VPN Gateway & SDN-A Modules

IP networking router/VPN gateway and SDN-A printed circuit board-level embeddable modules for integration.

Since its formation in 2008, Sub U Systems (formerly IAS) has developed dozens of unique and innovative products.

In 2015 we set out to build a family of hardware module-based PCB level “building blocks” that we could use to accelerate the product development of customer requirements-driven products and solutions. We have developed over a dozen different variants of VPN Gateway & SDN-A Modules with additional modules in development, which will yield even more product offerings in the coming years.

Current variants include:

Additionally, as a Cisco Solutions Technology Integrator Program (STI) partner, we also leverage Cisco designed and produced modules, including:

Our VPN Gateway & SDN-A modules are amazingly flexible and have no restriction on the number of Gigabit Ethernet ports, USB ports, Wi-Fi radios, cellular radios, SDR radios, etc. that can be designed into a product or solution. We offer module variants that range in size, performance, and power consumption which allow us to “right-size” the module to the application.


IAS Router VPN Gateway Modules are board-level embeddable enterprise-class IP routers/VPN gateways/IP networking security appliances (Patent Pending)

  • NSA Commercial Solutions for Classified (CSfC) Compliant
  • NIST FIPS 140-2 Level 2 Validated
  • NIAP Common Criteria Certified

IAS Router VPN Gateway modules offer

  • Web browser based Graphical User Interface
  • Driver support for Wi-Fi radio(s)
  • 3G/4G/5G cellular radio(s)
  • Multiple serial interfaces
  • Third-party PCIe and USB based peripherals


Software Definable Network Appliance-Modules™ take our embeddable module concept one step further. We have partnered with commercial IP networking companies, including Cisco Systems™, Aruba, a Hewlett Packard company™, Palo Alto Networks™, Fortinet™, and others, to leverage their respective software virtual machine (VM) based networking functions.

These software-based VM networking functions were intended for use in software-defined network topologies in cloud server farms. However, we leverage this technology in our small, low-power, robust SDN-A Modules. Our SDN-A Modules can also support MULTIPLE software-based networking functions running simultaneously. This capability enables further reduction of device count in tactical deployable communications applications.


Leveraging our SDN-A modules, we teamed up with Aruba, a Hewlett Packard company, to bring the full suite of capabilities that commercial form factor Aruba Mobility Controllers offer to embedded applications. Aruba VMC modules come in several different sizes, performance levels, and power consumptions.

Additionally, Sub U Systems and Aruba have taken the IAS Aruba Modules through the NIAP Common Criteria certification process. The modules are also listed on the NSA Commercial Solutions for Classified (CSfC) Component List under the IPSec VPN Gateway, Traffic Filtering Firewall, and WLAN Access System categories.


Cisco’s next-generation Embedded Service Router (ESR) and Embedded Service Switches (ESS) are known as the ESR6300, ESS3300 and ESS9300. These new modules bring gigabit and 10-gigabit network interfaces to their embeddable module product line.

The ESR6300 offers:

  • Two (2) 1Gbps routed interfaces,
  • Four (4) 1Gbps
  • Optional cellular modems
  • Removable boot media

The ESS3300 offers:

  • Two (2) 10Gbps uplink ports
  • Twenty-four (24) 1Gbps switched ports

The ESS9300 offers:

  • Ten (10) 10Gbps ports

SUB-U engineers are able to add 802.3af PoE, 802.3at PoE+, and 802.3bt PoE++ support to any designs that use any of the above Sub-U, Aruba, and Cisco Modules.

Contact Us

Call us at 202-640-2623 to get a custom quote or fill out this form and we will get in touch with you.