Home » Resources » Branch Routers Guide
Branch Routers Guide

Branch Routers Guide

Branch routers are deployed in remote business sites to connect them to the WAN (wide area network) as well as provide local network connectivity, but they are capable of so much more. The best branch routers consolidate multiple functions like cellular failover, out-of-band management, and security to help reduce the tech stack in locations where space and budgets are often limited. Some solutions can even host 3rd-party applications, replacing expensive server hardware and enabling more automation and greater efficiency.

This guide to branch routers discusses what features to look for and what benefits they provide before describing six of the best solutions for different use cases.

What to look for in a branch router

Some of the additional capabilities and features that a branch router can bring to the table include:

SD-WAN

SD-WAN Management Platform

Software-defined wide-area networking, or SD-WAN, uses software abstraction to decouple WAN control functions from the underlying hardware. It leverages traditional MPLS to handle branch requests for enterprise resources in the data center, but it can also use less-expensive cellular and public internet links to handle cloud-destined traffic. SD-WAN virtualizes WAN management at remote sites and gives administrators control via centralized (often cloud-based) software. These qualities enable branch routers with SD-WAN to help organizations reduce branch MPLS costs, boost WAN performance, facilitate greater automation and orchestration capabilities, and improve operational efficiency.

 

Learn More About SD-WAN

Resilience

IMI with Nodegrid(1)

A resilient branch is able to continue operating and delivering core services—even if in a degraded state—during adverse events and complete outages. Branch routers can contribute to network resilience in several important ways.

  1. Cellular failover: A branch router with cellular failover provides a secondary internet connection that traffic can be routed to if the primary link goes down. Even better, a router with 5G cellular failover delivers speeds comparable to a standard cable internet connection to minimize the performance impacts of a branch ISP outage.
  2. Out-of-band management: A branch router with OOB management uses a secondary internet connection and managed serial ports to create a parallel network that’s dedicated to management, troubleshooting, and orchestration. This network doesn’t rely on any production resources, so it remains available and remotely accessible during outages, ransomware attacks, and other adverse events. OOB provides a lifeline for teams to perform remote recovery operations, significantly reducing downtime.
  3. Alternative compute and storage: Some branch routers come with enough storage, processing, and memory headroom to run additional workloads while primary resources are down. These routers allow branches to continue delivering their most critical services while teams focus on recovery operations, and they cost significantly less to deploy than redundant server hardware.
  4. Automation: Some branch routers—particularly those with managed serial ports—also provide zero-touch provisioning (ZTP) to automatically configure end devices. ZTP and other automation solutions accelerate new deployments and recovery rebuilds while mitigating the risk of human error.

      Learn More About Branch Resilience

      Security

      What Is SASE Network Security ZPE Graphic
      Due to their remote nature, branches can be more susceptible to breaches. For example, branch infrastructure and endpoints may not be monitored as closely or patched as frequently. IT teams might use unsecured remote access solutions like Intel NUC jump boxes to manage and troubleshoot branch systems. Plus, new infrastructure and endpoint devices are often configured at HQ and then shipped to branches, increasing the risk that an intercepted delivery could expose the company network.

      The best branch routers mitigate these security risks with:

      1. Modern software that’s frequently patched and secured by zero-trust controls like MFA (multi-factor authentication).
      2. Easy integrations with 3rd party network monitoring, security, and orchestration solutions to ensure branches receive the same coverage and protection as the data center.
      3. Secure out-of-band access to isolate management interfaces and protect remote administrative sessions with zero-trust authentication.
      4. Support for ZTP and other automation solutions that enable teams to ship factory-default devices to branches and then deploy them remotely and automatically.
      5. Robust onboard security features like BIOS protection, self-encrypted disks (SED), an embedded firewall, and tampering protection.
      6. Support for SASE (secure access service edge) and other edge-centric security solutions that extend zero-trust capabilities to the branch.

       

      Learn More About Branch Security

      Extensibility

      BranchDiagram

      Each individual branch may not have the exact same needs, and those needs are likely to change over time as demand grows or shrinks, business goals evolve, and technology advances. An extensible branch router refers to one that can be adapted to incorporate new workflows and grow with the network.

      One of the main ways to extend a branch router is by integrating 3rd-party software to add new capabilities, but some can also be expanded with additional internal hardware components or modular interface cards. Additionally, branch routers with cloud management can help by giving remote teams access to administrative functions from anywhere with an internet connection, preventing networks from growing too difficult to manage as new sites and equipment are deployed.

       

      Learn More About Branch Extensibility

      Automation

      Automated-Infastructure

      Network and infrastructure automation can help accelerate new deployments, improve branch operational efficiency, mitigate human error and other security risks, and improve resilience. We’ve already described how branch routers can provide these benefits with ZTP. The best routers also support integrations with 3rd party software for automated security monitoring, configuration management, troubleshooting, and more. Some solutions, like the Nodegrid integrated branch routers from ZPE Systems, can also directly host other vendors’ software, allowing teams to deploy branch automation without installing any additional hardware.

       

      Learn More About Branch Automation

       

      While there are a variety of branch routers that provide SD-WAN support, out-of-band management, cellular failover, and advanced authentication, there’s only one branch networking solution that also delivers complete vendor neutrality, enabling unlimited extensibility and automation.

      Nodegrid branch routers for every use case

      Nodegrid is a family of six multi-functional branch services routers available in various form factors and configurations to meet the needs of any organization. All Nodegrid SRs deliver SD-WAN support, cellular failover, out-of-band management, vendor-neutral app hosting and integration, and unlimited automation capabilities.

      Click here to compare Nodegrid tech specs, or learn more about each model below.

      Nodegrid Net Services Router for large branches and edge data centers

      NSR Diagram

      The Nodegrid Net Services Router (NSR) is a modular solution that adjusts to your business’s needs, making it suitable for many different use cases. You can mix-and-match NSR expansion cards to gain branch networking and management capabilities like serial console management, GbE (Gigabit Ethernet) and PoE (Power over Ethernet) switching, Wi-Fi, 4G/5G cellular, PON (passive optical networking), additional compute or storage, and more. The NSR’s size and potential number of ports means you could also deploy it in data centers and other large deployment sites.

      Nodegrid Gate SR for branch service delivery and AI

      ZPE Systems – GSR + Nvidia Jetson

      The Nodegrid Gate SR is an all-in-one branch solution that delivers powerful networking and management functionality. In addition to networking, OOB serial console management, and environmental monitoring, the Gate SR can also run multiple Guest OS and Docker containers for your 3rd-party branch applications. It’s also available with an Nvidia Jetson Nano processor capable of running AI (artificial intelligence) workloads, like those for computer vision, alongside traditional apps. The Gate SR can serve as a branch gateway router, an application delivery platform, and an AI solution all at the same time for the ultimate adaptability.

      Nodegrid Bold SR for branch and edge deployments

      BSR4

      The Nodegrid Bold SR is a small, versatile branch solution that’s suited to a wide variety of deployments, including telecom sites, retail stores, and oil and gas rigs. Despite its size, it has 8 managed serial ports and 5 GbE switch ports, can run up to two Docker apps, and supports up to two dual-SIM cellular cards for failover and OOB.

      Nodegrid Hive SR for distributed branch and edge sites

      Nodegrid Hive SR Antenna

      The Nodegrid Hive SR is a 5-in-1 branch gateway router with an open architecture that allows you to fully customize your environments. It also comes with two 10 Gbps network interfaces to support branches with large bandwidth requirements, like customer support centers, video production sites, and anywhere that streams a lot of media.

      Nodegrid Mini SR for branch IoT, OT, and IoMD deployments

      SR_MINI

      The Nodegrid Mini SR delivers all-in-one branch capabilities in a device roughly the size of a smartphone. It can be installed nearly anywhere, including OT (operational technology) environments, IoT and IoMD (Internet of Medical Devices, also known as IoMT or Internet of Medical Things) deployments, and even first responder vehicles.

       

      Compare Nodegrid SRs to Other Branch Routers

      The vendor-neutral Nodegrid SR branch routers deliver unlimited networking, management, security, automation, and resilience capabilities that adapt to and scale with your business. Schedule a free Nodegrid demo to learn more.

      Which Nodegrid branch router is right for you?

      Nodegrid Net SR

      Nodegrid Gate SR Nodegrid Bold SR Nodegrid Link SR Nodegrid Hive SR Nodegrid Mini SR
      Potential Use Cases Large branches, edge data centers Branch service delivery and AI Branch and edge deployments like telecom, retail, and oil & gas Branch, IoT, and M2M (Machine-to-Machine) deployments Distributed branch and edge sites like manufacturing plants Edge IoT, OT, and IoMD (Internet of Medical Devices) deployments
      CPU x86-64bit Intel Processor x86-64bit Intel Processor x86-64bit Intel Processor x86-64bit Intel Processor x86-64bit Intel Processor x86-64bit Intel Processor
      Guest OS 1-6 1-3 1 1 1-2 1
      Docker Apps 1-4 1-4 1-2 1-2 1-3 1-2
      Storage 32GB – 128GB 32GB – 128GB 32GB – 128GB 16GB – 128GB 16GB – 128GB 16GB SED
      Secondary Additional Storage Up to 4TB Up to 4TB Up to 4TB Up to 4TB Up to 4TB
      PoE+ Output Yes Yes
      Wi-Fi Yes Yes Yes Yes Yes Yes
      ZPE Cloud Support Yes Yes Yes Yes Yes Yes
      Cellular (Dual-SIM) 1-4 1-2 1-2 1 1-2 1
      Serial 16-80 8 8  1 8 Via USB
      Network 2 1Gb ETH, 2 SFP+, Multiple Cards 2 x SFP+, 5 x Gb ETH, 4 x 1Gb ETH PoE+ 5 x Gb ETH 1 x Gb ETH 1 x SFP 2x GbE ETH, 2x 10 Gbps, 4x 10/100/1000/2.5 Gbps RJ-45 2 x 1Gb ETH
      GPIO 2 DIO, 1 OUT, 1 Relay 2 DIO, 2 OUT
      Power Single or Redundant Single or Redundant Single Single Single Single
      Data Sheet Download Download Download  Download Download Download