Connect your sites globally.
License-free.

Hub-and-spoke SD-WAN on UniFi. Every site rides two paths (fiber, cable, LTE or Starlink) back to your data centers and fails over in seconds, with no per-site license.

Talk to an Engineer

Why UniFi SD-WAN

UniFi Site Magic is the SD-WAN built into the UniFi gateways you already own.

License-free

UniFi SD-WAN uses your infrastructure and encrypts traffic with WireGuard VPN tunnels, so there is no license or subscription to renew.

1,000+

Sites

Scale to thousands of sites, each homed to more than one data center over diverse paths.

Diverse paths

Deploy up to 4 connections per site, so a circuit, carrier or hub failure never takes a site offline.

How SD-WAN works

Build one step by step, then send a hurricane through it.

Build your WAN

$0License cost

Have questions? Talk to an Engineer

Sites: 4
Hubs: 1
Paths: 2
Tunnels: 8

AT&TData centerSite

Map of Florida. A data center in Tampa connects to four sites over two carriers, Lumen and AT&T.

ScaleA thousand sites per hub group; add hubs to grow past it. Mesh groups for small estates, up to 20 sites.

SecurityCentralized inspection and segmentation at the hubs.

RedundancyUp to four active tunnels per spoke. Failover hubs can be added.

FlexibilityNAT for overlapping subnets, custom route advertisements, load balancing across hubs.

What you save

The recurring WAN cost you stop paying each year, after a business broadband line at each site. Pick a site count.

vs MPLS · 100 Mbps$596,400saved per year after broadband · 50 sites

vs Metro Ethernet · 100 Mbps$92,400saved per year after broadband · 50 sites

vs EPL · 1 Gbps$385,800saved per year after broadband · 50 sites

TechnologySaved with Site Magic, after broadband · 50 sites · per yearLegacy recurringInstall · per site

UniFi Site Magic$0 / mo · license-freeplus broadband, $141 – $307 / moBaseline$0$142 – $2,202 gateway

MPLS100 Mbps$1,135 – $1,670 / mo per site$596,400 saved$681,000$0 – $2,000

Metro Ethernet100 Mbps$295 – $792 / mo per site$92,400 saved$177,000$0 – $2,000

EPL1 Gbps$950 – $2,000 / mo per site$385,800 saved$570,000$0 – $2,000

Site Magic replaces the private WAN, not the ISP, so every site still needs an internet line. Each saving is the low end of the circuit’s published range less a business broadband line at the same speed ($141 / mo at 100 Mbps, $307 at 1 Gbps), with no volume discount. Install excludes special construction at off-net sites. Sites that need a dedicated internet line instead of broadband save less; we price that per site.

Sources

MPLS, 100 Mbps port and access: CALNET (State of California) contract catalogs, Aug–Sep 2026: AT&T · Verizon · Granite
Metro Ethernet, 10/100 port plus 100 Mbps CIR: CALNET contract catalogs, Aug–Sep 2026: AT&T · Verizon · Zayo · Granite
EPL, 1 Gbps point to point: Lightyear quote data, Jan 2026: Point-to-point fiber pricing
Broadband ($141 / mo at 100 Mbps, $307 at 1 Gbps, North America medians) and install (up to $2,000; $0 on the CALNET catalogs above): Lightyear, Apr 2026: SD-WAN vs MPLS cost comparison
Site Magic gateways: Ubiquiti US store, Oct 2026, surcharge included: Cloud Gateways · SD-WAN requirements

How we migrate

We move a legacy WAN to Site Magic in three phases. The overlay runs beside your MPLS, and nothing cuts over before it is validated.

Evaluate

We inventory every circuit, carrier and routing dependency, map application flows, and decide whether SD-WAN is the right fit at all. Rollback is documented before anything is deployed.

Parallel overlay

The overlay goes in beside the production WAN. Routing policy, segmentation and failover are validated on every tunnel while MPLS still carries the traffic.

Cutover coordination

Sites move in coordinated windows by region or group. Each is validated live and documented before its circuit is disconnected. The MPLS bill ends when the last one goes.

Talk to a network engineer.