Reference platforms
The hardware classes SENTRA NTS appliances are built on — reference platforms, subject to qualification.
Reference platforms, subject to qualification. The hardware below describes the classes of equipment SENTRA NTS appliances are being built on. Specific models, throughput figures and certifications are confirmed per model only after SENTRA has qualified and benchmarked it. Nothing on this page is a certification claim.
Baseline for every unit#
| Requirement | Why |
|---|---|
| Intel network controllers (i226-V 2.5 Gb/s class, Intel 10 Gb/s for SFP+) | Mature, well-supported Linux drivers; stable at line rate |
| Fanless, low power, 12 V | Runs 24/7 in a cupboard or rack, silently |
| Wired only (no Wi-Fi or cellular module fitted) | NTS protects the line; keeping radios out simplifies certification |
| x86-64 CPU with AES-NI | NTS, VPN and the IPS run on standard Ubuntu Server |
| A management port separate from the protected ports | The console and SENTRA GUARD link never sit in the customer's path |
| Hardware watchdog (recommended) | A hung unit restarts itself |
Home tier#
| Item | Reference class |
|---|---|
| CPU | Intel N150 (4 cores), fanless |
| Network | 4–6 × 2.5 Gb/s Intel i226-V |
| Memory / storage | Memory and an NVMe SSD fitted to SENTRA's specification |
| Examples of the class | White-label N150 firewall mini-PCs (Topton / CWWK / Glovary class); Protectli Vault VP2430 class as a reference unit |
| Bypass | None in hardware — see Fail-open and bypass |
SME tier#
| Item | Reference class |
|---|---|
| CPU | Intel Atom C3758R, 8 cores, fanless |
| Network | 5 × 2.5 Gb/s (Intel I225-V/I226-V) plus 4 × 10 Gb/s SFP+ |
| Example of the class | Qotom Q20332G9 class |
| Bypass | None in hardware |
Premium SME (with hardware LAN bypass)#
For customers on a single internet line where downtime is not acceptable.
| Item | Reference class |
|---|---|
| Example A | Axiomtek NA366 class — Intel Atom x7000C, up to 10 ports including 2 × 10 Gb/s SFP+, LAN bypass |
| Example B | Lanner NCA-1513 class — Intel Atom C3000, 6 × 1 Gb/s with two bypass pairs |
| Bypass | Hardware: the bypass pair connects WAN to LAN directly when the unit is off or unhealthy |
Performance#
Throughput depends on which NTS features are on — the edge shield and firewall are light; the IPS, application recognition and name filtering cost more CPU. SENTRA benchmarks each qualified model with full inspection on and publishes the supported line rate and number of users per tier. Until then, size conservatively and ask SENTRA.