Data Diode
Our Data Diode is a small and affordable network component that allows network traffic in one direction only. It can be used to ensure confidentiality or integrity, it depends on how you use it.

How it works
The link22 Data Diode works by simple physics by sending light in one direction only to carry your data. A light emitter on one side sends light through a fibre to a photoreceiver on the other end. Nature ensures that there is no way for the data to go in the other direction giving an unhackable air-gap bridge between networks.
Features
Bridges the air gap
Air-gapping can be achieved by separating two systems with link22 Data Diode that on the physical level guarantees that data can only flow in one direction. link22 Data Diode provides a separation with much higher assurance than other mechanisms, such as firewalls.
Ensures Confidentiality
By using link22 Data Diode a closed system containing confidential information can be fed with information from an open system, while ensuring that no confidential information can leak to the open system.
Examples:
- Import of Operating System updates.
- Supplying closed systems with time from an external NTP server.
Ensures Integrity
With link22 Data Diode information from a closed systems can be passed to an open system while ensuring that no modification of information in, or attack on, the closed systems is possible.
Examples:
- Export of PLC reading in critical infrastructure systems.
- Protection of data sent to log server.
Just add software
One-way communication systems are sensitive to link errors, for instance power interrupts, cabling issues and other network problems. To maintain high reliability you can use software that have mechanisms to increase reliability and alert when failures occur. Our portfolio of diode product and solutions increases reliability through retransmissions; heartbeat functionality will detect and alert any link errors. A receiving proxy will, in addition, verify the integrity of transferred data ensuring that you can trust that the data has been transferred correctly and without errors. It is also important to limit bandwidth usage over the data diode to prevent package loss.
Deployment
Also available as a two-part solution
- Separation of responsibility. One part in each domain.
- Designed to comply with TEMPEST requirements.
Key features
- Better than a firewall, hardware only.
- 1 Gbit/s throughput.
- Ethernet Interface.
- Built in optical separation.
- Optional separate power supplies for upstream and downstream interface.