Built for millions of guest sessions across thousands of venues.
A multi-tenant control plane, an HA RADIUS cluster, and a real-time analytics pipeline — wrapped in tenant isolation and rolled out behind a global edge.
From WiFi connect to marketing automation
Every guest session traverses these seven systems.
Core engine components highlighted — these are operated entirely by TheWiFy.
Six layers, one platform.
Each layer is independently scalable, separately monitored, and isolated from tenant data with row-level enforcement.
Edge / CDN
Static portal assets served from a global CDN with <50ms TTFB worldwide.
API + Control Plane
FastAPI on autoscaling Kubernetes, fronted by Cloudflare and an L7 load balancer.
RADIUS Cluster
FreeRADIUS in HA mode behind anycast IPs. Per-tenant attribute mapping + CoA.
PostgreSQL + Redis
Row-level tenant isolation, encrypted at rest with AES-256-GCM. Hot replicas + PITR.
Analytics Pipeline
Session events streamed to ClickHouse for sub-second analytics queries.
Identity + RBAC
JWT-scoped admin sessions, fine-grained per-tenant policies, audit logs.
Three deployment topologies.
Most customers run on multi-tenant SaaS. Large MSPs and ISPs go dedicated. Compliance-heavy industries go on-prem.
Multi-tenant SaaS
Default — operated by us on Google Cloud. 99.9% uptime target.
Dedicated tenant
For large MSPs — dedicated infrastructure with their own RADIUS pool.
On-prem / hybrid
Enterprise — RADIUS in your DC, control plane in cloud, or fully on-prem.