
DarkLink Model S is the most advanced site-to-site MACsec encryptor available today with data rates up to 100 Gbps to protect vital data that is transmitted over an open network.
- Multi-rate MACsec encryptor operates over 10/40/100 Gbps Ethernet Networks
- Designed to Ethernet Security Specication (ESS) and IEEE Std 802.1AE MACsec standard
- Designed with high assurance fail-safe features to ensure reliable and secure operation
DarkLink is designed with Intel’s family of FPGAs, which offers high performance and hardware protection from network and physical attacks.
Top Level Features
- Multiple Data rates: 10 Gbps (20 Gbps full duplex), 40 Gbps (80 Gbps full duplex), 100 Gbps (200 Gbps full duplex)
- Back-to-back packet processing
- Ethernet AES-GCM 256 bit with Galois Message Authentication (GMAC) per IEEE 802.1AEbn and ESS
- Support for Extended Packet Numbering per IEEE 802.1AEbn (GCM-AES-XPN-256)
- Latency: Less than 2 microseconds
- Secure firmware upgradeable to future protocols and cryptographic standards
Certification
Planned FIPS-140-2, level 3
Ease of Use Setup and Maintenance
- Remote management using SNMP v2 or v3 or browser-based management
- Key manager support via KMIP (Key Management Interoperability Protocol), compatible with 3rd-party external key manager products
- Dual redundant hot-swappable AC power supplies
- Dual hot-swappable fans
Applications
- Big data in-transit protection
- Data center, government, or corporate site-to-site interconnectivity
- Business continuity, disaster recovery, and backup
Network Interfaces
Data Interfaces
Separate clear data and encrypted data ports
10 Gbs (SFP+), 40 Gbs (QSFP), 100 Gbps (QSFP28) or 100 Gbps (CXP)
Remote Management Interface
HTTPS/SNMP v2 or v3 Interface RJ-45 10/100/1000 Mbps
High Availability
RJ-45 10/100/1000 Mbps sync interface
Security
Algorithms: AES-GCM 256-bit, MACsec Key Agreement (MKA)
Key Fill Interface DS-101 and rear panel RJ-45 keyport
Crypto Ignition Key (CIK) for secure operation
Replay protection based on the PN windowing MKA with pre-placed keys per MKA with Secturion key set-up:
- Key storage, lookup, and expansion
- Configurable key lookup for TX is based on Ethernet frame header (MAC addresses and VLAN)
- Optional self key manager (i.e. no external key manager required)
Maintenance
- Extensive power up and internal self-tests
- Hot-swappable fan bank
- Dual redundant hot-swappable supplies
Physical
Dimensions (W x H x D) 19 x 1.72 x 16.4 in.
Mounting Industry standard 19 in. wide x 1U High x 24 to 31 in. deep slide rails
Weight 11 lb
Power 100 Watts; 110 to 240 VAC; 50-60 Hz
Battery External user replaceable battery, one “1/2AA” lithium cell
Environment
Operating Temperature -5° to 50° C
Storage Temperature -40° to 70° C
Humidity 5% to 95% non-condensing
EMI/EMC Telcordia GR-1089-CORE, ID 8, Radiated emission and FCC Class B, Consumer