Military IP router with NSA Type 1 encryption certified for SECRET/CONFIDENTIAL information, MANET mobile ad-hoc network support (TrellisWare/Silvus compatible), 1 Gbps encrypted throughput, 6 GbE interfaces, and -40°C to +85°C operating temperature for vehicles and command posts.
Bitstream
Bitstream MILS Router Military IP Router with NSA Type 1 Encryption and MANET Tactical Network Support
Technical specifications
Technical overview
The Bitstream MILS Router is the military-grade IP router designed for the network node where SECRET or CONFIDENTIAL classified information must be routed between multiple heterogeneous network interfaces — MANET radio, VSAT satellite, campaign fiber optic, command post wireless network — with NSA Type 1 encryption (the highest level of encryption certification for defense equipment) ensuring no classified data can leave the device unencrypted, even in case of hardware failure or uncontrolled restart.
The Type 1 encryption engine with Suite B algorithm (AES-256-GCM for confidentiality, SHA-384 for integrity, ECDH P-384 for key exchange) is implemented in a cryptographic module physically separate from the routing processor, with active tamper-evidence: any attempt at physical opening or electronic probing of the crypto module irreversibly destroys stored keys in under 100 ms via breakdown zener triggering. The router is certified to carry information up to SECRET level under NIST SP 800-57 and NSA/CSS EPL (Evaluated Products List) standards.
MANET support is implemented via a two-layer adaptive routing protocol — OLSR (Optimized Link State Routing) for stable topology and AODV (Ad hoc On-demand Distance Vector) for traffic bursts in dynamic topologies — that maintains network connectivity when MANET network nodes move, disconnect, or join the network during an operation. Compatibility with TrellisWare TW-950 Raven and Silvus StreamCaster 4200 MANET radios allows the MILS Router to serve as the encrypted gateway between the tactical radio MANET network and the classified command network at the command post.
Applications
Related products
Rugged IP router with hardware AES-256 Layer 2/3 encryption for classified tactical networks, FIPS 140-2 Level 2 certified, and -40 to +70 degrees Celsius operation.
View details →BitstreamHigh-security IP router with IPsec AES-256-GCM tunnel encryption, hardware classified/unclassified security domain separation, OSPF/BGP dynamic routing, automatic link failover in under 500 ms, and TEMPEST Level II certification for boundary nodes between networks of different classification levels at fixed and mobile command posts.
View details →BitstreamLive IEC 61850 migration of a 220 kV transmission substation in Ica, Peru. Kalkitech Arc One gateways for legacy IEDs, Bitstream TS-3000 PTP synchronization, unified SCADA for 14 bays. Protection MTTR reduced from 6.2h to 22 minutes.
Comprehensive technical guide to Rajant's BreadCrumb family for defense operations: InstaMesh architecture, ATAK integration, LynX roles in dismounted operations, island mode for jungle and highlands, and EAR acquisition considerations for Peru.
Local technical support
EMAR SYSTEMS provides integration, training, and after-sales support for all represented products. Contact the technical team for specifications, demos, and quotes.
Passive intrusion detection system for IEC 61850 and SCADA-Modbus operational technology networks monitoring GOOSE-SV-DNP3 traffic without injecting packets into the control network, detecting lateral movement, anomalous commands, and IED impersonation with real-time alerts, air-gapped deployment without internet, and NERC-CIP compliance for electrical substations, water plants, and refineries.