Data Diodes
FiberPlex SFX-1DD 1 Gigabit SFP data diode module for Cyber Security

Overview
The FiberPlex SFX-1DD Data Diode, with 1-gigabit optics, features a data diode functionality which means that the modules transmit data in one direction only without the possibility for a return path. There is only one optical opening to connect a single fiber.

The SFX-1DD modules are high performance, cyber-secure modules supporting a host of data rates and distances.

Patton's FiberPlex Cyber-SFP Modules are compatible with the small form-factor pluggable (SFP) multi-source agreement (MSA). They are RoHS compliant and lead-free.

These optical modules are designed for digital data applications, and are not recommended for digital video applications due to SMPTE encoding that may cause pathological signal errors. For video applications, see our line of video optimized SFP modules.

SFP MSA Compliance
The SFP multi-source agreement (MSA) is an agreement that was drafted among competing manufacturers of SFP optical modules. The SFF Committee was formed to oversee the creation and maintenance of these agreements including the SFP MSA designated as INF-8074i. This agreement describes a mutually agreed upon standard for the form and function of SFP modules. However, not all SFPs produced are MSA compliant. The MSA provides for a transceiver (TX/RX) pinout. FiberPlex Technologies Data SFPs are fully compliant with SFF-8074i. The pinout for these SFPs can be seen in the table below.

SFP Pinout
Pin	Transceiver / BiDi (MSA)
1	VEE
2	TX_FAULT [VEE]
3	TX_DIS
4	MOD_DEF(2)-SDA
5	MOD_DEF(1)-SCL
6	MOD_DEF(0)-PRESENCE [VEE]
7	Rate [NC]
8	LOS
9	VEE
10	VEE
11	VEE
12	RD-
13	RD+
14	VEE
15	VCC
16	VCC
17	VEE
18	TD+
19	TD-
20	VEE

Regulatory Compliance

• ESD to the Electrical Pins: compatible with MIL-STD-883 Method 3015
• ESD to the Duplex LC Receptacle: compatible with IEC 61000-4-2
• EMI compatible with FCC Part 15 Class B EN55022 Class B (CISPR 22B) VCCI Class B
• Immunity compatible with IEC 61000-4-3
• Laser Eye Safety compatible with FDA 21CFR 1040.10 and 1040.11 EN60950, EN (IEC) 60825-1,2
• RoHs compliant with 2002/95/EC 4.1&4.2 2005/747/EC

A Large Selection of Optics

The FiberPlex line of SFP Modules supports a host of data rates, wavelengths (λ) and power configurations providing maximum flexibility. The SFPs simultaneously support various SONET, synchronous digital hierarchy (SDH) and IEEE Ethernet standards. The table below lists many of the popular options and the corresponding Patton SFP part number.

Two Fiber Optical Transceiver Modules
SFX Modules
FiberPlex SFP	TX/RX	Data Rate	SONET/SDH/IEEE	Fiber Type	λ (nm)	Transmitter Power (dBm)		Receiver Sensitivity (dBm)	TX Jitter (JTXp-p)	Max Distance @ Max Data Rate
						Min	Max
SFX-MC24DT-3100-2	TX	1.25 Gbps	OC24/Fibre Channel/GbE	Multimode	1310	-9	-3	-	200 ps	300 m
SFX-MC24DR-0031-2	RX
SFX-SC24DT-3100-B	TX			Singlemode		-	-	-25	-	10 km
SFX-SC24DR-0031-B	RX
SFX-MC92DT-8500-0	TX	10 Gbps	OC192/10G Ethernet	Multimode	1310	-8.2	+0.5	-	200 ps	100 m
SFX-MC92DR-0085-0	RX
SFX-SC92DT-3100-A	TX			Singlemode		-	-	-14.4	-	10 km
SFX-SC92DR-0031-A	RX

Applications
Network Security and Segmentation
Determining where data diodes should be deployed depends on the security goals. If the primary goal is to protect the source network, then the data diode is deployed at the edge of the security border of the source network. The data diode prevents any possibility of an external party hacking into the source network while making data available outside of the source network




Data Availability
Many believe that remote monitoring cannot be achieved without remote access to systems. However, as previously stated, if remote access is provided via an external two-way connection, then a threat vector is created. By utilizing data diodes, a high-security network, such as an oil and gas refinery, is secured by one-way transfer hardware, preventing all external access. Meanwhile the data required for remote monitoring, backup, or analysis is sent one-way to another network or the cloud, where end users and applications can access it as needed without compromising the integrity of the refinery controls.




Bilateral/Bidirectional Transfers
Despite all of the security benefits of one-way data diode solutions, in many cases, limited bidirectional communication is still necessary for confirmation or command and control. In these cases, the U.S. Department of Homeland Security’s guidance advocates using “a single open port over a restricted network path” to severely limit the attack surface. A bilateral solution includes two independent data diode one-way paths that permit a single, round trip session between pre-configured IP addresses: a one-way data transfer solution responsible for outgoing traffic, and another responsible for incoming traffic.

Features

• Single LC connector
• Single direction with no possibility for a return path
• Hot-pluggable SFP footprint
• RoHS compliant and Lead Free
• Milled Brass enclosure for maximum EMI/RFI containment and durability
• Single +3.3V power supply
• Low power dissipation <800mW
• SFP MSA SFF-8074i Compliant.
• Designed and Manufactured in the USA: Top notch quality and reliability with local support.

Ordering

# Model # Description Availability 1 SFX-MC24DR-0031-0 SFP,CYBER,LC,1.25GB(OC24),RX:1310nm,300m General Availability 2 SFX-MC24DT-3100-0 SFP,CYBER,LC,1.25GB(OC24),TX:1310nm,300m General Availability 3 SFX-SC24DR-0031-B SFP,CYBER (Data Diode) ,Singlemode LC,1.25GB (OC24),RX:1310nm,10km General Availability 4 SFX-SC24DT-3100-B SFP,CYBER (Data Diode) ,Singlemode LC,1.25GB (OC24),TX:1310nm,10km General Availability