Home » Network Infrastructure Management Products | ZPE Systems » Network Edge Routers » Branch Gateway for Edge Networking | ZPE Systems

Nodegrid Hive SR

Deploy turnkey edge networking with the 5-in-1 branch gateway

Traditional branch gateways leave you cobbling together many solutions. But the Nodegrid Hive SR is your 5-in-1 branch gateway that makes edge networking simple and flexible. Gain turnkey convenience on first boot, with open architecture and next-gen out-of-band that let you fully customize and control everything at the edge.

  • Get a low-cost solution that offers speed & power out of the box
  • Gain 5-in-1 capabilities to reduce CAPEX & OPEX
  • Control everything with ZPE’s signature next-gen out-of-band

Eliminate hassle at the edge

Nodegrid Hive SR’s built-in gateway profile means you don’t have to manually deploy separate boxes. Just boot up, and the HSR automatically configures routing, switching, and firewall. No more long deployments or juggling hardware stacks.

Never become obsolete

The Hive SR is the first 5-in-1 gateway with open architecture, so you can consolidate and fully customize your environments. Get SD-WAN, security, compute, NetDevOps, and out-of-band in one box, and deploy virtualized solutions of your choice.

Control everything, from anywhere

IT management access shouldn’t be an afterthought. The Hive SR enables ZPE Systems’ signature next-gen out-of-band (NG-OOB), which permeates deep into your environments. Control servers, firewalls, IoT, and even IPMI devices from anywhere.


How it works: Nodegrid Hive SR 5-in-1 branch gateway

  1. On boot, Hive SR connects via internet to ZPE Cloud
  2. Hive SR and ZPE Cloud authenticate with each other for a secure, Zero Trust connection
  3. ZPE Cloud pushes routing, switching, and firewall configurations to Hive SR
  4. Additional VMs and container scripts can be remotely configured and licensed, and then placed in service from ZPE Cloud orchestration
  5. Multiple serial console ports from servers, PDUs, and switches can be connected and controlled using next-gen out-of-band™
  6. 5G/4G LTE modem provides simultaneous backup WAN and out-of-band access
  7. SD-WAN directs traffic to the best path using available WAN links like fiber, broadband, cable, and 5G/4G LTE
  8. Built-in Wi-Fi 6 and external Wi-Fi 5 access points provide full LAN coverage and can be centrally managed via ZPE Cloud
  9. Connect Nodegrid sensors for visibility into device tampering and environmental conditions, and get notified via alarms and beacons
  10. Use ZPE Cloud to orchestrate your entire next-gen SD-Branch stack, including across devices, environments, and 3rd party solutions

Never compromise on security

The Hive SR secures every connection and hardware/software integration by using enterprise-grade security features. BIOS protection, proper TPM 2.0 integration, and the signed OS are just a few of Hive SR’s built-in safeguards. Easily fortify your sites and achieve Zero Trust Network Access without compromise.

Access sites just like you’re there

Hive SR is the all-seeing eye at your edge locations. Connect Nodegrid’s Environmental Sensors and Nodegrid Data Lake for visibility into physical conditions and user experience. Gather device temperature, airflow, humidity, and other environmental data to protect your assets, while Nodegrid Data Lake visualizes hidden machine data for more insights. See critical KPIs, prevent downtime, and optimize via the cloud — whether it means adjusting HVAC systems or adjusting bandwidth during traffic spikes.


  • WAN: copper, fiber, and wireless
    • 2x GbE ETH on shared RJ45 or SFP/vDSL transceivers
    • 2x 10 Gbps cages for PON or SFP+ transceivers
  • LAN: copper and wireless
    • 4x 10/100/1000/2.5 Gbps RJ-45 with VLAN support
    • 1x Wi-Fi 6 (802.11ax optional add-on SKU)
  • Serial and mini-USB console port
    • 2x USB 3.0 host type A for accessories


  • 2x cellular with quad-SIM (5G/4G LTE optional add-on SKU)
  • 1x Wi-Fi (802.11a,b,g,n,ac, ac2,ax), (Wi-Fi 6) (add-on SKU)
  • Low cost and convenient turnkey branch gateway
  • Power on for routing, switching, and firewall without hassle
  • Stay protected with built-in security like UEFI secure boot, TPM 2.0, and geofencing
  • Run virtualized solutions, not additional hardware, to reduce expenses
  • Enable your custom SASE architecture using your choice of security vendors
  • Eliminate on-site support using next-gen out-of-band for firewall, IPMI, & more
  • Slash MTTR and prevent downtime with instant, secure access from anywhere
  • Boost site reliability on open, industry-standard hardware and easy-to-use software
  • Deploy fast with built-in gateway configuration for routing, switching, & firewall
  • Access console, IPMI, sensors, & more with next-gen out-of-band (NG-OOB)
  • Build custom environments with extensible apps, virtualization, and containers
  • Deploy configs and changes effortlessly with zero touch over WAN
  • Integrate seamlessly with ZPE Cloud to manage global IT from anywhere
  • Get widespread software availability with a modern, x86-64bit Linux kernel
  • Stay up to date with the latest security patches
  • Use the 20MB port buffer to collect actionable data and automate fixes
  • Stay connected through outages with failover via 4G/LTE and Wi-Fi
  • Gateway and multi-routing table capability
  • Orchestrate across devices and environments using Ansible, Chef, REST APIs, & more
  • Secure connections with SSL VPN and secure tunnel
  • Use as a DHCP server for more IP addresses, or replace your current router altogether
  • Enable the built-in firewall using only a checkbox
  • Get a secure foundation with encrypted cryptographic protocols, cypher suite levels, and configuration checksum
  • Monitor and control power, and get device alerts to keep your infrastructure healthy
  • WAN: copper, fiber, and wireless
    • 2x GbE ETH on shared RJ45 or SFP/vDSL transceivers
    • 2x 10 Gbps cages for PON or SFP+ transceivers
    • 2x cellular with quad-SIM (5G/4G LTE optional add-on SKU)
  • LAN: copper and wireless
    • 4x 10/100/1000/2.5 Gbps RJ-45 with VLAN support
    • 1x Wi-Fi 6 (802.11ax optional add-on SKU)
  • Serial and mini-USB console port
    • 2x USB 3.0 host type A for accessories
  • External dual-radio 802.11ac Wi-Fi AP (Access Point)
  • 4-port RJ45 Serial Expansion (via USB)
  • vDSL FSP adapter
  • USB sensors (temperature, humidity, air flow, GPIO, relay, smoke)
  • Redundant power input Y-Cable
Managed Devices – Next-Gen Out-of-Band (NG-OOB)
  • Serial console ports, USB console, IP Management port, PDU, and IPMI devices
  • IPv4 and IPv6 (stateful + auto-configuration)
  • DHCP server / client / relay (IPv4, IPv6)
  • Multi-Tenancy (VRF)
  • IPv4 and IPv6 tunneling
  • Network address translation (NAT)
  • Multi-cast
IP Services
  • QoS
  • DHCP (Client and Server)
  • DDNS
  • NTP, global time zone, cellular tower time synchronization
  • Ethernet, VDSL, Bluetooth tethering, Wi-Fi hotspot, cellular 5G/4G LTE, multiple cards, failover, healthcheck
  • HTTPS, SSHv2; optional HTTP, Telnet, and SSHv1
System Management
  • Extensible, automated control based on actionable real-time data
  • Web GUI management portal, web console, command line interface (CLI), Linux root shell
  • Zero Touch Provisioning (ZTP) via LAN/DHCP, WAN/ZPE Cloud, USB for configuration and firmware updates
  • Multiple and customizable user levels of access
  • Auto-discovery via network scan and custom probes
  • SNMPv3-v1 IPv4/IPv6 with MD5, SHA-224, SHA-256, SHA-384, SHA-512, DES, AES-192, AES-256
  • Orchestration integration and automation: Puppet, Chef, Ansible, RESTful, ZPE Cloud and Nodegrid Manager
  • File sharing via FTP, NFS, SSHFS, Windows Sharing, web file browser, ZPE Cloud
  • Remote Procedure Call (RPC, gRPC)
  • NetFlow, LLDP
  • Edgified, hardened device with BIOS protection, TPM 2.0, UEFI secure boot, signed OS, geofencing
  • X.509 SSH certificate support, 4096-bit encryption keys
  • Selectable cryptographic protocols for SSH OpenSSL3 and HTTPS (TLSv1.3-v1)
  • Selectable cypher suite levels: high, medium, low, custom
  • SSL VPN – client and server
  • IPsec, WireGuard, strongSwan with support for multi sites
  • Local, AD/LDAP, RADIUS, TACACS+, Kerberos authentication
  • SAML2 SSO, DUO, Okta, Ping Identity, ADFS
  • Local, backup-user authentication support
  • User-access lists per port
  • Group/role-based authorization: AD/LDAP, RADIUS, TACACS+, Kerberos
  • Fine-grain and role-based access control
  • Firewall – IP packet and security filtering, IP forwarding support
  • MD5 / SHA system configuration checksum
  • System event syslog, IPFIX
  • Custom security settings
  • Strong password enforcement, Fail2ban
  • Two-factor authentication with RSA and DUO
Device View Options
  • Tree, table, geo map, node and web with search
Data Logging and Notifications
  • Local port buffering – 20 MB per port
  • Local, NFS, syslog, off-line data logging
  • Timestamp and rotation for data logging
  • Event destination: email, syslog, local
  • Notification: syslog, email
Operating System
  • Built-in x86-64bit Linux kernel
Power Specifications
  • 12 VDC via external 100-240 VAC, 50/60 Hz adapter
  • Power consumption: 45W typical
  • Operating temperature: 0 – 40C
  • 2-year limited warranty
CPU & Storage
  • 4 core Intel® Atom® C3000
  • Intel Quick Assist Technology (QAT)
  • 16 GB DDR4 DRAM
  • 16 GB eMMC flash, optional 128 GB NVMe
  • Front/rear mounting brackets
  • Size (L x W x H): 200 x 256 x 44.00 mm (7.87 x 10.08 x 1.73 in)
  • Weight: 1.3 kg (2.8 lb)
  • Shipping weight: 2.1 kg (4.6 lb)
  • Shipping (L x W x H): 412 x 293 x 77mm (16.2 x 11.5 x 3.0 in)
  • Operation: 0 to 40° C (+32 to 104° F), 5-95% RH, non-cond.
  • Storage: -40 to 70° C (-40 to 158° F), 5-95% RH, non-cond.
SKU Description
  • Nodegrid Hive SR – Base Model – Intel® Atom® C3000, 4-core @ 2.2 GHz w/QAT acceleration, 16 GB Storage, 16 GB memory, AC power adapter
  • WAN: 2x 1 Gbps copper & SFP (shared) and 2x 10 Gbps SFP+ cages,
  • LAN: 4x 2.5 Gbps RJ-45,
  • 3x open slots for Optional add-ons:
  • M.2 Wi-Fi 6 radio (optional)
  • M.2 5G/4G LTE modem (optional x2)
  • M.2 NVMe 128 GB (optional)
  • Wall mounting Kit (optional)
Accessory Description
HSR-PSU 12VDC external 100-240 VAC, 50/60 Hz power adapter
M2-WIFI-B M.2 802.11ax Wi-Fi 6 dual-band with dual antennas and cables (order with Base SKU)
M2-CELL-B M.2 Cellular – 4G LTE with dual-SIM slots, 2 antennas and cables (order with base SKU)
M2-CELL5G-E M.2 Cellular – 5G module with 4 antennas and cables (order with base SKU)
M2-NVMe128 M.2 NVMe 128 GB (order with base SKU)
HSR-WMNT HSR – Wall Mounting Kit
Hive SR Bundles Description
CST-GEN-HSR-S Bundle with HSR-BASE, M2-NVMe128

Are you ready to see what real branch transformation looks like?

Nodegrid Hive SR is the 5-in-1 branch gateway that brings real transformation to the edge.
Set up a free demo to experience a truly simple and flexible branch.