Case Study Overview
This field case study documents a controlled deployment of the Intellilink Gateway™ control plane architecture in a real operational environment.
The objective of the validation exercise was to determine whether satellite-connected enterprise traffic could be re-anchored within a domestic Internet Service Provider (ISP) governance domain while maintaining the resilience and accessibility benefits of low-Earth-orbit (LEO) satellite connectivity.
The deployment focused on three primary validation objectives:
- Routing control
- Governance anchoring
- Tunnel stability
The exercise was conducted as a single-day validation window, using live enterprise traffic while applying strict anonymization to participating entities.
Test Environment Description
The validation deployment consisted of the following components:
Enterprise Site
An operational enterprise network generating normal Internet traffic.
Satellite Access Layer
Connectivity provided by a low-Earth-orbit satellite Internet service (Starlink).
Gateway Node
An Intellilink Gateway™ Agent Node deployed adjacent to the enterprise satellite terminal.
Domestic ISP Point of Presence
An anonymized ISP PoP serving as the governance anchor point where traffic decapsulation, policy enforcement, and routing occurred.
External Network
Standard Internet destinations accessed through the ISP's external transit connectivity.
All infrastructure participants were anonymized for this public document. No enterprise customer data was retained beyond transient packet forwarding.
Deployment Architecture
The deployment architecture introduced an overlay governance control plane on top of an existing satellite transport layer.
Enterprise traffic originating within the enterprise LAN was first processed by the Intellilink Gateway™ Agent Node, which established an encrypted tunnel toward the Intellilink Compliance Gateway PoP (ICGPoP) located within the domestic ISP domain.
Satellite connectivity served purely as a transport underlay, while governance functions including traffic decapsulation, policy enforcement, logging, and regulatory anchoring occurred within the ISP PoP environment.
This architecture effectively separated connectivity transport from governance enforcement.
Routing Behaviour Before Deployment
Prior to deploying the Intellilink Gateway™ control plane, enterprise traffic exited the satellite network directly through upstream satellite provider routing paths.
In this configuration, traffic did not traverse a domestic ISP governance anchor point prior to reaching the broader Internet. This behavior reduced visibility from a domestic network governance perspective because:
- Upstream accountability was ambiguous
- Traffic inspection points were absent within national networks
- Routing behavior was externally determined by satellite provider infrastructure
Traceroute measurements taken during this stage confirmed that traffic exited the satellite transport network before entering external transit providers.
Routing Behaviour After Deployment
Following deployment of the Intellilink Gateway™ Agent Node, enterprise traffic was encapsulated into an encrypted overlay tunnel directed toward the domestic ISP governance PoP.
Upon arrival at the Intellilink Compliance Gateway PoP (ICGPoP), traffic underwent the following processing steps:
- Tunnel termination
- Traffic decapsulation
- Identity binding
- Policy enforcement
- Observability logging
After processing, traffic was routed through the ISP's external peering infrastructure before reaching the public Internet.
Traceroute measurements confirmed that enterprise traffic now entered the domestic ISP routing environment prior to external Internet transit. This demonstrated successful traffic re-anchoring within the domestic governance domain.
Governance Restoration
The deployment demonstrated that enterprise satellite connectivity could be integrated into a conventional ISP governance model without modifying the satellite access infrastructure. The following governance properties were successfully restored:
Enterprise traffic visibly entered a domestic ISP Point of Presence.
Enterprise traffic appeared under ISP-controlled addressing space following tunnel termination.
Flow-level inspection and logging were possible within the ISP environment.
Network policy controls could be applied prior to external Internet transit.
These characteristics align with regulatory expectations for accountable Internet traffic flow within national communications frameworks.
Operational Observations
Throughout the one-day validation window, the system demonstrated stable operational behavior. Observations included:
- Consistent encrypted tunnel stability
- Predictable routing behavior after governance anchoring
- No observable disruption to enterprise browsing activity
- Successful policy insertion capability at the ISP PoP
Enterprise applications functioned transparently without requiring modifications to end-user systems.
Limitations of the Validation Window
The field validation was intentionally limited in scope. The exercise did not evaluate:
- Commercial-scale enterprise deployments
- Long-duration operational stability
- Lawful intercept system integration
- Enterprise billing models or retail ISP functions
These areas require additional evaluation beyond the scope of this validation window.
Conclusion
The field validation demonstrates that enterprise satellite connectivity can be integrated into domestic Internet governance frameworks through the use of an overlay control plane architecture. The Intellilink Gateway™ model successfully restored ISP anchoring, routing accountability, and policy enforcement capabilities while maintaining the resilience benefits of satellite connectivity.
These results indicate that satellite innovation and national Internet governance principles can coexist when integration is approached through deliberate architecture design.