Peplink Balance SDX

Key Features at a Glance

• Modularity: 2 FlexModule slots for customizing interfaces to meet specific needs
• Edge Computing: Docker containers, KVM virtual machines, and full VMs running directly on the router
• Redundant Power: 2 hot-swappable power inputs for uninterrupted availability
• SpeedFusion VPN: Bandwidth bonding and seamless failover with AES 256-bit encryption
• OLED Display: Real-time monitoring of WAN, LAN, and SpeedFusion tunnel status
• High Availability: Native support for high-availability mode and Drop-In mode
• AP Controller: Management of up to 2000 Pepwave access points with automatic discovery and updates

Modular Design and Edge Computing

The Balance SDX is built on a modular architecture that allows network interfaces to be adapted without replacing the chassis. Two FlexModule slots accommodate 4G/5G modules, SFP+ modules, or GE modules with PoE+ power, providing scalable flexibility for enterprise and campus deployments. A base-configuration 500 GB, 1 TB, or 2 TB SSD is available for hosting edge workloads.

The integrated edge computing platform supports Docker containers, kernel-based virtual machines (KVM), and full virtual machines. This capability enables critical applications to run directly on the router, reducing latency and improving service responsiveness for local network users.

WAN Connectivity and Cellular Performance

The router features two 10G SFP+ WAN ports and two Gigabit Ethernet WAN ports, all convertible to LAN ports based on site topology. The SFP+ WAN ports enable fiber-optic connections for inter-building links exceeding copper’s maximum distance, ensuring more reliable long-distance transmission. Two USB 2.0 ports provide secure out-of-band management and support for backup USB 4G/3G modems.

Two integrated 5G cellular modems, equipped with redundant Nano 4FF SIM slots, support up to eight simultaneous cellular connections. Cellular throughput reaches 4 Gbps downlink and 700 Mbps uplink on 5G, and 2 Gbps downlink with 150 Mbps uplink on LTE CAT-20. An optional SIM injector module enables dynamic allocation of up to 56 Nano 4FF SIM cards, multiplying available carriers for maximum resilience.

SpeedFusion VPN and Load Balancing

The Balance SDX offers a comprehensive VPN solution with SpeedFusion, which bonds bandwidth from multiple links and ensures seamless failover without session interruption. SpeedFusion VPN throughput reaches 1 Gbps without encryption and 600 Mbps with AES 256-bit encryption. The router supports up to 800 PepVPN/SpeedFusion peers and 500 IPsec tunnels, with X.509 certificate authentication and GRE protocol support for network-to-network mode.

Intelligent load balancing leverages multiple algorithms — Weighted, Enforced, Persistence, Priority, Overflow, Least Used, Lowest Latency, and Fastest Response Time — to route traffic via the optimal path at any given moment. Automatic failover and session persistence ensure communication continuity when a link is lost. WAN link health monitoring performs PING, DNS Lookup, and HTTP tests to quickly detect failures.

Security and Firewall

The router includes a stateful firewall with 12 Gbps throughput, DoS attack prevention, and configurable web filtering. The comprehensive VPN solution covers site-to-site connections with SpeedFusion, PPTP/L2TP/OpenVPN servers, and network-to-network IPsec with X.509 certificate support. VPN user authentication can rely on local accounts, LDAP, RADIUS, or Active Directory.

Advanced QoS enables bandwidth reservation by user group, individual limits, and prioritization of applications such as SIP, HTTPS, and VPN. Custom QoS rules per application and group provide granular traffic control across all active links.

Network, Management, and AP Controller

Network functions include NAT and IP Forwarding, static routes, port forwarding, many-to-one and one-to-one NAT, NAT pool, SIP and H.323 ALG, UPnP, NAT-PMP, WINS server, and support for routing protocols BGP, OSPFv2, and RIPv2. The router supports up to 1024 802.1q VLANs and IPv6. Drop-In mode allows transparent installation without reconfiguring the existing network.

The built-in AP controller manages Pepwave access points with automatic discovery, automated firmware updates, profile-based configuration, and Wi-Fi usage statistics. The captive portal supports wired and wireless LAN clients, RADIUS and LDAP authentication, time and usage quotas in open-access mode, and a customizable splash page. The router is compatible with EPX and SDX Pro products for multi-site architectures.

Accessories and Licenses

Several accessories are available for the Balance SDX: rack-mount brackets (ACW-748), rack-mount rails (ACW-752), and the SFN-LC-500 license, which enables up to 500 SpeedFusion bonding peers. The LIC-VWAN, LIC-2VWAN, and LIC-3VWAN licenses activate one, two, or three Virtual WANs on the router, respectively. EssentialCare and EssentialCare+ programs cover one-, two-, or four-year terms based on the selected part number.