No proprietary silicon, no vendor lock-in. Every tier below runs the same NTPSense daemon — pick based on port count, throughput, and how many WAN links your site actually has.
Single WAN, <15 users, fanless. Firewall + DHCP + WireGuard without the full Squid blocklist load.
Dedicated fiber primary + shared/NAT wireless backup. Full-feature: Squid, blocklists, Site Mesh VPN, dedicated-WAN failover preference.
Runs Headscale + embedded DERP relay for 5–10+ branch sites, plus its own full local feature set. Sized for DERP relay headroom, not just steady-state load.
Complete systems with IPMI/BMC out-of-band management, ECC RAM — hardware already sourceable, software roadmap (multi-tenancy, centralized management) in progress.
Gap named honestly: no custom ASIC/NPU yet, DPDK path under evaluation. Quote-only hardware tier for volume deployments.
Tell us your WAN count and user count — we'll point you to the right spec.