ARKA™ DD-100 Data Diode

Hardware-enforced one-way UDP gateway. Data leaves the protected network; nothing can come back in.

Overview

The ARKA™ DD-100 is a dedicated hardware data diode that enforces strictly one-way (unidirectional) UDP data transfer between two networks. By removing the return path at the hardware level, the DD-100 allows operational and monitoring data to leave a protected network while making it impossible for any traffic, command, or malware to travel back in.

That is a guarantee software firewalls and access rules cannot provide on their own: isolation is a property of the hardware, not a configurable rule, so there is no return path to attack or mis-configure.

Key features

Hardware-enforced one-way flowIsolation is a property of the hardware. There is no return path to attack or mis-configure.

Purpose-built for UDPIdeal for streaming telemetry, syslog, SNMP traps and other connectionless feeds out of sensitive networks.

Rack-ready appliance19" rack-mountable / installable form factor for standard data-centre and control-room racks.

Standard Ethernet2 x 1 GbE RJ-45 interfaces for simple integration with existing network equipment.

Out-of-band managementDedicated management port, console port and V24 interface.

Long-term assurance5-year licences and 5-year OEM warranty covering support, updates and security patches.

How the DD-100 works

Source NetworkProtected / OT

→

ARKA DD-100one-way only

→

DestinationMonitoring / Enterprise

✕ No return traffic. Ever.

Protected side transmits only. Data from the source network is sent to the DD-100 over standard Ethernet as UDP.
One-way hardware link. Data crosses the diode in a single direction; the hardware provides no return path.
Destination side receives only. The destination network receives the data but cannot send anything back toward the source.

DD-100 vs. a software firewall

	Software firewall	ARKA™ DD-100 data diode
Enforcement	Software rules and configuration	Hardware-enforced, no return path
Reverse traffic	Blocked by policy; can be mis-configured or exploited	Not possible: no physical return path
Attack surface on protected side	Accepts and inspects inbound packets	Does not accept inbound traffic
Best suited for	General two-way network segmentation	One-way export from sensitive networks

Technical specifications

Brand / Model	ARKA / DD-100
Product type	Dedicated hardware appliance (data diode) for UDP
Data transfer direction	Unidirectional: one-way data flow, no return path
Supported protocol	UDP
Throughput	Minimum 70 Mbps
Network interfaces	Minimum 2 x 1 GbE RJ-45 ports (via 1:4 SFP to RJ-45 switch)
Management	Management port / Console port / V24
Security	Hardware-enforced isolation
Form factor	19" rack-mountable / installable
Power supply	230 VAC, 50 Hz
Operating temperature	0 to +50 °C
Licences	Minimum 5 years, issued in the name of the end customer
Warranty & support	5 years warranty, support, updates and security patches from the OEM

Typical applications

Critical infrastructure & OT

Export SCADA/ICS monitoring data to corporate or control-centre networks without exposing control systems.

Aviation, transport & utilities

Secure one-way feeds from operational systems to monitoring and analytics platforms.

Government, defence & PSU

Move logs and telemetry from classified or restricted networks to lower-security zones.

Security monitoring

Forward syslog and event data from isolated networks to a central SOC / SIEM.