You own the outdoor network. Each of your customers runs a fully-independent ISP business on their own SSID — their pricing, their subscribers, their vouchers, their portal. Trafyx routes and isolates them all.
Traditional ISP platforms assume "one ISP, possibly multi-site." Trafyx WaaS assumes "one MSP, many independent ISP tenants sharing radio infrastructure." That's a real gap in the market, and it's where you'd land.
Row-level security in Postgres, plus per-tenant Supabase policies. A subscriber under Dune Fibre never sees Marina Cafe's data.
Each ISP tenant gets a branded subscriber portal at /portal/{slug}. Logo, colours, plan visibility all per tenant.
You see all tenants at once. Bill them per subscriber, per SSID, or per active session. Onboard a new ISP in minutes.
For hospitality and event tenants — vouchers sent to guest phones on room check-in, ticket scan, or manual dispatch.
If a Called-Station-Id doesn't match any known SSID, RADIUS routes to a configurable default tenant. No silent auth failures.
Ships parsing for Ruckus SmartZone. Plug-in patterns for Aruba, Ubiquiti, and Cisco Meraki are configurable.
Name, slug, brand color, logo, contact. Trafyx provisions a Postgres schema record and portal route.
Add every AP MAC + SSID combo that belongs to this tenant. Multiple APs, multiple SSIDs — all fine.
Hotspot, PPPoE, prepaid — whatever this tenant sells. Optional: attach a reseller price book.
One systemctl reload freeradius-provix and the new SSIDs are routing.
The current build has been dogfooded on a live Ruckus SmartZone deployment. Ask for the reference call.