# Captive Portal

Captive Portals provide a flexible way to onboard users to the Wayru Network using existing third-party hardware. They rely on standardized web redirection and authentication methods to control access, protect sessions, and enable operators to customize the user experience while monetizing connectivity.

### Technologies Used

* **HTTP/HTTPS Redirection** – Captive Portals redirect all user traffic to a landing page until authentication or terms are accepted.
* **RADIUS / AAA** – Authentication, Authorization, and Accounting services manage user sessions and credentials.
* **DNS Interception** – Requests are intercepted and redirected to the captive portal page.
* **Integration with Wayru Operators Portal** – Portals can be designed, customized, and managed through Wayru’s platform.

### Protocols Supported

* **Captive Portal Standard (RFC 8910)** – Modern specification for detecting and handling captive portals on client devices.
* **Hotspot 2.0 / Passpoint (Optional Integration)** – For hybrid setups where Passpoint is used alongside captive portals.
* **RADIUS Authentication Protocols** – Support for PAP, CHAP, and EAP where needed.
* **HTTPS/TLS** – Encrypted connections ensure that user credentials and interactions remain secure.

### Security Measures

* **Encrypted Sessions** – All portal logins and data transfers are served over HTTPS/TLS.
* **Secure Authentication** – Optional login methods include vouchers, watching ads, filling out forms, or completing surveys.
* **Session Isolation** – Each user session is segmented to prevent packet sniffing or local attacks.
* **Firewall & Traffic Filtering** – Ensures only authenticated users pass beyond the captive portal.
* **Rate Limiting & Bandwidth Controls** – Protects network resources and ensures fair usage.
* **Data Privacy** – Operators can collect limited information (via forms or surveys) in compliance with privacy regulations.

### Available Options

* **Free Access** – Users connect after accepting the terms of service.
* **Voucher-Based Access** – Operators sell or distribute time-limited or data-limited vouchers.
* **Ad-Supported Access** – Users watch ads or interact with sponsored content before accessing the internet.
* **Form-Based Access** – Collect user data (name, email, survey responses) before granting access.
* **Hybrid Models** – Combine free tiers with monetized access (e.g., 30 minutes free, then paid voucher).
* **Brand Customization** – Operators can apply logos, colors, and custom messaging to match their identity.

Captive Portal Hotspots use widely adopted networking protocols and security practices to deliver branded, customizable access experiences. By combining HTTPS/TLS encryption, RADIUS-based authentication, and Wayru’s Operators Portal, operators can securely customize experiences, monetize access, and gather insights — all while earning $WAYRU token rewards tied to hotspot uptime and usage.
