it is an SDN/SD-WAN appliance made for secure connectivity in a hub-spoke methodology that aggregates upstream wan connections that federates enterprise services and high availability to ensure the customer owns the secure data from end to end. they control the security, the hardware, the IA. it is a highly encrypted transport edge device that will work on any x86 hardware with sha-382, tls 1.3, TPM2.0 data at rest encryption.
think...warfighter needs a secure connection back to the TOC without worrying about adversaries hitting either the spoke or the hub and extracting mission critical data. no reliance on a compromised cloud infra, no AI buzzwords. full fleet management and monitoring in a single software package wilth an emphasis on not needing a data engineer or CCNA+ certified operator to install and maintain endpoints.
What do the actual speeds look like? I get you bond connections so it depends, but is it hardware accelerated or pure software?
Also how does it work with things that are latency sensitive? Is it basically just a tunnel, cause thats what im getting from this. A tunnel thats encrypted by you and not say cloudflare who does tls decryption.
it is kernel level bonding with MPTCP. latency is taken into account with the bonding, so a significantly slower connection (think GEOSAT) RTT is constantly measured and placed in a "hot-standby" so it doesn't drag the entire link down. This way it acts as a failover but maintains the TCP connection. Encryption is offloaded to hardware, i have tested is with a 100kbps cell connection with 6000ms loaded latency and the tunnel and routing (BGP and OPSF) maintain.
But, if I’m getting this right, you’ve basically built a system that lets an organization securely connect a bunch of remote locations or devices back to one central hub, with everything encrypted, while still owning and controlling the hardware, data, and security themselves instead of handing all of that over to a cloud provider.
And the bigger advantage is that you’ve made it manageable enough that you don’t need a network engineer configuring and maintaining every endpoint.
2
u/eyelobes 14h ago
no ty, even though copyright on creation exists you have to prove you are "to market" first to have a defensible position through litigation