VPN Gateway & SDN-A Modules
IP networking router/VPN gateway and SDN-A printed circuit board-level embeddable modules for integration.
Since its formation in 2008, Sub U Systems (formerly IAS) has developed dozens of unique and innovative products.
In 2015 we set out to build a family of hardware module-based PCB level “building blocks” that we could use to accelerate the product development of customer requirements-driven products and solutions. We have developed over a dozen different variants of VPN Gateway & SDN-A Modules with additional modules in development, which will yield even more product offerings in the coming years.
Current variants include:
- IAS Router OS VPN Gateway Modules
- Software Definable Network – Appliance™ (SDN-A™) Modules
- Aruba Virtual Mobility Controller Modules (NIAP CC Certified)
- SDN-A Cisco Adaptive Security Appliance Virtual (ASAv) Module
- SDN-A Cisco Cloud Services Router 1000v (CSR1000v) Module (NIAP CC Certified)
- SDN-A Juniper 128 Technologies SSR Module
Additionally, as a Cisco Solutions Technology Integrator Program (STI) partner, we also leverage Cisco designed and produced modules, including:
- Cisco ESR5915 – Fast Ethernet IP Router
- Cisco ESS2020 – Fast Ethernet Ethernet Switch
- Cisco ESR6300 – Gigabit IP Router
- Cisco ESS3300 – Gigabit Ethernet Switch
- Cisco ESS9300 – 10Gigabit Ethernet Switch
Our VPN Gateway & SDN-A modules are amazingly flexible and have no restriction on the number of Gigabit Ethernet ports, USB ports, Wi-Fi radios, cellular radios, SDR radios, etc. that can be designed into a product or solution. We offer module variants that range in size, performance, and power consumption which allow us to “right-size” the module to the application.
IAS VPN GATEWAY MODULES
IAS Router VPN Gateway Modules are board-level embeddable enterprise-class IP routers/VPN gateways/IP networking security appliances (Patent Pending)
- NSA Commercial Solutions for Classified (CSfC) Compliant
- NIST FIPS 140-2 Level 2 Validated
- NIAP Common Criteria Certified
IAS Router VPN Gateway modules offer
- Web browser based Graphical User Interface
- Driver support for Wi-Fi radio(s)
- 3G/4G/5G cellular radio(s)
- Multiple serial interfaces
- Third-party PCIe and USB based peripherals


SUB-U SDN-A MODULES
Software Definable Network Appliance-Modules™ take our embeddable module concept one step further. We have partnered with commercial IP networking companies, including Cisco Systems™, Aruba, a Hewlett Packard company™, Palo Alto Networks™, Fortinet™, and others, to leverage their respective software virtual machine (VM) based networking functions.
These software-based VM networking functions were intended for use in software-defined network topologies in cloud server farms. However, we leverage this technology in our small, low-power, robust SDN-A Modules. Our SDN-A Modules can also support MULTIPLE software-based networking functions running simultaneously. This capability enables further reduction of device count in tactical deployable communications applications.
ARUBA MODULES (NIAP CC Certified)
Leveraging our SDN-A modules, we teamed up with Aruba, a Hewlett Packard company, to bring the full suite of capabilities that commercial form factor Aruba Mobility Controllers offer to embedded applications. Aruba VMC modules come in several different sizes, performance levels, and power consumptions.
Additionally, Sub U Systems and Aruba have taken the IAS Aruba Modules through the NIAP Common Criteria certification process. The modules are also listed on the NSA Commercial Solutions for Classified (CSfC) Component List under the IPSec VPN Gateway, Traffic Filtering Firewall, and WLAN Access System categories.


CISCO MODULES (NIAP CC Certified)
Cisco’s next-generation Embedded Service Router (ESR) and Embedded Service Switches (ESS) are known as the ESR6300, ESS3300 and ESS9300. These new modules bring gigabit and 10-gigabit network interfaces to their embeddable module product line.
The ESR6300 offers:
- Two (2) 1Gbps routed interfaces,
- Four (4) 1Gbps
- Optional cellular modems
- Removable boot media
The ESS3300 offers:
- Two (2) 10Gbps uplink ports
- Twenty-four (24) 1Gbps switched ports
The ESS9300 offers:
- Ten (10) 10Gbps ports
SUB-U engineers are able to add 802.3af PoE, 802.3at PoE+, and 802.3bt PoE++ support to any designs that use any of the above Sub-U, Aruba, and Cisco Modules.