Home » Network Infrastructure Management Products | ZPE Systems » Network Edge Routers » Branch Gateway for Edge Networking | ZPE Systems

Nodegrid Hive SR

Deploy the turnkey, next-generation Out-of-Band gateway for automated, fast, & flexible edge networking

Legacy Out-of-Band (OOB) solutions focus on connecting to target devices. For your modern enterprise, there is a larger focus on preventing downtime, true zero touch deployment to gain predictability, ease of use and optimization of services at the edge. You need a solution that offers total freedom to address all of these problems – The Nodegrid Hive Services Router TM (HSR).

Hive SR is the next-generation OOB Branch router and addresses the gaps found in OOB solutions from other vendors. In one box, it combines five valuable capabilities including:

  • Gateway mode out of the box, with cloud-based zero touch provisioning of connectivity, security, & third-party workloads
  • Highly flexible WAN connectivity options, including: 4G, 5G, Data Plans, Wi-Fi, Starlink, and more.
  • Open management platform – Including native support for third-party VMs & container applications
  • Full-featured NetDevOps automation at the edge, with rich orchestration from the cloud Next-generation out-of-band
  • Zero Trust Security Edge visibility via direct-connect
  • USB environmental sensors & actuators
HSR – Ports

Rapid, Effortless Deployment

Nodegrid Hive SR is a compact and versatile 8-port branch router with the latest generation of WAN and LAN connectivity, including options for 5G/4G/LTE and Wi-Fi

Bring NetDevOps Automation to the Edge

Complete orchestration platform that allows you to easily begin your NetDevOps journey — automating everything from deployments, to configuration changes and troubleshooting fixes.

Be There with Next-Gen Out-of-Band

When you do need to respond, Nodegrid’s next-gen out-of-band makes it like you’re physically there. Access, provision, and remediate switches, servers, SD-WAN, firewalls, power distribution units (PDUs), IPMI devices and more, from anywhere in the world.

HSR – Diagram

How it works: Nodegrid Hive SR 5-in-1 branch gateway

  1. On boot, Hive SR connects via internet to ZPE Cloud
  2. Hive SR and ZPE Cloud authenticate with each other for a secure, Zero Trust connection
  3. ZPE Cloud pushes routing, switching, and firewall configurations to Hive SR
  4. Additional VMs and container scripts can be remotely configured and licensed, and then placed in service from ZPE Cloud orchestration
  5. Multiple serial console ports from servers, PDUs, and switches can be connected and controlled using next-gen out-of-band™
  6. 5G/4G LTE modem provides simultaneous backup WAN and out-of-band access
  7. SD-WAN directs traffic to the best path using available WAN links like fiber, broadband, cable, and 5G/4G LTE
  8. Built-in Wi-Fi 6 and external Wi-Fi 5 access points provide full LAN coverage and can be centrally managed via ZPE Cloud
  9. Connect Nodegrid sensors for visibility into device tampering and environmental conditions, and get notified via alarms and beacons
  10. Use ZPE Cloud to orchestrate your entire next-gen SD-Branch stack, including across devices, environments, and 3rd party solutions

Secure from the Ground Up

The HSR offers all this while making zero compromises on security. This 6-in-1 branch router is hardened with a secure root of trust, which employs proper BIOS protection, TPM 2.0, geofencing, UEFI secure boot, and a signed OS. You stay protected from the ground up using a platform that supports your approach to implementing Zero Trust Security.

Access sites just like you’re there

Hive SR is the all-seeing eye at your edge locations. Connect Nodegrid’s Environmental Sensors and Nodegrid Data Lake for visibility into physical conditions and user experience. Gather device temperature, airflow, humidity, and other environmental data to protect your assets, while Nodegrid Data Lake visualizes hidden machine data for more insights. See critical KPIs, prevent downtime, and optimize via the cloud — whether it means adjusting HVAC systems or adjusting bandwidth during traffic spikes.

Interfaces

External

  • WAN: copper, fiber, and wireless
    • 2x GbE ETH on shared RJ45 or SFP/vDSL transceivers
    • 2x 10 Gbps cages for PON or SFP+ transceivers
  • LAN: copper and wireless
    • 4x 10/100/1000/2.5 Gbps RJ-45 with VLAN support
    • 1x Wi-Fi 6 (802.11ax optional add-on SKU)
  • Serial and mini-USB console port
    • 2x USB 3.0 host type A for accessories

Internal

  • 2x cellular with quad-SIM (5G/4G LTE optional add-on SKU)
  • 1x Wi-Fi (802.11a,b,g,n,ac, ac2,ax), (Wi-Fi 6) (add-on SKU)

Benefits

  • Low cost and convenient turnkey branch gateway
  • Power on for routing, switching, and firewall without hassle
  • Stay protected with built-in security like UEFI secure boot, TPM 2.0, and geofencing
  • Run virtualized solutions, not additional hardware, to reduce expenses
  • Enable your custom SASE architecture using your choice of security vendors
  • Eliminate on-site support using next-gen out-of-band for firewall, IPMI, & more
  • Slash MTTR and prevent downtime with instant, secure access from anywhere
  • Boost site reliability on open, industry-standard hardware and easy-to-use software

Features

  • Deploy fast with built-in gateway configuration for routing, switching, & firewall
  • Access console, IPMI, sensors, & more with next-gen out-of-band (NG-OOB)
  • Build custom environments with extensible apps, virtualization, and containers
  • Deploy configs and changes effortlessly with zero touch over WAN
  • Integrate seamlessly with ZPE Cloud to manage global IT from anywhere
  • Get widespread software availability with a modern, x86-64bit Linux kernel
  • Stay up to date with the latest security patches
  • Use the 20MB port buffer to collect actionable data and automate fixes
  • Stay connected through outages with failover via 4G/LTE and Wi-Fi
  • Gateway and multi-routing table capability
  • Orchestrate across devices and environments using Ansible, Chef, REST APIs, & more
  • Secure connections with SSL VPN and secure tunnel
  • Use as a DHCP server for more IP addresses, or replace your current router altogether
  • Enable the built-in firewall using only a checkbox
  • Get a secure foundation with encrypted cryptographic protocols, cypher suite levels, and configuration checksum
  • Monitor and control power, and get device alerts to keep your infrastructure healthy

Specifications

Hardware Specifications
Interfaces
  • WAN: copper, fiber, and wireless
    • 2x GbE ETH on shared RJ45 or SFP/vDSL transceivers
    • 2x 10 Gbps cages for PON or SFP+ transceivers
    • 2x cellular with quad-SIM (5G/4G LTE optional add-on SKU)
  • LAN: copper and wireless
    • 4x 10/100/1000/2.5 Gbps RJ-45 with VLAN support
    • 1x Wi-Fi 6 (802.11ax optional add-on SKU)
  • Serial and mini-USB console port
    • 2x USB 3.0 host type A for accessories
Accessories
  • External dual-radio 802.11ac Wi-Fi AP (Access Point)
  • 4-port RJ45 Serial Expansion (via USB)
  • vDSL FSP adapter
  • USB sensors (temperature, humidity, air flow, GPIO, relay, smoke)
  • Redundant power input Y-Cable
  • Managed Devices – Next-Gen Out-of-Band (NG-OOB)
  • Serial console ports, USB console, IP Management port, PDU, and IPMI devices
  • Networking
  • IPv4 and IPv6 (stateful + auto-configuration)
  • DHCP server / client / relay (IPv4, IPv6)
  • Multi-Tenancy (VRF)
  • IPv4 and IPv6 tunneling
  • Network address translation (NAT)
  • Multi-cast
  • Routing
  • VLAN, BGP, OSFP, RIPv1, RIPv2, VXLAN
  • IP Services
  • QoS
  • DHCP (Client and Server)
  • DDNS
  • NTP, global time zone, cellular tower time synchronization
  • Connectivity
  • Ethernet, VDSL, Bluetooth tethering, Wi-Fi hotspot, cellular 5G/4G LTE, multiple cards, failover, healthcheck
  • HTTPS, SSHv2; optional HTTP, Telnet, and SSHv1
  • System Management
  • Extensible, automated control based on actionable real-time data
  • Web GUI management portal, web console, command line interface (CLI), Linux root shell
  • Zero Touch Provisioning (ZTP) via LAN/DHCP, WAN/ZPE Cloud, USB for configuration and firmware updates
  • Multiple and customizable user levels of access
  • Auto-discovery via network scan and custom probes
  • SNMPv3-v1 IPv4/IPv6 with MD5, SHA-224, SHA-256, SHA-384, SHA-512, DES, AES-192, AES-256
  • Orchestration integration and automation: Puppet, Chef, Ansible, RESTful, ZPE Cloud and Nodegrid Manager
  • File sharing via FTP, NFS, SSHFS, Windows Sharing, web file browser, ZPE Cloud
  • Remote Procedure Call (RPC, gRPC)
  • NetFlow, LLDP
  • Security
  • Edgified, hardened device with BIOS protection, TPM 2.0, UEFI secure boot, signed OS, geofencing
  • X.509 SSH certificate support, 4096-bit encryption keys
  • Selectable cryptographic protocols for SSH OpenSSL3 and HTTPS (TLSv1.3-v1)
  • Selectable cypher suite levels: high, medium, low, custom
  • SSL VPN – client and server
  • IPsec, WireGuard, strongSwan with support for multi sites
  • Local, AD/LDAP, RADIUS, TACACS+, Kerberos authentication
  • SAML2 SSO, DUO, Okta, Ping Identity, ADFS
  • Local, backup-user authentication support
  • User-access lists per port
  • Group/role-based authorization: AD/LDAP, RADIUS, TACACS+, Kerberos
  • Fine-grain and role-based access control
  • Firewall – IP packet and security filtering, IP forwarding support
  • MD5 / SHA system configuration checksum
  • System event syslog, IPFIX
  • Custom security settings
  • Strong password enforcement, Fail2ban
  • Two-factor authentication with RSA and DUO
  • Device View Options
  • Two-factor authentication with RSA and DUO
  • Data Logging and Notifications
  • Local port buffering – 20 MB per port
  • Local, NFS, syslog, off-line data logging
  • Timestamp and rotation for data logging
  • Event destination: email, syslog, local
  • Notification: syslog, email
  • Operating System
  • Built-in x86-64bit Linux kernel
  • Power Specifications
  • 12 VDC via external 100-240 VAC, 50/60 Hz adapter
  • Power consumption: 45W typical
  • Operating temperature: 0 – 40C
  • Warranty
  • 2-year limited warranty
  • CPU & Storage
  • 12 VDC via external 100-240 VAC, 50/60 Hz adapter
  • Power consumption: 45W typical
  • Operating temperature: 0 – 40C
  • Physical
  • Front/rear mounting brackets
  • Size (L x W x H): 200 x 256 x 44.00 mm (7.87 x 10.08 x 1.73 in)
  • Weight: 1.3 kg (2.8 lb)
  • Shipping weight: 2.1 kg (4.6 lb)
  • Shipping (L x W x H): 412 x 293 x 77mm (16.2 x 11.5 x 3.0 in)
  • Environmental
  • Operation: 0 to 40° C (+32 to 104° F), 5-95% RH, non-cond.
  • Storage: -40 to 70° C (-40 to 158° F), 5-95% RH, non-cond.
  • Ordering Information

    Channel SKU
    Description
    CPU
    Memory
    Power
    Special
    ZPE-HSR416-Base-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. Gateway mode zero-touch out-of-box operation. Includes 90-day ZPE Cloud License. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    Base
    ZPE-HSR416-W5-GW
    ZPE Nodegrid Hive SR. Hive SR, WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    Wi-Fi
    ZPE-HSR416-4G-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: 4G/LTE (CAT12) radio with dual-SIM. Gateway mode zero-touch out-of-box operation.
    4 Cores
    16 GB
    AC Adaptor
    4G
    ZPE-HSR416-4G-W5-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas & 4G/LTE (CAT12) radio with dual-SIM. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    4G, Wi-Fi
    ZPE-HSR416-4G-W5-D128G-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas & 4G/LTE (CAT12) radio with dual-SIM & dedicated 128GB Disk2 for VM/Docker applications. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    4G, Wi-Fi, Second Storage
    ZPE-HSR416-5G-GW
    ZPE Nodegrid Hive SR. WAN: 2X GbE on shared RJ45/SFP, LAN/WAN: 2X 10 GbE SFP+, LAN: 4X 2.5GbE RJ45, x86_64, 4-Core Intel CPU w/ QAT, 16GB DDR4, 16GB storage, 2X USB 3.0, Bluetooth, Console on shared USB/Serial, AC power adapter included. With addition of: Wi-Fi 5 (866Mbps 2X2 dual stream 802.11ac) & antennas & 5G LTE Sub 6E (CAT20) radio with dual-SIM & dedicated 128GB Disk2 for VM/Docker applications. Gateway mode zero-touch out-of-box operation. Go to ZPEcloud.com to activate 90-day free subscription. Purchase ZPE-CLOUD-SUB1Y-025 for 1-year license for 25 devices.
    4 Cores
    16 GB
    AC Adaptor
    5G

    Accessories

    Accessory
    Description
    HSR-PSU
    12VDC external 100-240 VAC, 50/60 Hz power adapter
    M2-WIFI-B
    M.2 802.11ax Wi-Fi 6 dual-band with dual antennas and cables (order with Base SKU)
    M2-CELL-B
    M.2 Cellular – 4G LTE with dual-SIM slots, 2 antennas and cables (order with base SKU)
    M2-CELL5G-E
    M.2 Cellular – 5G module with 4 antennas and cables (order with base SKU)
    M2-NVMe128
    M.2 NVMe 128 GB (order with base SKU)
    HSR-WMNT
    HSR – Wall Mounting Kit

    Are you ready to see what real branch transformation looks like?

    Nodegrid Hive SR is the 5-in-1 branch gateway that brings real transformation to the edge.
    Set up a free demo to experience a truly simple and flexible branch.