Networking and Wi-Fi — home, enterprise and ISP-grade.

Home · Enterprise · ISP-grade

Networking that behaves like infrastructure, not a gadget.

We supply and install the whole range — a router for a terrace house, a stack of managed switches for a factory, or carrier-class gear for an ISP. And we design Wi-Fi that stays up when the room fills, because every access point we deploy is hardwired.

Our rule

Hardwired, always

Wired backhaul
Every roaming AP gets copper or fibre back to the switch. No wireless mesh hops carrying your traffic.
Fibre between blocks
Runs beyond copper distance, or across buildings, go on fibre — no distance guesswork, no earth loops.
Standards first
IEEE 802.11ax and 802.11be, 802.11k/v/r roaming, WPA3. No vendor-proprietary lock-in.
ISP relationships
We work alongside major operators including Telekom Malaysia when the service side needs coordinating.
What we supply

From one router to a whole exchange

The same team specifies all of it, so the kit in your rack matches the kit at the edge and the service you buy from your ISP.

Home & small office

Routers, mesh-free multi-AP Wi-Fi, PoE switches and structured cabling that turns a house or shoplot into a proper network.

RoutersPoECabling

Business & enterprise

Managed L2/L3 switching, VLAN segmentation, link aggregation, firewalls, redundant uplinks and controller-managed Wi-Fi.

L2 / L3VLANFirewall

ISP-grade

Carrier switching and routing, OLT and PON equipment, SFP/SFP+ optics, DAC and patching for operators and integrators.

OLT / PONOpticsCarrier

Wi-Fi access points

Survey, placement, channel planning, installation and tuning — indoor, outdoor and high-density deployments.

Wi-Fi 6Wi-Fi 6EWi-Fi 7
What you actually get

Fast when it's busy — which is the only time it matters

Anyone can hit a good speed-test number on an idle line. The difference shows up when someone starts a 60 GB download in the middle of your call.

Router, switch, PoE, firewall — and a controller you own

The full set, specified together so it behaves as one system. The wireless controller runs on-premise, on your hardware, in your building.

No monthly cloud subscription to keep your own access points working. If your internet drops, your controller doesn't go with it — and nobody can raise the rent on equipment you already bought.

Low latency even under a full download

A saturated link normally fills every buffer between you and the internet, and your ping goes from 10 ms to 300 ms. That's bufferbloat, and it is why calls break up the moment someone hits download.

We deploy fq_codel queuing, which keeps each flow in its own queue and drops the standing backlog before it builds. Downloads still run at full speed — and realtime traffic stays realtime.

No bottleneck anywhere in the chain

You are only as fast as the slowest hop: ISP → ONT → router → switch → your device. One under-spec box, one bad patch lead or one port that quietly negotiated down, and the speed you pay for never reaches the desk.

We size and verify every hop, so you get the full speed you subscribed for — measured at the device, not at the router.

Per-device QoS — nobody gets to lag your game

Fair queuing is applied per host, not just per connection. So one machine running a cloud backup, a system update or a torrent cannot swallow the whole line and leave everyone else stuttering.

Your gaming session, your video call and your CCTV upload each keep their share. On business networks we take it further and give VoIP, POS terminals and payment traffic explicit priority over everything else.

Site-to-site Layer 2 bridge

Extend your LAN across the internet. Your branch sits on the same subnet as head office, so file shares, printers, network discovery and legacy software that assumes one flat network all just work — no re-addressing, no per-site exceptions.

We build these on encrypted tunnels and design the broadcast domain deliberately, so extending Layer 2 doesn't turn one site's problem into everybody's.

Wi-Fi 6 & Wi-Fi 7

Wi-Fi 6 wasn't a speed bump. It was a repair.

Earlier generations kept raising the headline number while the underlying problem went untouched: devices took turns shouting over each other, and everything fell apart once the room got busy. 802.11ax rebuilt that layer — and it borrowed the fix from mobile networks.

What 802.11ax actually changed

OFDMA
The channel is divided into resource units so the AP serves many clients inside one transmission, instead of each device waiting its turn. This is the scheduling model LTE and 5G have always used.
MU-MIMO
Multiple spatial streams to multiple clients at once, upstream as well as down — so one slow device stops holding up the rest.
BSS Coloring
Each network tags its transmissions with a colour. Radios can tell a neighbour's traffic from their own and stop deferring needlessly — the single biggest gain in flats, shoplots and dense offices.
Target Wake Time
Devices agree when to wake and transmit. Less airtime wasted, and noticeably better battery life on phones and IoT.
WPA3
Modern authentication and encryption as a baseline rather than an optional extra.

What Wi-Fi 7 adds on top

MLO
Multi-Link Operation: a client uses 2.4, 5 and 6 GHz at the same time rather than picking one. If a band gets congested or interfered with, traffic keeps moving on the others — the same redundancy thinking as carrier aggregation on 5G.
Lower jitter
Because links fail over instead of stalling, latency stays flat. That is what calls, video and remote desktops actually care about.
320 MHz channels
Double the width of Wi-Fi 6E in the 6 GHz band, where there is clean spectrum to use it.
4096-QAM
Denser modulation for higher throughput at close range and good signal quality.
Multi-RU
More flexible allocation of those resource units, so scheduling stays efficient with mixed client types.

Consumer Wi-Fi finally inherited cellular's reliability engineering

Scheduled airtime, coordinated interference handling and multi-link redundancy are ideas LTE and 5G proved at national scale. Wi-Fi 6 brought the scheduling; Wi-Fi 7 brought the redundancy. That is why we specify them — not for the number on the box, but because they behave predictably with fifty devices in the room.

IEEE 802.11axIEEE 802.11be 802.11k / v / rWPA3
Fibre to the desktop

Link keeps dropping? Falling back from 2.5G to 100 Mbps?

Copper is doing its best. A long run past a fluorescent ballast, a lift motor or a welding bay, a marginal patch lead, a warm NIC — and the link negotiates down to whatever it can hold. Often 100 Mbps. Sometimes it just flaps all day and nobody can say why.

Fibre doesn't have that failure mode. It carries light, so electrical noise simply cannot touch it: no interference, no earth loops, no downshifting, no distance anxiety. Plug it straight into the PC and the link is either up at full rate or it isn't — there is no mystery middle state.

10 Gbps on the LAN is the new normal. Editing off a NAS, moving VM images, running backups over the wire — all of it stops being an overnight job.

10G LAN

What it takes

SFP+ card in the PC
A network card with an optical cage instead of an RJ45 socket. Drops into a spare PCIe slot.
Fibre run to the rack
Thin, flexible and routed alongside your existing cabling. No re-wiring the whole building.
Switch with SFP+ ports
Supplied and configured with the rest of the network, sized for how many desks go optical.
Immune to interference
Runs happily past machinery, lift shafts and power runs that make copper unreliable.
No downshifting
The link runs at its rated speed or it doesn't come up. No silent drop to 100 Mbps.
Distance
Hundreds of metres on multi-mode, kilometres on single-mode — past copper's 100 m ceiling.
Roaming design

Every access point hardwired. No exceptions.

Wireless mesh is convenient to sell and painful to live with: each hop halves throughput, latency stacks up, and one weak link degrades everything behind it. Our default multi-AP roaming deployments run copper or fibre to every AP.

Seamless handover
802.11k, v and r so devices move between APs without dropping calls or sessions.
One SSID
Staff, guest and IoT separated by VLAN and policy, not by making users pick a network name per floor.
PoE from the rack
Power and data on one cable, centrally switched, so an AP can be power-cycled remotely.
Fibre for distance
Between floors, blocks and outbuildings — past copper's 100 m limit and immune to the electrical noise of a plant floor.
Tuned, not guessed
Channel plan, power levels and band steering set from a survey and re-checked after occupancy.
Privacy first

Storage that lives in your building

Share locally
One place for the family photos, the team's project files or the shop's paperwork — at full LAN speed, not upload speed.
Reach it remotely
Access from outside over an encrypted connection, so working away doesn't mean copying everything to somebody else's cloud first.
Your data, your control
No scanning, no analytics, no terms of service that change next quarter. Nobody reads it but you.
No per-seat billing
Add users and terabytes without the subscription climbing every time the team grows.
Redundant by design
RAID or ZFS, scheduled snapshots, and an off-site copy so a failed disk is an inconvenience, not a disaster.
Fast when it counts
Pair it with 10G fibre to the desk and editing straight off the NAS stops being painful.
NAS & private storage

Your own storage. No prying eyes.

A NAS is simply a shared drive that belongs to you — sitting in your office or your home, on your network, under your lock. Friends, family or the whole team get to the same files, and so do you when you're away.

The difference from a public cloud drive isn't the feature list. It's that the disk is in your building. Nothing is indexed for advertising, nothing is mined for training data, and no provider policy change can lock you out of your own archive or quietly reprice it.

We size it to what you actually store, set up the sharing and permissions, wire in backups, and hand you the documentation. Privacy first, by construction rather than by promise.

NOC monitoring — included

We watch it. You just tell us when it feels off.

Every SME, MikroTik and Enterprise plan is onboarded to our Network Operations Centre at no extra cost. Not a trial, not an upsell — it's part of the deployment.

Continuously monitored

Links, switches, access points and gateways watched around the clock, with history kept so we can tell a one-off blip from a pattern.

"The internet feels janky"

That's a perfectly good bug report. Tell us, and we'll go and look — at the graphs, the error counters, the retry rates and the upstream. You don't need to diagnose it first.

Nothing changes without your say-so

We investigate remotely and come back with what we found and what we propose. Configuration changes are made only with your permission — never silently.

Why it's free

Because it costs us less than a truck roll. A network we can see is a network that stays stable, and a stable network doesn't generate emergency call-outs at 2 a.m. Monitoring is cheaper for us than firefighting — so we'd rather give it away than sell it to you.

Scope: NOC monitoring covers SME, MikroTik and Enterprise plans and above. Consumer-grade equipment isn't onboarded — it doesn't expose the telemetry the NOC needs, and we won't charge for a service we can't actually deliver on it.

Ask about NOC monitoring
Carrier side

We work with the operators, not around them

Most network problems live at the boundary between your equipment and the service you buy. Being on speaking terms with the operator shortens that argument considerably.

  • Working relationships with major ISPs including Telekom Malaysia
  • Service provisioning, handover and escalation handled on your behalf
  • PON and fibre expertise in-house — see the PON Stick
  • Multi-site links, failover and site-to-site VPN under managed IT
CapabilityDetail
Wi-Fi standardsWi-Fi 6 (802.11ax), Wi-Fi 6E, Wi-Fi 7 (802.11be)
Roaming802.11k / v / r, single SSID, VLAN-separated
AP backhaulHardwired copper or fibre — never wireless mesh
ControllerOn-premise, no monthly cloud subscription
SwitchingManaged L2 and L3, VLAN, LACP, PoE / PoE+
Queue managementfq_codel, per-device fair queuing, application priority
Desktop links1G, 2.5G and 10G, copper or fibre to the desk
Site-to-siteEncrypted Layer 2 bridge and Layer 3 VPN
OpticsSFP, SFP+, DAC, single-mode and multi-mode fibre
StorageNAS with RAID or ZFS, snapshots and off-site backup
SecurityWPA3, firewall policy, guest isolation, IoT segmentation
ISP-gradeOLT and PON equipment, carrier routing and switching
NOC monitoringIncluded on SME, MikroTik and Enterprise plans
OperatorsIncluding Telekom Malaysia
PricingQuoted per site survey — contact us
How a deployment runs

Surveyed, cabled, tuned, documented

  1. Site survey

    We walk the building, measure signal and noise, and find where the walls and the interference actually are.

  2. Design

    AP placement, channel plan, cable routes, switch and PoE budget, VLAN and SSID structure — on paper before anything is drilled.

  3. Install

    Cabling, termination, mounting and configuration, scheduled around your operating hours.

  4. Verify & hand over

    Coverage re-tested under load, roaming confirmed, monitoring onboarded, and the whole thing documented and handed to you.

Questions

Networking, answered

Usually yes, because the bottleneck is rarely your internet line — it is the air between your devices and the AP. Wi-Fi 6 improves how many devices can be served at once, so a busy house or office feels faster even on the same plan.

Only if your client devices support it. MLO needs both ends. We will tell you honestly whether Wi-Fi 6, 6E or 7 fits your device mix and budget rather than selling you the newest number.

We will if cabling is genuinely impossible, and we will say so up front. But a wireless backhaul spends the same airtime twice, so every hop roughly halves throughput and adds latency. Where a cable can be run, it always wins.

No. We run the controller on-premise, on hardware you own. There is no cloud subscription keeping your own access points alive, and no vendor that can reprice access to equipment you already paid for.

Usually. It is normally cabling, a marginal port or interference on a long copper run, and we start by testing rather than guessing. Where the environment is genuinely hostile — machinery, lift shafts, heavy power runs — fibre to the desk removes the problem entirely instead of working around it.

Yes, on SME, MikroTik and Enterprise plans and above, at no extra charge. We monitor, you tell us when something feels wrong, and we investigate remotely — making changes only with your permission. Consumer-grade equipment isn't onboarded because it doesn't expose the telemetry the NOC needs.

Yes — an encrypted Layer 2 bridge extends the LAN across the internet so both sites sit on the same subnet. It suits legacy software and network discovery that assume one flat network. We design the broadcast domain carefully, and where a Layer 3 VPN is the healthier choice we will recommend that instead.

Yes — carrier switching and routing, OLT and PON equipment, and optics. We also supply integrators building networks for their own clients.

Yes. We audit what is there, document it, and give you a costed list of what is urgent and what can wait. See managed IT for how ongoing cover works.

Let's survey your site

Tell us the building, the headcount and what keeps dropping. We'll design coverage that holds up under real load.