Public and private sector

Patch distribution into a closed network

The direction runs towards the protected side, which inverts every assumption the other flows rest on.

Area
Data diodes
Architecture patterns
1
Products used
2

The problem

What makes it hard

A network that can never be updated becomes a risk in itself. The diode gives a way in for updates without giving a way out.

The direction is the reverse of everything else here, and so is the threat model. An inbound diode does not protect the closed network — it protects against outflow, and admits whatever the lower domain sends. This is the environment where content validation ahead of the diode is not optional.

How it is built

OT export out, control or updates in

Two links in opposite directions, each with its own approval and its own decision owner.

See the full pattern
Two links in opposite directions, each with its own approval. Not one bidirectional path.OT networkOffice networkSCADA/historianDiode outDiode inAnalysis and reportingPatch sourcemeasurements outupdates in,its owndecision
Two links in opposite directions, each with its own approval. Not one bidirectional path.OT networkOffice networkSCADA/historianDiode outDiode inAnalysis andreportingPatch sourcemeasurementsoutupdates in,its owndecision
  • One-way path
  • Data path
Two links in opposite directions, each with its own approval. Not one bidirectional path.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Secure 1 Gbit SM 60-00-8362 and Data Diode Secure 100 Mbit MM 60-00-7304.

Standard

Data Diode Secure 1 Gbit SM

Data rate
1 Gbps
Wavelength
Singlemode 1310 nm
Input, LC
1000 BaseLX

Product no 60-00-8362

Standard

Data Diode Secure 100 Mbit MM

Data rate
100 Mbps
Wavelength
Multimode 1310 nm

Product no 60-00-7304

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications