A little clarity goes a long way

Internet & IT jargon, explained.

From FTTP and VDSL to DNS and VoIP. Straightforward explanations to help you understand your services and ask the right questions.

4G / 5G

Generations of mobile network technology, usable for primary internet access or backup. Coverage, signal, congestion and equipment affect actual performance.

ADSL

Asymmetric Digital Subscriber Line: broadband delivered over a copper telephone line, with a faster download than upload rate. Long lines can reduce performance.

Bandwidth

The capacity of a connection to carry data, usually measured in bits per second. More capacity helps when several people or applications use the connection at once.

Contention

Sharing network capacity between multiple users or connections. Performance can fall when demand exceeds the shared capacity.

Download / upload

Download means receiving data; upload means sending it. Video meetings, cloud backups and sending large files all need sufficient upload capacity.

Failover

Switching to a backup connection or system when the main one fails. Switching may interrupt sessions, and the backup must have adequate capacity and be tested.

FTTC

Fibre to the Cabinet: fibre reaches the street cabinet and the final connection uses copper, usually with VDSL2. It is different from full fibre to your building.

FTTH

Fibre to the Home: a name for fibre running directly to a home. FTTP is the broader term covering homes and business premises.

FTTP

Fibre to the Premises: a fibre connection runs to your property. Also called full fibre; the package you buy still determines speeds and support terms.

Full fibre

Broadband using fibre all the way to the premises. Speeds and any dedicated capacity depend on the service purchased.

ISP

Internet Service Provider: the company providing your internet connection. Support arrangements and service features vary between providers and packages.

Jitter

Variation in packet delay. Even with enough bandwidth, high jitter can make a voice or video call sound uneven.

Latency / ping

Latency is the delay as data travels; ping commonly measures a round trip. Lower latency helps interactive tasks such as calls and remote desktop sessions.

Leased line

A dedicated connectivity service with agreed capacity and service terms, often with equal upload and download speeds. Check the actual service agreement and resilience options.

MB / GB

Megabytes and gigabytes: measures commonly used for file sizes and storage. There are eight bits in a byte, so 80 Mbps is at most about 10 MB per second before overheads.

Mbps / Gbps

Megabits and gigabits per second: measures of connection speed. One Gbps equals 1,000 Mbps; connection speeds use bits per second; file sizes commonly use bytes.

ONT

Optical Network Terminal: the powered box that connects an incoming fibre service to your network equipment. It normally needs electricity to keep the connection working.

Packet loss

Data packets failing to reach their destination. This can cause broken audio, video freezes or slower transfers as missing data is resent.

SLA

Service Level Agreement: the written commitments for a service, including any response or repair targets and remedies. A target is not a promise that outages cannot happen.

SoGEA

Single Order Generic Ethernet Access: an FTTC-based broadband service ordered without a traditional analogue telephone service. Calls need a separate voice solution if required.

Symmetric connection

A connection with equal upload and download speeds. This can be useful for businesses sending substantial amounts of data as well as receiving it.

Throughput

The data transfer rate actually achieved. Wi-Fi, devices, server limits and network congestion can make it lower than the connection's advertised rate.

VDSL / VDSL2

Very-high-bit-rate Digital Subscriber Line: technology carrying broadband over copper, commonly between a street cabinet and your premises. Speed depends partly on copper line length and condition.

Access point

Equipment providing Wi-Fi access to a network. Positioning and interference affect coverage; adding more access points requires sensible planning.

CGNAT

Carrier-Grade NAT: a provider shares public IPv4 addresses between customers. This can restrict incoming connections and affect some remote access arrangements.

DHCP

Dynamic Host Configuration Protocol: automatically supplies devices with network settings such as an IP address and default gateway. Incorrect settings can prevent devices reaching services.

DNS resolver

A service that looks up DNS answers for your device. Resolver faults can make websites appear unavailable even when the internet link itself is working.

Ethernet

A wired networking technology commonly used to connect computers, switches and access points. A cable connection can help diagnose problems caused by Wi-Fi.

IP address

An address used to identify an interface on an IP network. It helps devices send traffic to the correct destination.

IPv4 / IPv6

Two versions of the Internet Protocol. IPv6 provides a much larger address space; equipment and services must support whichever version you intend to use.

LAN / WAN

A Local Area Network connects devices within a site. A Wide Area Network connects sites or wider networks; the internet is a common destination beyond your LAN.

Mesh Wi-Fi

A system of cooperating wireless access points. Wireless links between them share capacity, so wired connections between units can improve performance.

NAT

Network Address Translation: a router changes addresses as traffic passes through it, commonly allowing devices to share a public IPv4 address. It is not a substitute for a firewall policy.

PoE

Power over Ethernet: compatible network equipment receives power and data through one cable. The switch or injector must provide the required power standard and budget.

Public / private IP

A public IP address can be routed across the internet; a private address is used within private networks. A public address does not automatically mean a device allows incoming connections.

QoS

Quality of Service: rules prioritising certain traffic, such as voice, on a managed network. It cannot create extra bandwidth or control every network on the internet.

Router

Equipment that directs traffic between networks, such as your office and the internet. An office router may also provide firewall and Wi-Fi functions.

Static / dynamic IP

A static address is intended to remain fixed; a dynamic address can change. Fixed public addresses may be useful for approved remote access or service allowlists.

Switch

Equipment that connects devices within a local network. Port speeds and available capacity matter when moving files or connecting many devices.

VLAN

Virtual Local Area Network: a way to separate traffic logically on shared network equipment. Access between VLANs still needs appropriate routing and security rules.

VPN

Virtual Private Network: a protected connection across another network, often used for remote access. It does not replace device security or secure sign-in.

Wi-Fi / WLAN

Wireless local networking between devices and access points. A strong Wi-Fi signal does not by itself mean the internet connection is working well.

A / AAAA record

DNS records pointing a hostname to an IPv4 address (A) or IPv6 address (AAAA). They commonly help browsers locate a web server.

CNAME record

A DNS alias pointing one hostname to another. It points to the target hostname, which is then resolved to the appropriate service.

DKIM

DomainKeys Identified Mail: a digital signature lets receiving systems verify a signing domain and check signed message content for changes. It is one part of email authentication.

DMARC

Domain-based Message Authentication, Reporting and Conformance: checks alignment with the visible From domain using SPF or DKIM and publishes handling and reporting policy. It helps reduce domain spoofing.

DNS

Domain Name System: publishes records that connect domain names with services, including websites and email. Incorrect changes can interrupt those services.

DNS propagation

The gradual appearance of changed DNS answers as caches refresh. There is no single worldwide switch that updates every user at once.

DNSSEC

DNS Security Extensions: signatures help validating resolvers check the authenticity of DNS answers. DNSSEC does not encrypt traffic or prove a website is trustworthy.

Domain name

A readable internet name such as ionitltd.net. Registration, DNS, website hosting and email are separate services even when supplied together.

IMAP

Internet Message Access Protocol: lets a mail client access and organise messages on a mail server. Deleting a synchronised message may remove it on other devices too.

Mailbox / alias

A mailbox stores messages; an alias is an additional address routing messages to a destination. An alias does not necessarily have its own sign-in or storage.

MX record

Mail Exchange record: tells sending mail systems which servers receive email for a domain. It does not configure an individual mailbox.

Nameserver

A server providing DNS information. Authoritative nameservers hold the published records for a domain; changing them can change where all its DNS is managed.

POP3

Post Office Protocol version 3: retrieves email from a server, often into a local mail client. Whether a copy remains on the server depends on the settings.

Registrar

The organisation through which you register and manage a domain. Keep account access and renewal contact details current to reduce the risk of losing control.

Registry

The organisation maintaining the register for a domain ending, such as .uk. It operates separately from the registrar you deal with.

SMTP

Simple Mail Transfer Protocol: used to send and relay email. Correct authentication and encrypted connections matter when configuring mail clients and applications.

Spam filtering

Checks designed to identify unwanted or suspicious email. Legitimate messages can be filtered and harmful messages can still get through, so review and caution remain necessary.

SPF

Sender Policy Framework: a DNS policy identifying servers authorised to send mail for an envelope-sender domain. Forwarding and third-party senders need careful configuration.

TTL

Time to Live: how long a DNS answer may be cached. Changes can take time to appear because earlier answers remain cached until they expire.

TXT record

A DNS record containing text, used for purposes such as service verification and email authentication. Copy the provider's required value carefully.

Caching

Keeping a reusable copy of data to speed up later requests. An old cached copy can explain why a recent website update is not yet visible.

CDN

Content Delivery Network: distributes content through multiple servers, often nearer visitors. It can improve delivery but does not replace correct website security or backup.

Certificate

A digital document used in TLS to help prove a server controls a hostname and establish secure connections. Expiry or incorrect configuration can trigger browser warnings.

Cloud

Computing services accessed over a network, usually supplied from a provider's infrastructure. Your organisation still needs suitable access controls, data handling and recovery arrangements.

CMS

Content Management System: software for editing website content. Its themes, plugins and core software need appropriate maintenance and access control.

Data centre

A facility housing computing and networking equipment. Power, connectivity and resilience arrangements vary between facilities and services.

HTTPS

HTTP over TLS: an encrypted connection between a browser and a website. A secure connection does not guarantee the page's content is safe or accurate.

SEO

Search Engine Optimisation: improving how search engines discover and understand useful website content. It involves technical setup and content; rankings are not guaranteed.

Server

A computer or software system providing services to other devices. It may run on physical hardware, in a virtual machine or on a hosted platform.

SSL / TLS

TLS encrypts connections and is the successor to SSL, although people still say SSL certificate. Encryption protects data in transit; it does not establish that a business is trustworthy.

VPS

Virtual Private Server: a virtual server on shared physical infrastructure. Resource allocation, management, backup and availability depend on the purchased service.

Web hosting

A service that stores and serves website files or applications. Domain registration alone does not include a working website.

Encryption

Transforms readable data into a form requiring the right key to read. Protecting and recovering keys is as important as enabling encryption.

Endpoint / EDR

An endpoint is a device such as a laptop or server. Endpoint Detection and Response monitors activity and supports investigation and response to suspicious behaviour.

Firewall

Controls network traffic according to rules. Effective protection depends on the rules, maintenance and the other safeguards around it.

Least privilege

Giving people and systems only the access needed for their tasks. Limiting administrator rights helps reduce the impact of mistakes or compromised accounts.

Malware

Software designed to harm systems, steal information or enable unauthorised access. It includes several threats beyond traditional computer viruses.

MFA / 2FA

Multi-factor authentication requires different types of evidence to sign in; two-factor authentication uses two. It helps protect accounts when a password is stolen.

Password manager

A tool for storing and generating passwords securely. Protect its account carefully and use unique passwords for individual services.

Patch management

The process of assessing, testing and installing software fixes. Keeping software supported and updated helps address known vulnerabilities.

Phishing

Messages or websites that trick people into revealing information or taking harmful actions. Verify unexpected requests through a known, independent contact route.

Ransomware

Malicious software that can encrypt systems, steal data or demand payment. Prevention, isolated recovery copies and a tested response plan all matter.

Zero trust

An approach that verifies access requests and limits permissions, including inside the network. It requires ongoing design and management.

3-2-1 backup

A planning rule: three copies of data, on two types of storage, with one off-site. Isolation, access controls and restore tests still need consideration.

Backup

A separate recoverable copy of data. Its usefulness depends on what it covers, how it is protected and whether restoration has been tested.

Business continuity

Planning how essential business activities continue during disruption. It is broader than restoring IT systems alone.

Disaster recovery

Arrangements to restore technology after serious disruption. This includes people, access, dependencies and tested procedures as well as backup data.

Immutable backup

A backup protected against alteration or deletion for a defined period. The actual protection depends on implementation, retention settings and privileged access.

Retention

How long copies or records are kept. Choose periods that suit recovery needs, storage capacity and applicable obligations.

RPO

Recovery Point Objective: the maximum data loss a business aims to tolerate, measured in time. It helps determine how frequently recoverable copies are needed.

RTO

Recovery Time Objective: the time within which a business aims to restore a service after disruption. Recovery plans and tests should show whether that target is realistic.

Snapshot

A point-in-time view of a system or storage volume. A snapshot on the same underlying platform may be lost with that platform and is not automatically an independent backup.

Synchronisation

Keeping data consistent between locations or devices. Deletions and unwanted changes can synchronise too, so sync alone is not a backup strategy.

DDI

Direct Dial-In: a number that routes incoming calls directly to an extension, team or configured destination. Routing depends on the phone system setup.

IVR

Interactive Voice Response: a telephone menu that routes callers based on their choices. Clear, short menus make it easier to reach the right person.

Number porting

Moving a telephone number between providers. Check eligibility and coordinate the transfer before cancelling the existing service to avoid losing the number.

PBX / hosted PBX

A Private Branch Exchange manages business calls and extensions. A hosted PBX runs with a provider, while phones still rely on suitable local connectivity and power.

Power resilience

Arrangements that keep equipment powered during an outage. Internet-based phones may need backup power for the router, fibre terminal, network switches and handsets.

PSTN

Public Switched Telephone Network: the traditional telephone network. When moving to IP-based voice, check compatibility of alarms, lift phones and other connected equipment.

SIP

Session Initiation Protocol: signalling used to establish and manage many internet-based calls. It is one part of a complete voice service.

SIP trunk

A connection between a phone system and a voice provider using SIP. Capacity, number support and compatibility should be checked for the intended system.

VoIP

Voice over Internet Protocol: phone calls carried over IP networks. Call quality depends on connectivity, network configuration and working equipment.

Still unsure what you need?

Tell us what your business is trying to do. We will explain the options in plain English.

Talk to ION IT