4 ms·
Having trouble understanding, the idea is you're funnelling multiple protocols into one pipeline with multiple actors on the other end?
by mkmk3 4y ago
Having trouble understanding, the idea is you're funnelling multiple protocols into one pipeline with multiple actors on the other end?
- mikewarot 4y agoA data diode is a unidirectional network link. You can ONLY put a packet through it in one direction, and never, ever, get an ACK or anything back. Usually they are accompanied by a pair of helper hosts, one on each side. The source host polls a desired set of things in the network it can access, and puts them all into an internal buffer, and transmits that data, plus a lot of forward error correction, and KEEPS sending it, to the matching destination host. So, if you have an industrial system, such as an oil refinery, production line, etc., you can have the source host poll for status from the PLC, etc... and then forward that data to the destination host outside the firewalls, etc. Remote users will be able to view the status of things as they get updates, using web or whatever protocols you like, but have ABSOLUTELY ZERO chance injecting data back into the industrial system. It's simple enough in theory. But widely underused in practice.