Hi there Richard,

I have been looking into Data-Diodes using UDPcast as well over the past few weeks. I have seen speeds as high as 70Mbps on a 100Mbps ethernet link. It is usually more like 50+Mbps as this example shows. The file sent is 29,428,629 after uuencoding.

The receiver side CMD: # time udp-receiver --interface p3p1 --start-time 30 --nosync --stat-period 2 --pipe /bin/uudecode Udp-receiver 20120424 Compressed UDP receiver for (stdout) at 10.37.49.21 on p3p1 Connected as #0 to 10.37.49.20 bytes= 29 428 629 ( 54.48 Mbps)) Transfer complete.

real 0m4.680s user 0m0.166s sys 0m0.200s

The sender side CMD: ]# time uuencode -m ./bigtestfile test33file | udp-sender --interface p1p1 --pointopoint --stat-period 3 --async --max-bitrate 100M --fec 16x16 --mcast-data-addr 10.37.49.21 stripes=16 redund=16 stripesize=128 Udp-sender 20120424 UDP sender for (stdin) at 10.37.49.20 on p1p1 Broadcasting control to 10.37.49.255 Ready. Press any key to start sending data. Starting transfer: 00000029 bytes= 29 428 629 re-xmits=0000000 ( 0.0%) slice=1024 - 00 Transfer complete.

I am using 3 ethernet NICs to accomplish this: Two on the sender side, and One on the receiver. This is point to point and only about 8 feet in distance. The purpose of the 2 NICs on the sender is this: only one actually send the data 2 wires Tx. This NIC must receive "carrier" or somehow know that it is in fact connected to a network. Therefore the second NIC has its 2 wires Tx connected to the Rx side of the transmitting or sending NIC. Additionally all NICs involved must have their ethernet device attributes set the same manually. In my case that is 100Mbps half duplex with no autoneg there may be other attributes involve depending on the actual device used. All 3 NICs have and Ethernet ip address and ifconfig {device} up to bring them up.

Since you are working with an actual Data Security Diode is a "Canary GT-10SD". How would you characterize this poor man's data diode?

Also FYI: , no joy with upd-sender option "--nokbd". the sender is sending but with checksum errors.

______________________________ Martin Tullier