A wide area network (WAN) connects geographically separate locations over long distances. This guide explains what a WAN is, how it works, the Tier 1 and Tier 2 distinction, and how WAN relates to SD-WAN.
A Wide Area Network (WAN) is a network that spans a large geographical area, connecting multiple smaller networks such as Local Area Networks (LANs) and Metropolitan Area Networks (MANs). Unlike a LAN, which typically covers a single building or campus, a WAN extends across cities, countries, or continents, linking the places an organisation operates into a single connected estate.
Understanding the distinction between Tier 1 and Tier 2 network service providers is useful context for anyone evaluating WAN options.
Tier 1 providers own and operate their own global network infrastructure, including data centres and the physical connections between them. They do not rely on third-party networks to carry their traffic, which means they can peer directly with other Tier 1 networks. Their reach and resilience are typically higher than Tier 2 providers, and they form the backbone of the global internet.
Tier 2 providers do not own their entire underlying infrastructure. They lease network capacity from Tier 1 providers and build services on top of it, typically focusing on regional or national coverage. Most enterprise WAN services are delivered by Tier 2 providers, who combine leased infrastructure with their own management and service layers.
The internet itself is the largest and most widely recognised example of a WAN. It connects millions of devices, networks, and data centres across the globe using a vast combination of fibre, satellite, and other technologies, allowing data to travel between continents, countries, and organisations regardless of physical location.
For most organisations, their WAN is the private or managed network that connects their own sites, data centres, cloud environments, and users to each other and to the resources they depend on.
A LAN (Local Area Network) connects computers and devices within a limited geographical area, such as a single building, office floor, or campus. It enables high-speed data transfer and resource sharing between connected devices. A WAN typically connects multiple LANs across different physical locations.
WANs operate by connecting multiple local networks across large distances using a combination of technologies including leased lines, broadband connections, and MPLS (Multiprotocol Label Switching).
Data is divided into packets, each containing routing information alongside the payload. These packets travel across the WAN through interconnected routers and switches, which determine the best path for each packet based on factors including network congestion, distance, and configured policy. At the destination, the packets are reassembled into the original data.
MPLS and related technologies allow providers to prioritise certain types of traffic, improving performance for latency-sensitive applications. Redundancy mechanisms ensure that if one path fails, traffic can be rerouted, maintaining connectivity.
Software-Defined WAN (SD-WAN) builds on traditional WAN by adding a software control layer that manages how traffic is routed across multiple underlying circuits. Where a traditional WAN typically routes traffic over a single path per site, SD-WAN uses multiple circuit types – broadband, fibre, 4G, 5G, MPLS – and steers traffic intelligently based on application requirements and real-time path quality.
SD-WAN does not replace the WAN; it is the intelligence that runs over it. Cloud Gateway delivers SD-WAN and the WAN transport underneath it as a single managed capability, so the circuit and the overlay that governs it come from one provider under one operating model.
For organisations considering network modernisation, the WAN is the transport layer and SD-WAN is what makes it adaptive, observable, and manageable at scale. The two are increasingly inseparable in practice.
For organisations running across multiple locations, the WAN is the infrastructure that makes distributed operations possible. Without it, sites cannot share data, access central systems, or connect to cloud environments and regulated networks.
For regulated organisations in healthcare, government, and policing, the WAN carries traffic that is subject to specific security, resilience, and compliance requirements. The way the WAN is designed, managed, and evidenced matters as much as whether it works.
Key considerations include resilience: whether the WAN has redundant paths that can carry traffic if a circuit fails. Performance: whether the network can prioritise critical applications over less sensitive traffic. Visibility: whether the organisation can see what is happening across the estate and demonstrate performance to internal and external stakeholders. And compliance: whether change records, access logs, and policy enforcement evidence are generated as the service runs.
Look for a provider that offers resilient connectivity across the circuit types your sites need, with intelligent traffic management that prioritises critical applications. Visibility is important: you should be able to see performance, incidents, and SLA delivery across the estate in one place, without raising a ticket.
For regulated organisations, the provider’s security and compliance credentials matter. Evidence of change, patch history, and access governance should be generated as part of the service rather than assembled before each assessment cycle.
Cloud Gateway delivers WAN and SD-WAN as part of the Business Everywhere product family, alongside the full platform for connectivity, security, and operational assurance. For more on how we approach network modernisation, see our Modernise your network page and Business Everywhere: SD-WAN.
