First, who we are: we are Beijing Siwenlide, based in Shunyi, and we have spent 14 years delivering enterprise Network Equipment Packages and IT Operations Outsourcing. We have been doing multi-site networking for many years, and the two questions customers ask most are ”do we need a public IP address” and ”how much does it cost per year”. This year we turned this capability into a standalone product, Yuxinan, with pricing published openly online. This article explains it in full.
In one sentence: plug one appliance into an Ethernet cable or a 4G card, and headquarters, branches, stores, factories and travelling employees all join the same encrypted private network, with site interconnection, staff access and external-facing services managed on one platform. The product site is yuxinan.siwenlide.com, and a free edition is available to try first.
Three product lines, three needs
| Product line | What it solves | Key capabilities | |||
|---|---|---|---|---|---|
| Free trial edition | Free, forever | — | 2 Mbps | 2 devices | For personal use and evaluation; activated on registration; Layer 2 networking not included |
| Personal edition | RMB 79 | RMB 180 | 4 Mbps | Up to 10 | Multiple personal devices (NAS, software router, download box) |
| Business Basic | RMB 98 | RMB 316 | 8 Mbps | Add more as needed | Small teams; includes Layer 2 networking and team management |
| Business Standard (recommended) | RMB 198 | RMB 498 | 15 Mbps | Add more as needed | Multi-site collaboration; chain stores and multiple branches |
| Business Flagship | RMB 380 | RMB 860 | 20 Mbps | Add more as needed | More branches, higher bandwidth |
| High-Speed edition | RMB 498 | RMB 1,198 | 35 Mbps | Add more as needed | High-bandwidth stores, video surveillance backhaul |
| Custom Enterprise Development | Negotiable | Custom | Solution-based | Custom | Dedicated integration and deployment, on-site delivery, reseller white-label |
The three lines share one platform: dashboards and topology, per-link latency, packet loss, jitter and 4G signal, remote web management of branch gateways, WeCom and DingTalk alerts, and staged firmware upgrades. Every plan includes all multi-site networking and zero trust features; cloud private lines are billed separately on application.
Pricing: charged by number of endpoints — software endpoints and hardware devices are priced separately, starting from the free edition
| Plan | Software endpoints/year | Hardware devices/year | Forwarding bandwidth | Endpoints | Who it’s for |
|---|---|---|---|---|---|
| Free Trial Edition | RMB 0, free forever | 2 devices | 2 Mbps | — | For personal use and evaluation; activated as soon as you register; Layer 2 networking not included |
| Personal Edition | RMB 198/year | 3 devices | 4 Mbps | RMB 66 | Individuals with multiple devices (NAS, software router, download box) |
| Business Basic | RMB 980/year | 5 devices | 5 Mbps | RMB 196 | Small teams; includes Layer 2 networking and team management |
| Business Standard (Recommended) | RMB 1,980/year | 10 devices | 10 Mbps | RMB 198 | Multi-site collaboration: chain stores and multiple branches |
| Business Premium | RMB 4,980/year | 20 devices | 20 Mbps | RMB 249 | More branches and higher bandwidth |
| Custom Enterprise Development | Quotation on request | Custom | Depends on the solution | Custom | Dedicated integration and deployment, on-site delivery, white-label for resellers |
- Endpoint quotas cover hardware, administrator and employee accounts; P2P direct connections are enabled by default with no speed limit, and forwarding bandwidth is calculated from your plan quota plus any add-ons.
- Paying annually equals 10 monthly payments, effectively two months free; 5% off for 2 years, 10% off for 3 years or more.
- Bandwidth add-ons: from Business Basic upward, bandwidth can be added in 1 Mbps increments at RMB 198/year per 1 Mbps; software endpoints and hardware can be purchased as needed, prorated by remaining days.
- There is a 7-day grace period after expiry, during which full speed is maintained. We accept WeChat Pay, Alipay and corporate bank transfer, and invoices can be issued.
- Cloud private lines are billed separately: the standard NAT shared public IP tier is RMB 600/year and includes 10 Mbps outbound and 10 ports, with additional ports at RMB 50/year each (the free Personal Edition also includes 1 port mapping); a dedicated BGP public IP is RMB 1,800/year each and includes 5 Mbps, with extra bandwidth at RMB 80 per Mbps per month.
(The above are the public prices shown on the product site as of October 2026 and are subject to the Yuxinan official pricing page; software endpoints refer to clients on computers and phones plus administrator and employee accounts, and hardware refers to the Yuxinan box / all-in-one appliance.)
What it takes to go live: no network engineer needed on site
- Connect to the internet: plug in a network cable or a 4G SIM card; broadband dial-up, static IP and wireless relay are all supported.
- Network self-check: the device checks the line, default gateway, DNS resolution and platform connectivity one by one, and tells you directly which step failed and why — no guessing.
- Enter the activation code or scan a QR code: enter the enterprise activation code, or scan the onboarding QR code sent by your administrator with your phone, and the device joins the private network automatically.
The figure given on the product site is under 60 seconds from power-on to going live. Private keys are generated locally on the device and are never uploaded to the platform. For sites with no IT staff, such as chain stores and construction sites, this step is the key: no pre-configuration is needed before shipping, and the store manager simply follows the wizard.
What happens when something breaks: the line, the nodes and the platform each have a fallback
- Active-active central nodes: every gateway connects to all central nodes at the same time; if the primary node fails, it switches to the standby node in about 15 seconds, with no reliance on floating IPs.
- Wired link down, switch to 4G: failover completes in about 15 seconds, and the connection switches back automatically once the wired link recovers.
- Automatic failover to the backup tunnel when the primary tunnel is down, with no service interruption.
- No network outage if the platform is unreachable: when the management plane cannot be reached, the device keeps forwarding using its locally cached configuration.
The switching times come from real-device link-failure tests in September 2026, not theoretical values.
What we have done for security and compliance
- Each enterprise has its own tunnel interface and routing table on the central nodes, so two companies both using 192.168.1.0/24 never interfere with each other.
- Private keys never leave the device; the platform stores only public keys.
- Subnets require approval: subnets not approved by an administrator cannot enter the tunnel, preventing anyone from pushing a large subnet into the private network on their own.
- Inbound protection: rate limiting by source address, and scanners are temporarily blacklisted.
- Firmware updates are verified before flashing, and the device does not reboot automatically — you decide when to upgrade.
- Diagnostic exports are automatically redacted, with keys and passwords removed, so they can be sent straight to technical support.
- Audit reports are categorized along MLPS 2.0 (China’s Multi-Level Protection Scheme) dimensions; failed logins, permission changes and boundary changes are all traceable, and reports can be exported as PDFs for archiving.
When it fits, and when it doesn’t
| Scenario | Why it fits |
|---|---|
| Chain stores | One device per store, with POS, surveillance and ERP all connected back to headquarters; wired as the primary link with 4G backup, so checkout keeps running even when the line drops; overlapping store subnets need no changes to POS terminal addresses |
| Manufacturing plants | Collection devices and controllers at different sites can sit in the same broadcast domain, so engineers don’t have to travel to the site |
| Multi-branch enterprises | Headquarters and branches interconnect, branches stay isolated from each other by default, and a new site goes live the same day from a template |
| Construction sites and emergency response | Works over 4G alone, and can still expose services externally |
| Remote work | One authorization per person per device; access is cut off the moment an employee leaves |
| Personal NAS or self-hosted services | The free plan is enough for two devices; add a shared public IP when you need external access |
- Only two sites, both in the same city, both with static public IPs — a direct connection works too, so a platform isn’t necessary.
- Businesses that are extremely latency-sensitive (such as certain real-time control systems) — for key nodes we still recommend a carrier private line; the line is provided by the carrier, while we handle line selection, provisioning and interconnection.
- Dozens or hundreds of sites, spanning provinces, with local on-site presence required — this calls for a nationwide service provider to support deployment.
FAQ
Q: Do the three product lines have to be purchased separately?
A: No. Every paid plan includes the full multi-site networking and zero trust feature set. Only the cloud private line (public IP) is billed separately on request.
Q: Can it work with only 4G and no broadband?
A: Yes. Insert a 4G SIM card and the device joins the network; the tunnel parameters are tuned for 4G. When you need to expose services externally, the public IP sits at the central node and does not depend on the local line.
Q: The two sites use the same internal subnet — do I have to re-address them first?
A: No. Overlapping subnets can still be networked through mapping, with no changes to your existing internal addresses. This is the single biggest time-saver in multi-branch upgrades.
Q: Will business stop if the platform fails?
A: No. When the management plane is unreachable, devices keep forwarding using their locally cached configuration; you simply cannot change settings during that period.
Q: Do devices upgrade and reboot on their own?
A: They do not reboot automatically. Firmware is rolled out in stages and verified before flashing, and you decide when to reboot.
Q: Can I try before buying?
A: Yes. Register and use the free plan: two devices, 2 Mbps each, with the full set of networking and security features. Upgrade once you are sure it fits.
Want to see whether this solves your problem first?
Yuxinan product site: yuxinan.siwenlide.com, with a free plan, documentation in three languages, and configuration guides for 22 scenarios. If you’d like us to visit your site and put together a proposal, call 400-686-2011.
Further reading: How Beijing enterprises deploy multi-branch networking · How to manage IT for chain stores and multi-branch companies · How employees can securely access company systems when traveling or working from home · What IT outsourcing costs a year for SMEs
