Summary

  • GÉANT is a Dutch association, legally GÉANT Vereniging, that operates a pan-European research and education network and coordinates common services with national research and education networks. It is not a commercial operator, a centralised university network, or a separate internet: its value lies in making autonomous national systems work together.
  • The network reports about 9 petabytes of traffic per day, backbone capacity of up to 12 terabits per second, and average availability of 99.999%. These figures describe distinct layers and periods; they do not mean every path operates at 12 Tbps, that each user receives that speed, or that interruptions do not occur.
  • The current infrastructure combines an open optical system built under GN4-3N with a Nokia IP/MPLS platform migrated between June 2024 and January 2026. The transition covered 32 sites and 1,240 services and used the GÉANT Automation Platform to rebuild services from intent models rather than copying configurations device by device.
  • GÉANT's relevance today goes beyond connectivity. It coordinates eduroam and eduGAIN, cloud procurement through OCRE, security communities, global research connections, and new contracts for EuroHPC hyperconnectivity and EUMETSAT data distribution. This breadth also creates dependencies on public funding, NRENs, operators, cloud providers, and the quality of federated identity.

The continental layer becomes visible when the path crosses borders

A student accessing a scientific portal or a researcher transferring data typically sees the name of the university, the laboratory, or the national network. GÉANT sits behind. Its continental layer becomes visible when traffic needs to cross countries, reach a supercomputer, or go to another regional network. The path connects the campus to an NREN and then to GÉANT, without removing operational responsibility from the national network.

Federation is the operating model, not a metaphor

Europe did not create a single-centre managed academic network. The NRENs maintain infrastructure, policies, and national relationships, while GÉANT provides shared layers. The design reflects differences in funding, geography, telecommunications market, and technical maturity. It offers scale without imposing a continental authority, but leaves end-to-end performance dependent on several administrative domains.

The association, the network, and the project are linked, but not the same thing

GÉANT designates three realities. GÉANT Vereniging is the legal entity that employs people and signs contracts. The GÉANT network is the optical, IP, and services infrastructure. The GÉANT Project brings together phases co-funded by the European Commission and the NRENs. A entity in GN5 may work for a national network, and a funding phase may end while the association and the production network continue.

A specialised network remains connected to the wider internet

The phrase “European academic internet” only works with caveats. GÉANT uses IP, BGP, Ethernet, MPLS, optical transport, and ordinary commercial interconnections. The specialisation comes from policy, eligibility, and capacity. GÉANT IP offers private transit to the research community; GÉANT World Service buys commercial access. Institutions can also use local peering, transit, or direct connections to clouds.

Europe's fragmented starting point ruled out a simple central design

Before a mature internet market existed, European universities used national academic networks, EARN, X.25 services, and different IP systems. Replacing everything with a single organisation would have required taking on national budgets, teams, and policies. The solution was to overlay European coordination on independent domestic infrastructures, strong for common needs and limited when the decision belongs to a campus or country.

RARE created a forum before a common production service existed

RARE was formally established in 1986 to organise European cooperation on research networks. It brought together planning, policy, technical exchange, and shared practices; it also housed the initial activities of RIPE NCC in 1992. Its main role was to build habits of coordination before a common backbone existed. However, to procure and operate a continental network, a more specialised entity was needed.

DANTE turned coordination into procurement and operation

RARE created DANTE in 1993 to obtain and operate pan-European services. Representation and technical collaboration remained in the associative sphere, while DANTE handled suppliers, contracts, projects, and production. The division anticipated GÉANT: technical consensus is not enough; someone needs to buy capacity, handle incidents, and be accountable for public resources.

EARN and RARE converged into TERENA

EARN had been active since the 1980s as a European academic organisation. In 1994, it merged with RARE to form TERENA, responsible for representation, technical communities, conferences, and knowledge sharing, while DANTE kept most of the operations. As network, identity, security, and cloud became integrated, the institutional separation lost usefulness.

The first GÉANT network became a production system in 2001

Sources place the start of the programme in 2000 and full operation on 1 December 2001. They are different stages: launch and entry into service. The backbone gave NRENs a multigigabit environment, common operations, and a basis for dedicated circuits, identity, and global connections. It also reduced the cost of organising a continental solution for each scientific collaboration.

GÉANT2 expanded control over the optical layer

In the mid‑2000s, GÉANT2 moved towards fibre rights, wavelengths, and long‑term optical control. A fully managed circuit is simple, but leaves evolution and much of the diagnostics with the operator. Controlling fibre or spectrum allows introducing dedicated technologies and services with greater freedom, at the cost of more engineering responsibility.

Identity, security, and communities widened the mission

By the late 2000s, GÉANT was no longer just a backbone. eduroam took academic credentials outside the campus; eduGAIN connected national federations; certificates, security, measurement, and virtual networks complemented transport. Working groups, SIGs, and the TNC conference spread operational expertise. They do not guarantee adoption, but create language and trust useful in multi‑domain services and incidents.

The 2014 merger combined operations and member governance

DANTE and TERENA merged on 7 October 2014 to form the current GÉANT Association. Operations, projects, member relations, technical communities, and identity came under one organisation. It was not a startup built from scratch, but the consolidation of institutions, contracts, and competences with decades of history.

A Dutch legal seat does not make GÉANT the owner of national networks

GÉANT Vereniging is registered in the Netherlands under number 40535155. It has a UK branch in Cambridge and, since October 2025, a public‑policy office with one person in Brussels. The entity can contract and employ, but it does not hierarchically control the NRENs nor turn Amsterdam into the operational centre of all campuses.

Counting a federation produces several correct numbers

The site speaks of 43 NRENs, while the legal description lists 37 NREN members, NORDUnet representing five Nordic networks, and associates. GN5 uses other counts for partners and countries. Each number measures a different unit. The community may represent 43 national networks without all being separate legal members with the same vote.

Member governance makes GÉANT both supplier and common institution

The General Assembly is the highest authority and elects the Board. Gilles Massen was still chair at the research cut‑off, and Lise Fuhr had been CEO since November 2024. For the NRENs, GÉANT is a supplier that they themselves govern, aligning services and requiring negotiation among countries. The GN5 workforce goes beyond the association’s payroll: many contributors are in NRENs. GÉANT reported 171 employees at the end of 2024 and a net increase of eight in 2025, without publishing a verifiable final total. Massen announced an early departure after a successor was chosen; the transition was not yet complete.

The physical backbone is assembled, not wholly owned

The network combines dark‑fibre rights, leased spectrum, managed capacity, submarine systems, equipment, colocation, and partner infrastructure. GÉANT does not own every cable or building. Its role is to bring together long‑term rights and services into a coherent network. Controlling a wavelength gives autonomy, even when the route still depends on the fibre owner or a landing station.

GN4-3N rebuilt the optical foundation

Between 2019 and 2023, GN4-3N put 69 routes into production, installed 405 Infinera nodes, retired 50 legacy links, and lit 26,047 km of fibre or spectrum across 34 countries. The programme widened optical control and paved the way for spectrum services, new coherent optics, and experiments in quantum, timing, and sensing. This openness demands more skills and support.

An open line system trades appliance simplicity for lasting flexibility

FlexILS separates fibre, amplification, and ROADMs from transponders, coherent optics, and routers. GÉANT can renew the transmission without replacing the entire line. This is not total independence: multi‑vendor interoperability, optical budget, spectrum, and support boundaries remain complex. Spectrum services allow an NREN or project to bring its own technology, accepting compatibility and operation.

Twenty-six thousand and thirty thousand kilometres describe different scopes

GN4-3N counted 26,047 km lit; later material describes roughly 30,000 km of broader infrastructure. The difference likely reflects date, rounding, or additional routes. It is more accurate to keep both figures with their scopes than to use the larger as a universal length.

Capacity figures describe layers, not a single speed

GÉANT reports up to 12 Tbps backbone capacity and about 9 PB per day; the 2025 report records 3.6 exabytes, close to 9.9 PB daily on average. A route may combine spectrum, 100G or 400G waves, an 800GE interface, and a smaller NREN access. The 400G ZR+ test over more than 3,400 km proved feasibility on one route, not a general conversion.

The Nokia migration changed the operating model beyond the vendor

In 2023, GÉANT chose a Nokia IP/MPLS platform in a contract led by Nomios to replace Juniper. The migration, from June 2024 to January 2026, covered 32 sites and enabled 800GE. The engineers did not copy the legacy configuration: they modelled services, removed undocumented behaviours, and rebuilt the network from the design. An 800GE interface still depends on the optical layer and the remote end.

Moving 1,240 services required a live migration, not a blanket shutdown

The old and new cores coexisted while services were moved in stages and telemetry validated each change. GÉANT did not report any outage attributed to the migration. That does not mean there were no independent incidents nor rule out brief degradation. The established fact is the replacement of a continental backbone platform without a planned wholesale shutdown.

GAP brought design and intent closer to the source of truth

The GÉANT Automation Platform is built on Workflow Orchestrator. Requests become models, are validated, generate configuration, pass checks, and are compared with telemetry. The migration revealed dependencies that existed only in operational memory. Automation became safe only after those behaviours were documented and standardised, not before.

Automation reduces manual variation and enlarges the blast radius

A validated flow applies changes consistently and makes rollback easier. The same speed can propagate a model error. That is why production‑like labs, staged deployment, access control, approvals, and state reconciliation are part of the architecture. The system must stop when reality does not match intent.

GÉANT IP offers private transit to the research community

GÉANT IP connects NRENs and eligible partners in a private routed service. It provides a common environment for research traffic without being retail transit. The community remains linked to global research networks, clouds, and the commercial internet when needed.

GÉANT World Service exists because research networks also need the commercial internet

NRENs carry general content, cloud applications, and public traffic. World Service buys commercial transit and complements GÉANT IP; national networks can add peering or local providers. The coexistence makes it possible to separate policy, cost, and resilience and confirms that GÉANT does not replace the public internet.

Dedicated circuits, VPNs, and GÉANT Open solve different problems

The portfolio includes point‑to‑point, managed wavelengths, spectrum, L3VPN, multi‑domain private networks, and GÉANT Open. A circuit offers predictable capacity but requires engineering; a VPN isolates policies; GÉANT Open works as a controlled exchange environment with 10G or 100G ports and R&E eligibility. It does not replace commercial transit or IXPs.

A multi‑domain service ends where another organisation’s authority begins

A route may cross campus, NREN, GÉANT, and another partner before the destination. GÉANT coordinates and can be the point of contact, but it does not configure every domain. Shared procedures and escalations reduce friction; end‑to‑end diagnostics still need to be assembled with evidence from several operators.

The operations centre manages a network it does not see end to end

The GÉANT Operations Centre runs 24×7 to monitor, maintain, escalate, and coordinate. Its visibility is higher in the core and partial outside it. perfSONAR and transfer‑node tests measure loss, latency, and throughput to separate a backbone problem from a server, firewall, or national‑access issue. Measurement locates the limitation; resolving it requires the right owner.

A five‑nines average can coexist with many incidents

GÉANT states 99.999% average availability and, at the same time, 23 P1 and 1,581 P2 incidents in 2025. Redundancy can lose a path without losing the service, and a brief outage weighs little in the continental average. The percentage needs a denominator and scope; the number of incidents shows the operational work hidden by the average.

Global science depends on paths outside Europe

GÉANT works with Internet2, ESnet, CANARIE, RedCLARA, TEIN*CC, ASREN, WACREN, and UbuntuNet Alliance. It does not operate a single worldwide backbone: it coordinates capacity, spectrum, and contracts with regional networks. AfricaConnect and EUMEDplus follow this model, with local governance and European support in funding, procurement, and connection.

The July 2026 Sparkle agreements connected regional systems without creating a single owner

Slough–Allan strengthened ASREN–SESAME; Marseille–Cairo connected ENSTINET to ASREN and Europe; Lagos–Cape Town linked WACREN, UbuntuNet Alliance, and South African networks. The parties called the last one the first direct interconnection between African regional networks on African soil according to their definition. The claim should be attributed, but the reduction of intermediaries is a clear outcome.

Long‑term spectrum and cable commitments trade flexibility for continuity

Trans‑atlantic investments, Blue‑Raman, Medusa, and other capacity reduce reliance on short‑term circuits and diversify routes to Africa, the Middle East, and Asia. They also expose the network to submarine faults, landing stations, sanctions, licences, currency, and operator solvency. Different routes on a map may share infrastructure; real diversity demands more detailed evidence.

eduroam made institutional identity portable

eduroam allows the use of home institution credentials at a visited location. Access is provided locally and authentication passes through RADIUS back to the home domain. By the end of 2025, it covered around 45,000 sites in 112 territories and recorded 9.2 billion authentications. GÉANT does not store all passwords; security depends on certificates, devices, and institutional practices.

eduGAIN connects identity federations without replacing them

eduGAIN distributes trusted metadata of identity and service providers to accept foreign users. By the end of 2025, it had 83 members, seven candidates, and more than 10,100 entities, roughly 6,200 IdPs and 3,900 SPs. It avoids a central directory, but does not eliminate differences in attributes, assurance, or incident response.

MyAccessID and MyAcademicID bring identity to compute and mobility

MyAccessID provides protocol translation, identity linking, groups, and entitlements for EOSC and EuroHPC; it served around 55,000 registered users in 2025. MyAcademicID had served nearly 700,000. Certificates, metadata, and contacts are the silent foundation: an expired certificate or compromised key can stop access even when the network is available.

Cloud procurement became another shared continental layer

OCRE aggregates requirements, tenders for suppliers, and opens the framework to NRENs and institutions. Over 1,100 organisations in 29 countries were consuming services in 2025, while the catalogue offered options in 39 countries. These are usage and availability figures. The programme expected to surpass €500 million cumulative, an estimate that should remain attributed.

OCRE organises access to clouds, but does not operate their platforms

GÉANT negotiates terms and coordinates the framework, but does not control AWS, Azure, Google Cloud, or other providers. Outages, egress, product withdrawal, internal security, and jurisdiction remain external. Collective procurement improves negotiating power and may increase concentration if data and applications lock into a few hyperscalers. Real portability must be a success metric.

Security is both portfolio and community practice

GÉANT combines DDoS mitigation, flow analysis, certificates, eduVPN, TF-CSIRT, and TRANSITS. Some capabilities protect the core; others develop local teams. By the end of 2025, 230 organisations had adopted eduVPN. Common code does not standardise policies. TF-CSIRT and training build trust for cross‑border incidents, but do not replace a well‑structured local CSIRT.

ISO 27001 limits the claim to the scope of a management system

The 2025 certification confirms the assessment of a defined security management system. It does not prove that every NREN, component, or partner is free of vulnerabilities. Its value lies in the documented and auditable discipline within the scope; end‑to‑end security still depends on the other domains.

EuroHPC turns connectivity into part of Europe’s compute strategy

In September 2025, EuroHPC JU awarded GÉANT a contract of up to €60 million over 48 months to design, deploy, and operate hyperconnectivity between supercomputers, HPC centres, AI factories, quantum facilities, and data centres. The first services were expected in 2026; not all sites were active at the announcement. MyAccessID adds identity, groups, and entitlements: capacity and authorisation become parts of the same service.

EUMETSAT shows why a single contractual interface can matter across many networks

The five‑year agreement signed in May 2026 turns GÉANT into the point of contact to coordinate NRENs and regional networks in terrestrial distribution of meteorological data, connectivity, monitoring, and reporting. EUMETSAT avoids contracting each segment separately. GÉANT does not control all networks, but composes a coherent service and escalation chain.

Scientific data movement reveals the limits of ordinary enterprise networks

Particle physics, radio astronomy, Earth observation, climate, genomics, and AI call for specialised routes and transfer nodes. Performance also depends on servers, storage, firewalls, and national access. DTN tests separate network capacity from endpoint limits. The June 2026 Helsinki Declaration commits six regional networks to Earth observation; it is not, by itself, a new circuit.

Fibre can be a scientific instrument beyond a communication path

Optical control makes it possible to experiment with QKD, precision timing, new optics, and acoustic sensing. The fibre becomes a physical laboratory. A successful test demonstrates feasibility under specific conditions, not general availability or settled economics.

The 254‑kilometre QKD was a milestone, not a service launch

In 2025, GÉANT tested QKD over 254 km of telecommunications fibre. A production service would require key management, loss budget, node architecture, classical authentication, monitoring, standards, and sustainable cost. The test does not equal an operational European quantum network.

Precision timing connects the network to metrology and distributed experiments

The Prague–Vienna pilot with White Rabbit studied time and frequency distribution for astronomy, physics, metrology, and quantum systems. Delay variation, asymmetry, optics, and calibration condition the outcome. It shows coordination capability, not a certified continental service.

Distributed acoustic sensing turns live fibre into a sensor

In December 2025, an Amsterdam–Zandvoort fibre detected vibrations using backscattered light; one hour generated 160 GB. The technique can support science and cable monitoring, but raises questions of calibration, privacy, volume, and physical access. It is a demonstration, not an already generalised sensor network.

The Digital Research Environment tries to bring the entire stack together

The DRE seeks to combine community and commercial clouds, network, identity, security, allocation, and usage. A resource wallet could show entitlements and consumption across providers. The programme was still in proof‑of‑concept and needs to demonstrate accounting, portability, and autonomy before being treated as a mature European platform.

European sovereignty here means governed choice, not technological independence

GÉANT offers a member‑governed network, optical rights, common procurement, and shared identity. It still depends on Nokia, Infinera, Nomios, hyperscalers, submarine operators, and global partners. Sovereignty should be measured by alternatives, decision‑making power, and exit, not autarky.

The financial model combines membership and heavy reliance on public programmes

In 2025, GÉANT reported €58.159 million revenue and €1.509 million net result. The GÉANT Project provided €39.760 million, international projects €9.975 million, and membership fees €5.225 million. Commission grants represented 63%. Membership fees provide continuity, but do not replace funded development. The association has no shareholders; the general reserve of €19.802 million supports the mission. It must be decided which innovations become permanent operations and who pays for them.

Cash and short‑term liabilities reflect project timing

At the end of 2025, assets were €130.545 million, with €61.075 million in cash and €54.555 million in debtors, against €108.935 million in current liabilities. Much of this corresponds to pre‑financing received before spending. It cannot be read as free cash without reviewing the obligations of each project.

The 2026–2030 strategy asks the federation for more than carrying traffic

“Powering Knowledge for Europe”, launched in June 2026, seeks stronger physical and human networks, scalable services, and sustainable funding. The Brussels office brings policy and funding closer without being a NOC. Decision principles — members, innovation, scale, financial logic, anticipation, and impact — can collide. GÉANT must separate common needs from optional ambitions so as not to centralise every promising technology.

Risk accumulates at the boundaries between members, suppliers, and services

The federation depends on NRENs, Commission, carriers, fibre, colocation, manufacturers, clouds, identities, and scientific facilities. Nokia and Nomios bring consistency and concentrate the roadmap; OCRE may concentrate clouds; eduGAIN distributes trust and weakness. The key risks are funding, lock‑in, automation error, submarine cable, cyber‑attack, uneven assurance, and slow adoption. The absence of a major scandal does not eliminate this structural exposure.

GÉANT's importance lies in common layers that preserve local control

GÉANT does not centralise all networks, accounts, or procurement. It provides continental layers — optical, IP, identity, security, procurement, operations, and global links — that enable cooperation among national systems. Its success often appears under another brand and its boundaries remain distributed. Its legacy is to make coordinated scale possible without turning European research into a centrally owned network.