DFA 1163: Enable A Full-Blast 5G Experience With NEXCOM’s Professional uCPE

Application • Edge AI
October 14, 2021

Summary

5G Fixed Wireless Access (FWA) and edge computing applications require compact appliances integrating cellular, wireless, and wired connectivity with professional-grade security functions. NEXCOM's DFA 1163 addresses this requirement through Intel Atom C3558R/C3758R processors, integrated 5G FR1/FR2 and Wi-Fi 6 modules, Intel QuickAssist Technology (QAT) for cryptographic acceleration, and 10GbE SFP+ fiber connectivity. The compact desktop form factor enables rapid deployment for 5G security gateways, SD-WAN, VPN, and enterprise edge routing applications.

Problem / Requirements

5G Fixed Wireless Access and edge computing deployments face specific architectural challenges:

- Multi-Modal Connectivity: Integrating 5G NR (FR1/FR2), 4G LTE, Wi-Fi 6, and wired Ethernet in minimal space

- Security Gateway Functions: VPN termination, firewall, and encrypted traffic processing without latency

- Cryptographic Workload: IPsec, TLS/SSL termination, and application-level encryption requiring hardware acceleration

- Compact Deployment: Desktop form factor suitable for enterprise premises, small cell backhaul, and field cabinets

- Low Power Consumption: Fanless design compatible with extended operation on backup power or solar installations

- Professional Connectivity: SFP+ fiber connectivity for enterprise backbone integration

Technical Approach

/table

Challenge | Solution

Multi-standard wireless integration | Integrated 5G FR1/FR2, 4G LTE, and Wi-Fi 6 modules

Cryptographic throughput | Intel QAT hardware acceleration for AES, SHA, and IPsec offload

Compact professional form | Desktop enclosure with SFP+ fiber interface

Processor performance | Intel Atom C3558R (4 cores) or C3758R (8 cores) options

Enterprise integration | 10GbE SFP+ uplink for backbone connectivity

Security function execution | Support for SD-WAN, VPN gateway, and firewall workloads

/endtable

The DFA 1163 integrates Intel Atom C3558R or C3758R processors, engineered for network edge appliances with integrated security instructions and QAT acceleration. These processors offer sufficient computational power for stateful packet processing, VPN encapsulation, and wireless protocol handling while maintaining low thermal output suitable for fanless operation.

Implementation Notes

Specifications Snapshot

/table

Specification | DFA 1163-4C | DFA 1163-8C

Processor | Intel Atom C3558R | Intel Atom C3758R

Cores | 4 cores | 8 cores

Base Clock | 2.0 GHz | 2.0 GHz

Turbo Clock | Up to 2.5 GHz | Up to 2.5 GHz

Memory | Up to 8GB DDR4 | Up to 8GB DDR4

Acceleration | Intel QAT | Intel QAT

Storage | M.2 SSD support | M.2 SSD support

Uplink | 10GbE SFP+ fiber | 10GbE SFP+ fiber

Wireless | 5G FR1/FR2, 4G LTE, Wi-Fi 6 | 5G FR1/FR2, 4G LTE, Wi-Fi 6

PoE+ Support | Available | Available

Form Factor | Compact desktop | Compact desktop

Cooling | Fanless | Fanless

/endtable

Wireless Connectivity Integration

The DFA 1163 supports multiple wireless standards through modular architecture:

5G NR (New Radio):

- FR1 (Sub-6 GHz): Standard 5G coverage bands (2.1-3.7 GHz), supporting typical cell ranges of 1-2 km

- FR2 (Millimeter Wave): 28/39 GHz bands for high-capacity small-cell deployments with ranges of 100-300 meters

- Throughput: Sustained 1-4 Gbps dependent on spectrum allocation and signal quality

4G LTE:

- Bands 1-32: Global LTE spectrum coverage enabling multi-region deployment

- Fallback Capability: Automatic failover when 5G unavailable

- Throughput: Sustained 100-500 Mbps typical

Wi-Fi 6 (802.11ax):

- 2.4 GHz / 5 GHz Dual-Band: Standard Wi-Fi distribution for indoor coverage

- OFDMA Support: Efficient spectrum utilization with multiple simultaneous clients

- Throughput: Up to 1.2 Gbps aggregate across bands

Network Architecture

Typical deployment topologies:

5G FWA Gateway:

5G RAN ← (5G NR) → DFA 1163 ← (10GbE) → ISP Backbone
                      ↓
                  Wi-Fi 6
               (Enterprise Access)

Enterprise SD-WAN Edge:

Campus Network ← (1GbE) → DFA 1163 ← (5G NR) → Corporate WAN
                             ↓
                       VPN/IPsec (QAT-accelerated)

Small Cell Backhaul:

Small Cell RU ← (Wireless) → DFA 1163 ← (10GbE SFP+) → Macro Network
                                ↓
                           Routing/Firewall

Security Functions

QAT-accelerated cryptographic operations:

IPsec VPN:

- ncryption: AES-128/192/256 offload reduces CPU utilization from 60% to <10%

- Authentication: SHA-256/384/512 offload for integrity verification

- Throughput: Sustained 2-3 Gbps IPsec tunnels with full encryption

TLS/SSL Termination:

- Server-side TLS: Hardware-accelerated handshakes and record-layer encryption

- Typical Application: HTTPS termination for captive portals, enterprise gateways

Firewall and SD-WAN:

- Stateful Inspection: Connection tracking for bidirectional traffic

- Policy Enforcement: Per-flow QoS, bandwidth allocation, and application-layer filtering

- SNAT/DNAT: Network address translation with hardware-assisted conntrack

Management and Monitoring

Standard management interfaces:

- Web Interface: Browser-based configuration dashboard for wireless, security, and routing settings

- SSH Console: Command-line administration for advanced configuration

- SNMP: Network management protocol for NOC integration

- Syslog: Centralized logging for security events and system alerts

- NETCONF/YANG: Programmable configuration for orchestrated deployments

Monitoring capabilities:

- Wireless Signal Metrics: Real-time RSSI, SINR, and throughput per wireless interface

- Traffic Analytics: Per-flow statistics for capacity planning

- Security Event Logging: VPN connection attempts, firewall rejections, and policy violations- Hardware Health: Thermal monitoring and power consumption tracking

Key Takeaways

1. Integrated 5G Connectivity: 5G FR1/FR2 and 4G LTE modules eliminate need for external wireless gateways.

2. Professional-Grade Security: Intel QAT acceleration enables multi-gigabit IPsec/TLS without CPU saturation.

3. Compact Deployment: Desktop form factor fits enterprise premises, small cell sites, and field installations.

4. Enterprise Fiber Integration: 10GbE SFP+ uplink supports high-capacity backbone integration.

5. Fanless Operation: Silent, low-power design suitable for extended backup power or off-grid solar deployments.

Contact NEXCOM

For specifications, availability, and technical inquiries, contact NEXCOM via the official website.

Source: https://www.nexcom.com/news/detail/dfa-1163-enable-a-full-blast-5g-experience-with-nexcom-s-professional-ucpe

Contact
Thank you! Your submission has been received!
Submit another form
Something went wrong while submitting the form.