High-Speed Link Encryption Gateway

High-Speed Trunk Link Encryption Gateway for Transparent IP Backbone Network Data Protection

Contact WebRAY

*First Name
*Last Name
*Phone
*Email Address
*Company
*Company Size
*I am interested in
*Comments
Product Overview
WebRAY's high-speed link encryption gateway is an ultra-high-speed trunk-line cryptographic device designed to provide transparent encryption and decryption of data over IP backbone network links. It supports deployment in multi-link network environments with both point-to-point and point-to-multipoint configurations. The gateway also enables centralized management of keys and policies, offering a comprehensive suite of key service management functions such as automatic generation, distribution, replacement, and emergency destruction. The gateway can perform encryption and authentication protection at the link layer for link-layer packets, and can also achieve the encryption and authentication IP payloads at the network layer by using transport mode. It can be integrated with an intelligent cryptographic network management platform to enable data symmetric encryption based on distributed keys. The gateway employs China's commercial cryptographic algorithms SM2, SM3, and SM4, and complies with relevant laws, regulations, and standards regarding the secure use of cryptographic keys.
Key Features
  • Transparent Bridge Deployment

    The high-speed link encryption gateway supports IP-less deployment. It can be transparently integrated into existing networks without altering the current network topology, enabling plug-and-play operation.

  • Flexible Application Mechanism

    It supports encryption and decryption at the data link layer, IPsec VPN function at the network layer, configuration of plaintext/ciphertext transmission policies, and real-time online updating of communication keys.

  • Ultra-Low Latency Encryption

    The FPGA hardware encryption mode of the gateway achieves encryption latency within 100 microseconds, significantly outperforming traditional encryption methods.

  • Cryptography-Defined Network Boundary

    It defines distinct security domains for different device groups through key-based grouping policies and enables cryptographic segmentation of the network boundary. This approach supports isolation of service subnet isolation and user access control.

Our Advantages
High-Speed Encryption
The high-speed link encryption gateway developed by WebRAY achieves an encryption throughput of up to 100 Gbps, significantly outperforming comparable products in the market. Its high-performance capabilities make it particularly well-suited for deployment in the construction of backbone cryptographic networks for national critical information infrastructure, as well as in commercial cryptographic system upgrades.
Low Loss and Low Latency
By implementing encryption protection at the data link layer, it addresses key technical challenges, including terminal network access authentication, link security protection, and network-wide key distribution. It optimizes link bandwidth utilization and minimizes the overhead introduced by encryption systems, ensuring the secure and stable operation of transmission services.
Transparent Deployment
The high-speed link encryption gateway can be deployed transparently, requiring no modification to the existing network architecture. It features simple configuration and plug-and-play operation upon power-on.
Cryptographic Network Construction
A fully connected cryptographic network can be established without altering the existing network topology. By leveraging key-based group of high-speed link encryption gateways, the network boundaries are defined through cryptographic policies.
Application Scanarios

High-Speed Link Encryption Gateway for Carrier MAN and WAN Backbone Links

The high-speed link encryption gateway is designed for secure encryption in high-speed, low-latency data communication scenarios, including: - Carrier-grade metropolitan and wide area networks (MANs/WANs) - Remote disaster recovery between data centers and cross-domain data transmission links - International backbone links - “Eastern Data and Western Computing ” data center links; - Multi-branch networking links