TotalHealLinkFabricSoftware-Defined WAN (SD-WAN)
Connects your offices over every internet link they have and keeps each application on the link that suits it — calls on the cleanest, bulk on the cheapest, LTE only when nothing else works.
Trial: 30 days, up to 2 appliances. You sign in to the TotalHeal console with a Sttiz account and activate LinkFabric SD-WAN. No card.
Offices have two or three internet links and use one: the backup sits idle until the main link fails and calls freeze while someone notices. MPLS between sites is expensive, and a lossy broadband link makes video calls unusable even when it is up.
LinkFabric runs on the same BranchEdge appliances as FireWarden. Each appliance builds an encrypted WireGuard tunnel over every internet link to the other sites, measures every link every two seconds, and sends each application over the link that meets its needs — moving it within seconds when a link degrades, and back when it recovers.
LinkFabric SD-WAN, feature by feature.
Tunnels over every link
One WireGuard tunnel per internet link to the other sites, hub-and-spoke (branches reach each other through a hub) or full mesh; branches behind NAT dial the hub.
Measured, not assumed
Latency, jitter and loss on each link every two seconds, measured over the link itself; a link with five failed probes in a row is down and its traffic moves at once.
Each application where it belongs
Steering rules by application or destination with an SLA class — calls and meetings, business SaaS, bulk; the best link that meets the class, in your order of preference, with LTE and 5G only as a last resort. Flows stay on their link while it is healthy.
Lossy links made usable
On the Professional tier: forward error correction (one parity packet per 2–16) rebuilds lost packets; calls can be copied over a second link; traffic between offices can be spread packet by packet over every link; flows can be balanced by bandwidth.
Call quality
On the Professional tier, a MOS score per link, estimated from latency, jitter and loss.
QoS and routing
Upload shaping on every link with classes and DSCP marking; static routes, BGP and OSPF; DHCP and the office resolver.
Zero-touch
Register an appliance’s serial number with its site and template before it ships; on first contact it sets itself up.
How LinkFabric SD-WAN works.
LinkFabric builds encrypted tunnels over every internet link of every office, measures each link every two seconds and steers each application over the link that meets its needs, with error correction and copies for the links that lose packets.
- ConnectEach appliance builds a WireGuard tunnel per link to the other sites.
- MeasureLatency, jitter and loss on every link, every two seconds.
- SteerEach application goes over the best link for its SLA class.
- RepairError correction and copies make lossy links usable (Professional).
- RecoverTraffic moves within seconds when a link fails, and back when it heals.
Platforms and deployment
Platforms
| Platform | How it is covered |
|---|---|
| Appliance | BranchEdge: Debian 12 or Ubuntu 22.04+, x86-64 or arm64 |
| Links | Fibre, broadband, MPLS, LTE / 5G, satellite — any IP link |
| Data plane | WireGuard, Linux policy routing, nftables, tc, FRR (BGP, OSPF), keepalived (VRRP) |
Deployment
| Profile | Status |
|---|---|
| SaaS | AvailablePolicy and FleetControl in the TotalHeal cloud; appliances at your sites. |
| On-premises control plane | AvailableDelivered with our team from the on-premises kit. |
| Air-gapped | AvailableOffline kit, offline licence file and offline update bundles. |
Essential, Professional or Elite.
Priced per appliance per year. Counted: branchEdge appliances running LinkFabric.
| Feature | EssentialUS$180per appliance per year | ProfessionalUS$330per appliance per year | EliteUS$480per appliance per year |
|---|---|---|---|
| WireGuard tunnel per internet link; hub-and-spoke or full mesh; zero-touch set-up by serial number | |||
| Latency, jitter and loss on every link every 2 seconds; steering by SLA class with failover; LTE / 5G only as a last resort | |||
| QoS with DSCP; static routes, BGP and OSPF; DHCP and the office resolver | |||
| Balance flows over links; stripe packets over every link between offices; copy calls over a second link | |||
| Forward error correction on the tunnels (one parity packet per 2–16) | |||
| Call quality (MOS) per link | |||
| High-availability pairs (VRRP) |
List prices per appliance per year; minimum 1 appliance. Each tier includes everything in the tier before it. Volume, multi-product and partner pricing on request.
LinkFabric is sold on its own, per appliance; FleetControl is included.
Government profile. Government is a profile, not a separate tier or price list: the Elite tier with Government defaults switched on — data residency in India, four-eyes approval of policy changes, a distinct approver for every approval-level action, retention of at least 180 days, and the CERT-In and DPDP reporting clocks.
What you need
- A BranchEdge appliance at each site
- A public address at the hub (or at each site for full mesh)
Procurement documents for LinkFabric SD-WAN
The datasheet is public. The full dossier is sent on request, so we can match it to your tender.
- Datasheet. What the product does, platforms, deployment profiles, tiers and honest limits.
- Compliance matrix. Each requirement marked comply, partial or no, with an evidence reference — CERT-In directions, DPDP, ISO 27001 controls touched, accessibility of the console, data residency.
- Bill of materials. SKUs per sizing, the unit and quantity formula, customer-side components and services.
- Architecture and hardening. How the product is deployed and the hardening guidance for each component.
- SLA. Support tiers, response targets the team can meet, update cadence and end-of-life policy.
- OEM authorisation letter. A MAF template for resellers and system integrators, with product names exactly as on the SKU.
Works well with
Get a quote for LinkFabric SD-WAN.
Tell us how many appliances you need and how you want to deploy. We reply with a quote and the procurement documents you ask for.
Or email business@totalhealsecurity.com.