FlowMagic Data Diode Services

Use the sender and receiver components as the paired endpoints of a one-way data transfer.

Component Reference

Configure corresponding addresses, ports, and channel settings on the two service endpoints, then verify each diagram independently.

NextIO data diode service components This page documents 2 components in the Data Diode Services palette group.

For the shared Name, Notes, display, and pad-editing controls, see Common Component Properties.

• DD Sender

• DD Receiver

DD Sender

Data Diode Sender

Configuration Reference

• Stream ID — Data diode stream ID encoded in the diode header Initial value:

  1.

• Transport Mode — Diode wire transport mode Initial value:

  Plain UDP.

• Output MTU — Maximum emitted L2 packet length, excluding FCS Initial value:

  1522.

• Destination IP — Destination IPv4 address used in emitted diode packets Initial value:

  Required.

• Source IP — Source IPv4 address used in emitted diode packets; empty uses the downstream Egress Port IP Initial value:

  not set.

• Source UDP Port — Source UDP port used in emitted diode packets Initial value:

  19000.

• Destination UDP Port — Destination UDP port used in emitted diode packets Initial value:

  19001.

• ESP SPI — ESP Security Parameters Index used when encryption is enabled Initial value:

  1.

• Preshared Key — Preshared key used to derive AES-256-GCM key material Initial value:

  not set.

• Enable VLAN — Emit 802.1Q VLAN tag in diode packets Initial value:

  Disabled.

• VLAN ID — 802.1Q VLAN ID used when VLAN tagging is enabled Initial value:

  0.

• Max Message Size — Maximum Kafka envelope accepted for diode encoding Initial value:

  1048576.

• Message CRC32C — Add full-message CRC32C to diode headers Initial value:

  Disabled.

• Fragment CRC32C — Add per-fragment CRC32C to diode headers Initial value:

  Disabled.

• Message ID Policy — Message ID generation policy Initial value:

  Monotonic per stream.

• Oversize Policy — Action when a Kafka envelope exceeds max message size Initial value:

  Drop and count.

• Heartbeat Message Rate — Heartbeat control message rate Initial value:

  1.

Back to component list

DD Receiver

Data Diode Receiver

Configuration Reference

• Transport Mode — Diode wire transport mode Initial value:

  Plain UDP.

• Match UDP Dst Port — UDP destination port comparator; this is a datapath match, not an OS socket Initial value:

  19001.

• Match ESP SPI — ESP Security Parameters Index comparator used when encryption is enabled Initial value:

  1.

• Preshared Key — Preshared key used to derive AES-256-GCM key material Initial value:

  not set.

• Stream ID Filter — Allowed diode stream IDs as wildcard or comma-separated list Initial value:

  *.

• Max Message Size — Maximum reassembled Kafka envelope accepted Initial value:

  1048576.

• Reassembly Timeout — Fragment reassembly timeout in milliseconds Initial value:

  5000.

• Max Inflight Messages — Maximum messages being reassembled at the same time Initial value:

  1024.

• Max Fragments — Maximum fragments accepted for one reassembled message Initial value:

  4096.

• Validate Message CRC32C — Validate full-message CRC32C when present Initial value:

  Enabled.

• Validate Fragment CRC32C — Validate per-fragment CRC32C when present Initial value:

  Enabled.

• Duplicate Fragment Policy — Action when a duplicate fragment is received Initial value:

  Ignore the duplicate.

• Overlap Policy — Action when overlapping fragments are detected Initial value:

  Drop the message.

• Output Queue Depth — Internal queue depth to the Kafka sender worker Initial value:

  4096.

• Queue Full Policy — Action when the Kafka sender worker queue is full Initial value:

  Drop and count.

• Memory Mode — Memory allocation mode for reconstructed Kafka envelopes Initial value:

  Contiguous packet-buffer pool.

Back to component list