Pattern TE-E

Flow out of the zone: a diode in and out

Two diodes in opposite directions are not a bidirectional link, as long as they stay physically separate.

Area
TEMPEST/RÖS
Environments
1
Products used
10

How it is built

One diode carries backup and logs out, another carries updates in under its own approval. Neither carries anything the other way.Level A zoneOutside the zoneDiode outWorkstationsDiode inBackup and logsUpdatesfiles and logsout of the zoneno way backinto the zoneafter review
One diode carries backup and logs out, another carries updates in under its own approval. Neither carries anything the other way.Level A zoneOutside the zoneDiode outWorkstationsDiode inBackup and logsUpdatesfiles and logsout of thezoneno way backinto thezoneafter review
  • Approval document per article numberThe two diodes are requested separately — a supplier statement says nothing about the unit.
  • The direction sits in the opticsNo rule, no configuration, no setting that can be changed afterwards.
  • One-way path
  • Data path
  • Path that does not exist
One diode carries backup and logs out, another carries updates in under its own approval. Neither carries anything the other way.

How it works

Backups and logs leave the zone through one diode. Updates enter through another. The two are physically separate devices with separate approvals.

They stay two links as long as neither depends on the other. That independence is the property being protected, and it is lost quietly — usually when someone automates a retry that waits for something from the other side.

The restore is the hard direction

Getting data out is straightforward. Getting it back in crosses the boundary the wrong way and needs its own solution, its own approval and its own decision owner. Design it before the first backup runs, not after the first incident.

In the catalogue

Equipment from the catalogue

Standard

Data Diode Bidirectional 1 Gbit Dual AC

Secure two-way communication using a fully hardware-based design that removes any risk of data flowing in the…

Product no 60-00-7563

Standard

Data Diode Bidirectional 1 Gbit Dual DC

Secure two-way communication using a fully hardware-based design that removes any risk of data flowing in the…

Product no 60-00-7564

TEMPEST Level A · RÖS U1

Data Diode Secure 1 Gbit MM TEMPEST

Data rate
1 Gbps
Wavelength
Multimode 850 nm
Input, LC
1000 BaseSX

Product no 60-00-7303

Standard

Single Slot Unit DC

Fibersystem’s new enterprise-class 50-502 Rack System is designed to provide a flexible, manageable system…

Product no 60-00-7231

Standard

Data Diode Middleware (DDMW)

Software solution for transferring data over data diodes in such a controlled manner. It consists of a sender…

Product no 60-00-7367

Standard

Rack 19" 3 HU 16 Slots SNMP

Fibersystem’s new enterprise-class 50-502 Rack System is designed to provide a flexible manageable system for…

Product no 60-00-6918

Standard

Single Slot Unit AC

Fibersystem’s new enterprise-class 50-502 Rack System is engineered to deliver a flexible and easily…

Product no 60-00-6406

Standard

Rack Shelf 19" 1 HU (1–3 Single Slot Units)

Fibersystem’s new enterprise-class 50-502 Rack System is designed to provide a flexible manageable system for…

Product no 60-00-6505

Standard

Ethernet Fiber Optical Dual Converter 1 Gbit

Secure rack-mounted module featuring two fully independent channels, specifically designed to prevent…

Product no 60-00-7425

TEMPEST Level A · RÖS U1

Secure Data Tap 1 Gbit

Duplication of network signals, including any existing physical errors, to transmit-only ports and is…

Product no 60-00-7450

Hands soldering a circuit board under a work lamp

Next step

Designing something that is not here?

Send us the constraints. We build from idea to certified end product, and most of what is in the catalogue started that way.

Verified credentials

All certifications