Table of Contents
Overview
A Wide Area Network, usually called a WAN, connects devices and smaller networks over large geographic areas. Where a LAN covers a single building or campus, a WAN can span cities, countries, or even the entire globe. The public internet is the largest WAN, but companies also build private WANs to connect their branch offices, data centers, and remote workers.
WANs are essential whenever communication must cross long distances that a single local network cannot reasonably cover. They often rely on service providers, such as telecom carriers or internet service providers, because no single organization owns all the cables and equipment across a city or country.
Key Characteristics of WANs
A WAN connects multiple separate networks. For example, a company might have a LAN in New York and another LAN in London, and use a WAN connection between them. To users, it may feel like one unified network, but technically it is many networks joined together.
WANs usually involve lower bandwidth and higher latency than local networks. A cable that runs across a city is typically slower and has more delay than a short cable inside an office. Distance, the number of intermediate devices, and the use of shared carrier infrastructure all add delay.
Ownership in a WAN is typically mixed. An organization owns its internal devices such as routers, switches, and firewalls at each site, but rents or subscribes to WAN connectivity from a provider. This creates a clear separation between the customer network and the provider network.
WANs must handle diverse technologies and media. A single WAN connection might involve fiber optic links in the provider core, microwave or radio links for rural areas, and copper cables for the final connection to a building. The customer usually sees this as a single service, even though many technologies are involved behind the scenes.
WAN vs LAN and MAN
A WAN is larger than a LAN and usually larger than a MAN. A LAN typically sits inside a building, home, or small site. A MAN covers a city or metropolitan area and is often provided by a carrier as a high speed regional service. A WAN stretches across regions and countries and is built on top of long distance infrastructure such as undersea cables and intercity fiber lines.
LANs are usually fully owned and controlled by the organization that uses them. With WANs, organizations must coordinate with providers. This makes design, troubleshooting, and changes more complex. Performance expectations are also different. You might expect gigabit speeds on a LAN, but only a fraction of that over a WAN link to a remote office.
Common WAN Connectivity Methods
There are several common ways organizations connect to a WAN. Different methods offer different tradeoffs in cost, performance, and reliability.
Traditional leased lines provide a dedicated point to point link between two sites. The provider reserves capacity in its network for that customer, so the bandwidth is fixed and guaranteed for that circuit. This approach is often reliable and predictable, but it can be expensive, especially over long distances or when many sites must be interconnected.
Multiprotocol Label Switching, often abbreviated as MPLS, is widely used by service providers to build private WAN services for customers. With MPLS, the provider can connect multiple customer sites in a any to any pattern without needing a separate physical circuit between every pair of locations. The provider controls routing and can offer quality of service options. From the customer perspective, the provider MPLS service behaves like a private WAN that ties their sites together.
Business broadband internet connections, such as fiber or cable internet, are another common WAN method. Instead of buying a private WAN service like MPLS, organizations use the public internet and build virtual private networks on top of it. This approach is cheaper and very flexible, but performance and reliability depend on the public network, which the organization does not control.
Cellular and wireless WAN services allow connectivity where wired connections are difficult or slow to deploy. A remote branch or mobile worker might use 4G or 5G to reach the wider network. These links are useful as backup connections or for temporary sites, and sometimes as the primary WAN where other options are not available.
Satellite WAN links are used where no terrestrial infrastructure exists, for example ships at sea, remote mining sites, or isolated rural locations. Traditional satellite links have higher latency because signals must travel to space and back. Newer low Earth orbit satellite constellations reduce this delay but still usually cannot match wired fiber performance.
Private WANs vs the Internet
A private WAN is a network that is only accessible to one organization. It often uses services such as leased lines or MPLS from a carrier. The main goals are predictability, performance guarantees, and security. Traffic stays inside controlled network paths and separate from public internet traffic.
The internet is a public WAN. It interconnects thousands of independent networks worldwide. Any device with an internet connection and a valid address can attempt to communicate with any other. Organizations use the internet to reach public services and also to connect their own sites by using encryption and tunneling.
A very common pattern is to mix both. A company might connect its main locations with a private WAN for critical applications, and use internet-based VPNs for smaller sites or remote workers. This hybrid approach balances cost and performance.
Logical Topologies in WANs
At the WAN level, there are different ways to connect multiple sites logically. Even if the physical connections are complex, administrators usually think about WAN connectivity in simple logical patterns.
In a point to point design, two sites are directly connected by a WAN link. Each additional site that needs to connect requires another point to point connection. This is simple to understand and secure, but does not scale well if many sites must all talk to each other.
In a hub and spoke design, one central site, the hub, connects to many branch sites, the spokes. The branches usually talk to each other by going through the hub. This is easier to manage than a full mesh of point to point links and concentrates key services in one or a few central locations. The main drawback is that the hub becomes a critical dependency. If the hub or its WAN links fail, the spokes may lose connectivity with each other.
In a full mesh design, every site connects directly to every other site. This gives the best path between sites and high resilience, but it is very expensive and complex to build with traditional physical circuits. Provider technologies such as MPLS and modern overlay networks can create a logical full mesh without requiring a direct physical circuit between every pair of sites.
Performance and Latency in WANs
WAN links almost always have higher latency than LAN links, simply because signals travel longer distances and pass through more devices such as routers and provider switches. Long distance fiber, undersea cables, and satellite all add delay. In addition, WAN links often have lower bandwidth, which can introduce congestion when many users share the connection.
For applications, this has visible effects. File transfers over a WAN are slower than over a LAN. Real time voice and video may suffer from delay, jitter, or packet loss on a congested or long distance WAN. Interactive remote access, such as controlling a desktop in another country, feels less responsive.
To manage this, organizations often prioritize critical traffic and choose WAN services that match their application needs. They might also place servers closer to users, for example having regional offices each connect to a nearby data center instead of reaching across the world for every request.
Security Considerations in WANs
Because WANs cross public or shared infrastructure, security becomes more critical than in a typical private LAN. Data traveling across a service provider network or across the internet may be exposed to interception if it is not protected.
A very common security technique in WANs is encryption. Virtual private networks, or VPNs, create secure tunnels across a shared or public WAN. The data inside the tunnel is encrypted so that intermediate networks only see scrambled content, not the original messages.
Firewalls also play an important role at WAN edges. They control what traffic enters or leaves each site. An organization often places firewalls where its LAN connects to the WAN or the internet, and applies policies that permit only expected protocols and destinations.
There is also a trust boundary between the internal network and the provider network. Even when using a private WAN service, many organizations still encrypt sensitive data, because the provider network is outside their direct control.
WAN and Remote Access
WAN technology is what makes remote work and global access possible. A user in one country can connect securely to a company network in another country because a WAN path exists between them.
Remote access VPNs allow individual users to join a network from any internet connection. From the user perspective, once the VPN is active, it looks as if they are directly connected to the office network, even though they might be at home or in a café. Their traffic travels across a WAN, usually the internet, but is protected with encryption.
Site to site VPNs use the same ideas between networks. Two or more offices can build encrypted tunnels across the internet, effectively creating a logical private WAN that overlays the public network.
The Role of Service Providers
Service providers build and operate the physical and logical infrastructure that underlies most WANs. They own long distance fiber cables, radio towers, satellite uplinks, and the large routers that connect their network with other providers.
Organizations typically sign contracts, often called service level agreements, with providers. These specify bandwidth, availability targets, and sometimes latency or packet loss limits. If the provider fails to meet these targets, the agreement may require them to provide credits or other remedies.
Different providers interconnect with each other to form the global internet. When your traffic crosses a WAN to reach a remote destination, it may pass through several independent provider networks, which must all cooperate to deliver your packets.
Summary
A WAN connects separate networks over large distances and is essential for modern organizations that operate across multiple locations. It uses a mix of technologies and services, often supplied by external providers, and must balance cost, performance, and security. Users experience WANs whenever they access remote resources, collaborate across continents, or work from outside the office.