-mile partners, CPE is staged in our lab with your final configuration and shipped to site, and VRFs are built on the core.
- Step 03
Migrate
Sites cut over in agreed windows, typically in parallel with your existing WAN, with test plans per site and rollback available until you confirm acceptance.
- Step 04
Operate
Our 24×7 NOC monitors every circuit and CPE, raises tickets proactively, manages changes through the portal and reports SLA performance monthly.
MPLS, DIA, broadband or 4G/5G.
No single transport suits every site. Most Dollu WAN designs mix them - an SD-WAN overlay stitches the underlays together and steers voice and critical apps onto the best path.
| Dimension | MPLS / IP-VPN | Dedicated internet access | Business broadband | 4G / 5G |
|---|---|---|---|---|
| SLA | Highest - end-to-end latency, jitter, packet-loss and availability targets | High - availability and repair time on the circuit; the wider internet path is best effort | Best effort; consumer-grade repair times | Best effort; dependent on radio coverage and cell load |
| QoS | End-to-end classes of service across the Dollu core | Dedicated, symmetrical bandwidth; QoS to the network edge only | Contended and asymmetric; no QoS guarantees | Shared spectrum; private 5G adds on-site QoS and slicing |
| Cost position | Highest per Mbps | Mid | Lowest | Low - per SIM plus data |
| Lead time | Longest - new fibre and cross-connects; weeks to months | Weeks; faster where the building is already lit | Days to weeks | Days - hardware ships and activates on power-up |
| Best for | Voice-critical sites, regulated data, hub-and-spoke WANs | Head offices, data centres, cloud on-ramps, SIP trunks | Small sites, backup paths, SD-WAN underlay | Rapid deployment, temporary sites, resilience overlay, IoT and fleets |
Who uses this and why.
Typical deployments across carriers, enterprises, platforms and contact centres.
Multi-site enterprises
Connect head office, regional branches and data centres in several countries on one private network with consistent policy and a single support contact.
Banking, insurance and payments
Deterministic, isolated transport for core banking, card authorisation and branch systems with audit-friendly SLA reporting and PCI-DSS-aligned segmentation.
Manufacturing and logistics
Link plants, warehouses and distribution centres to ERP, MES and WMS platforms with a QoS class reserved for OT and telemetry traffic.
Contact centres and BPOs
Carry SIP and agent-desktop traffic between delivery centres and client sites in the voice class, with jitter and loss guarantees that protect MOS.
Retail and hospitality chains
Hundreds of small sites on broadband or Ethernet access into a common VPN, with centralised breakout for PoS, CCTV backhaul and guest services.
Technical & commercial specifications.
Key parameters at a glance. Ask us for the full service description and SLA document.
| Service type | Layer-3 BGP/MPLS IP-VPN (RFC 4364), IPv4 and IPv6 |
|---|---|
| Access bandwidth | 2 Mbps - 10 Gbps per site, upgradable in place |
| Access media | Fibre, Ethernet, licensed microwave; broadband, LTE or 5G backup |
| QoS classes | Up to 6: real-time, video, critical, standard, bulk, custom |
| CE–PE routing | Static, BGP, OSPF; multi-VRF CPE on request |
| Topology | Any-to-any, hub-and-spoke or partial mesh per VRF |
| Availability SLA | 99.9% single-homed; 99.99% dual-router, dual-circuit |
| Core latency SLA | e.g. London–Frankfurt ≤ 12 ms; Mumbai–Singapore ≤ 65 ms RTT |
| Managed CPE | Cisco, Juniper, Fortinet; dual PSU and LTE options |
| Support | 24×7 NOC; P1 response ≤ 15 min; named account manager |
How Connectivity is priced.
Circuits carry a monthly recurring charge set by bandwidth, access type and SLA tier; SD-WAN and managed LAN per site. Every site is quoted individually with a lead time.
We publish the model, not a public rate card - actual rates depend on destination, route class, volume and regulatory cost. See how every Dollu service is priced.
- MRC by bandwidth, access type and SLA tier
- Site-by-site quotes with lead times
- One-time install charge where applicable, quoted up front
- 12–36 month terms
- Multi-country consolidation discounts
- Billing
- Monthly recurring in advance; install charge on delivery; single invoice across countries
- Commitment
- 12–36 months per circuit
MPLS / IP-VPN - your questions answered.
The questions customers and carriers ask us most often before they interconnect. If yours is not here, our team answers within one business day.
Still have a question?
Ask our solutions teamRelated services.
Services customers commonly combine with MPLS / IP-VPN.
Talk to a network architect.
Share your site list, current bandwidths and applications and we will return a topology proposal with per-site pricing within five business days.
