Deployment model
Customer-owned hardware
NorthShield software is installed on appliances and servers that remain under your ownership, control, patching policy, and operational procedures.
On PremiseRun NorthShield on infrastructure you already control.
Run the same XDP and eBPF filtering stack on appliances you own and operate, ideal for private networks, regulated environments, and teams that need mitigation inside their facility.
XDP
Kernel-level filtering
eBPF
Programmable flow logic
Local
On-site deployment
Your
Owned hardware
How it works
The same mitigation stack, deployed inside your boundary.
On Premise is for teams that need NorthShield close to origin workloads without outsourcing the edge. We install and tune the software on hardware you operate, inside the network model you already trust.
- Software deployed on customer-owned hardware
- XDP filtering inside your network boundary
- Local policy control and operational ownership
- Engineering support for sizing and rollout
Capabilities
Protection placed where your traffic actually lives.
On Premise is for operators who want NorthShield's filtering stack on their own appliances, close to origin workloads, private transit, or internal service edges.
Kernel filtering
XDP on your edge
The same XDP and eBPF filtering stack used in our network PoPs can run directly on supported on-premise systems at the point where your traffic enters.
Operations
Local policy control
Teams can tune mitigation locally while keeping traffic inspection close to the services, private transit paths, and internal edges that need protection.
Enterprise
Private network fit
Ideal for regulated environments, internal transit, private DC fabrics, and infrastructure that cannot rely on external tunneling or third-party hardware custody.
Sizing
Hardware guidance
We help define NIC, CPU, memory, and platform requirements based on expected throughput, attack profile, and redundancy expectations.
Platform parity
Consistent mitigation logic
On-premise deployments use the same filtering philosophy as our tunnel-based and BGP transit services, so policy thinking stays consistent across environments.
Use cases
Built for teams that cannot outsource the edge.
Some environments require mitigation to stay inside the facility, inside the ASN, or inside a compliance boundary. On Premise brings NorthShield software to those locations without changing your ownership model or forcing traffic through an external tunnel fabric.
- 01Deploy on customer-owned servers or appliances.
- 02Keep filtering logic aligned with private network architecture.
- 03Support internal service edges and private transit paths.
- 04Maintain operational control over hardware and update windows.
Included
Software deployment with engineering support.
We help validate platform fit, deployment topology, and expected traffic shape before the filtering stack goes live on your hardware.
- Hardware and platform suitability review
- Deployment architecture planning
- XDP/eBPF policy baseline
- Local traffic profile assessment
- Installation and go-live support
- Operational handoff documentation
- Incident summary reporting
- Upgrade and tuning guidance
Bring NorthShield into your own environment.
Tell us about your hardware, traffic profile, and compliance requirements. We will define the right on-premise deployment model.