Platform · Connectivity

Novrix SD-WAN

On-premise manager and edge appliances. Your entire WAN under your control — with no dependency on a third party's cloud controller.

Request a demo See the models

What it solves

On-premise manager

The controller runs in your datacenter. If your cloud provider has a bad day, your WAN never finds out.

Zero-touch provisioning

The appliance is plugged in at the branch, registers itself and pulls its own configuration. Opening a site takes hours, not weeks.

Multiple links

Fibre, 4G/5G and backup links with automatic failover and per-application path selection.

Novrix Edge NVX-E100

Edge appliance

The physical edge for branches: 4 × 2.5 GbE ports, hardware encryption and a 10–20 W draw.

Specifications
CPU
Intel N150 — 4 cores / 4 threads, turbo up to 3.6 GHz, 6 W TDP
Acceleration
AVX2 + AES-NI (VPP/DPDK and hardware IPsec encryption)
RAM
8 GB
Storage
256 GB SSD
Networking
4 × 2.5 GbE Intel i226
Switching capacity
10 Gbps aggregate
Dataplane
VPP + DPDK
Routing
OSPF, BGP, static routes
Supported WAN
DHCP · static IP · PPPoE · LTE
Tunnels
Encrypted IKEv2 · hub-and-spoke and full-mesh · STUN NAT traversal
Services
DHCP server · QoS · firewall · multilink / path selection
Management
Central (Novrix SD-WAN Manager) + local (Novrix Edge UI)
Provisioning
Token-based ZTP · secure enrolment · private PKI / mTLS
Power draw
10–20 W

Port roles (software-assignable)

Profile
WAN
LAN
Use
Dual-WAN
2
2
Branch with dual link
Single-WAN
1
3
One link and more LAN segments

Performance

Scenario
Figure
Cleartext forwarding
Line rate 2.5 GbE per port
IPsec tunnel (AES-GCM)
300–900 Mbps
Concurrent tunnels
Dozens

Novrix Edge NVX-V100

Virtual edge

The same capabilities as the physical edge, as a virtual machine on your hypervisor.

Specifications
Form factor
Virtual machine
Hypervisors
KVM / Proxmox · VMware
Delivery formats
OVA · qcow2 · installer
CPU requirement
vCPU with AVX2 + AES-NI
Networking
≥ 2 vNICs; assignable WAN/LAN roles
Dataplane / routing
VPP + DPDK · built-in SD-WAN agent
WAN / tunnels / services
DHCP · static · PPPoE · hub-and-spoke / full-mesh · STUN · QoS · firewall · multilink
Management / ZTP / PKI
Manager + Edge UI · ZTP · mTLS

Resource profiles and encrypted throughput

Profile
vCPU (VPP)
RAM
Encrypted throughput
Small
2 (1)
4 GB
200–500 Mbps
Medium
4 (2)
8 GB
0.5–1.5 Gbps
Large
8 (4)
16 GB
Several Gbps

Novrix SD-WAN Manager

On-premise controller

The brain of the WAN, running in your datacenter.

Specifications
Type
On-premise SD-WAN controller
Deployment
Container stack (Docker)
Components
API backend · replicated database · web console · PKI service
Host resources
4 vCPU · 8 GB RAM · 100 GB
Connectivity
HTTPS API · WebSocket to the edges
Multi-tenant
Accounts and organisations · per-organisation roles · RBAC
Edge management
Inventory · approval · vRouter restart · factory reset
Topology
NOC-style logical map (hub-and-spoke / full-mesh)
Tunnels
Hub-and-spoke or full-mesh provisioning · per-tunnel metrics
Routing
Route table (RIB) configuration and visibility
Monitoring
RTT · jitter · loss · MOS · health (CPU/RAM)
Events
Correlated incident timeline
Provisioning
Token-based ZTP · secure enrolment
Security
TLS · JWT · private PKI / mTLS per organisation · RBAC

Your WAN, your rules, your hardware.

Request a demo