DiodeGate-10G — Technical Specifications

Key Features

  • High-Performance Unidirectional Ethernet Channels: Supports data rates up to 10 gigabits per second.
  • Maximum Throughput at Channel Speed: Dependent on packet length.
  • Special Acoustic Leak Protection: Hardware-level protection against information leakage through acoustic channels.
  • Interface Types: 10GBASE-SR, 10GBASE-LR, 10GBASE-ER (specified upon order).
  • Low Latency Transmission: Ensures minimal delay in data traffic.
  • Support for Jumbo Frames: Up to 16KB in size, but can handle any packet length generated by the transmitting equipment.
  • Compatibility with Classification Protocols: Supports mandatory (classification) labels.
  • Quick Setup Time: Minimal configuration required.
  • Unidirectional Channel “Seamless” Redundancy: Ability to configure unidirectional channels with seamless redundancy.
  • Configuration via SD Card: Easy setup via SD card.
  • Configuration and Monitoring via a Separate Network Management Interface (web, snmp, lldp).
  • Hardware Support for ICMP, ARP, SYSLOG on Data Plane Interfaces.
  • Passive Cooling: Low power consumption.
  • Continuous Operation (24/7).

Interfaces:

  • Double LC, 10GBASE-SR/LR/ER (specified upon order): Incoming traffic interface, bidirectional.1
  • Single FC, 10GBASE-SR/LR/ER (specified upon order): Outgoing traffic interface, transmitter only.1
  • RJ-45, Ethernet 10/100 BASE-TX: Network management interface.
  • SD Card Slot: Lockable.
1 — Maximum Cable Length: Defined by the interface type.

Indicators:

  • LED Status Indicators on the Front Panel.
  • LCD Display (16x2 with backlight) or Matrix Indicator:
  • Display interface — English

Configuration:

  • Configuration via Text File on SD Card.
  • Configuration via Web Interface and SNMP Protocol.
  • Configuration Settings Stored in Non-Volatile Device Memory.

Main Management Protocols:

  • LLDP (802.1ab): Notification.
  • ICMPv4 (Ping): Monitoring.
  • WEB Interface: Management and Monitoring.
  • SNMPv2c: Management and Monitoring.
  • SD Interface for Changing Passwords and Users in Administrative Account.
  • Configuration File on SD Card for Changing Community Names.

LLDP Management Interface:

  • Direction: tx only.
  • TLV Fields: types (802.1ab) — 1, 2, 3, 4, 5, 6, 8.

Web Management and Monitoring Interface:

  • Protocol, Port: http, 80.
  • Access Management: Two reserved user/password accounts.
  • Administrative Account: View and change settings, status, and statistics.
  • Monitoring Account: View settings, status, and statistics.
  • Password and User Change in Administrative Account via SD Interface.
  • Device Configuration Export.
  • Device Restart.
  • Network Parameter Settings for Management Interface.
  • Configuration Settings for Unidirectional Channel Modes (data plane) and Parameters (including filtering rules).
  • Statistical Information, Software Versions, Device Status.

SNMP Management and Monitoring Interface:

  • Protocol Version: v2c.
  • MIB File Included in Package.
  • Default Community Names: private (read/write), public (read).
  • Configuration File on SD Card for Changing Community Names.

Modes:

  • Bypass Mode Without FCS Control: Passes all L2 Ethernet packets; no packet FIFO (“direct wire”).
  • Bypass Mode with FCS Control: Passes L2 Ethernet packets; packets with incorrect FCS are discarded; includes packet FIFO.
  • Operational Mode: Hardware filtering L2+, hardware ARP, hardware ICMP (ping), hardware SYSLOG trap.
  • Only One Mode in Operation: Configured at setup.
  • Readiness Time: Not more than 12 seconds.

Bypass Mode Without FCS Control:

  • Universal Unidirectional Mode Without Traffic Filtering.
  • “Direct Wire” Mode (SPAN, Cut Through): Minimal impact on the channel.
  • Passes L2 Ethernet Traffic, Including Corrupted Packets.
  • Suitable for Span Traffic Processing.
  • Suitable for Uninterrupted Redundancy Channels.
  • Support for Jumbo Frames: Up to 16K bytes in length, but any length can be handled by the transmitting equipment.

Bypass Mode with FCS Control:

  • Universal Unidirectional Mode Without Traffic Filtering.
  • Store and Forward Mode: Includes packet FIFO buffer.
  • Passes L2 Ethernet Traffic: Discards packets with incorrect FCS.
  • Suitable for Uninterrupted Redundancy Channels.
  • Support for Jumbo Frames: Up to 12K bytes.

Operational Mode:

  • Unidirectional Operation with Hardware Filtering at Levels L2, L3 IPv4 (commonly referred to as L2+ in switches).
  • Discarding Packets with Incorrect FCS Checksums.
  • 802.1Q Packet Handling: Supported.
  • IPv4 Packets with Options Handling: Compatible with protocols supporting classification (mandated) labels (Astro Linux).
  • Hardware Filtering by MAC Address (L2): Up to 1 address.
  • Hardware Multicast MAC Address Filtering: Options: Block all, allow all, allow IP multicast.
  • Hardware Filtering by IP Address (L3): Up to 1024 allowed addresses; others are discarded.
  • Hardware Filtering by Destination IP Address (L3), Address Substitution (if needed), MAC Address Assignment: Up to 1024 rules; all packets without a listed IP address are discarded.
  • Hardware ARP Table for the Network Segment Associated with the Incoming Traffic Interface: ARP table populated with destination IP address rules and MAC address of the gateway.
  • Hardware SYSLOG Trap Messages: Periodic, 1 — packet counters.
  • Hardware SYSLOG Messages by Events: 1 — entry into operational mode, exit from operational mode, link up/down of the incoming traffic interface.
  • Hardware ICMPv4 (Ping) on Incoming Traffic Interface: Responds to ping requests to the destination addresses specified in the above rules.
  • Indicator on Packet Counter: Counts packets passing through all hardware filters and transmitted to the outgoing network interface.
  • Maximum L2 Packet Length: 12K.
1 — Sent to the Outgoing Traffic Interface.

Unidirectional Transmission Performance: 1

Packet Size (includes 4B FCS) L2 Packets/sec L2 Mbps L4 Mbps (UDP)
64 bytes 14880952 7619 2143
512 bytes 2349625 9624 8759
1024 bytes 1197318 9808 9368
1518 bytes 812744 9870 9571
9216 bytes 135340 9978 9929
  • Bypass Mode Throughput: Corresponds to the maximum theoretical for 10 Gbit/sec.
  • Hardware Filtering (Operational Mode): Does not affect throughput if the allowed address count and filtering rules are up to 7.Drops on small packets (64 bytes) thereafter.
  • Delay in Channel: Not measured.
1 — Tested on Ixia Equipment and Cisco TRex Software Laboratory Stand.

Reliability & Warranty:

  • Mean Time Between Failures (MTBF) — at least 40,000 hours
  • Design life — 10 years
  • Warranty period — 3 years

Package Contents:

  • Device
  • Power cable
  • SD card
  • SD card cover
  • SD card seal screws
  • User Manual
  • Packaging
  • Passport

Physical Characteristics and Environmental Conditions:

  • 1U for a telecommunications rack (HxWxD - 44x483x272 mm)
  • Power supply — 220V±10%, 50±1% Hz AC mains
  • Power connector — IEC-320 plug
  • Maximum power consumption — 18W
  • The device's is resistant, durable, and stable against mechanical and climatic factors
  • Operating temperature range: +5°C to +40°C
  • Maximum relative humidity during operation — 80%
  • Storage temperature range — -40 to +50°C
  • Maximum relative humidity during storage — 80%
  • Weight — no more than 4 kg

Manufacturer's Recommendations:

  • For reliable traffic reception from the unidirectional gateway, use server-grade network cards from reputable manufacturers or switch ports with guaranteed performance.
  • When using fiber-to-copper converters, ensure their performance meets the necessary requirements.Make the final decision about using our equipment after testing it in your setup, including all associated hardware components.A sample unit is available for free testing upon request.