In this blog, we discuss what LoRaWAN is, its benefits, key components, and how it differs from LoRa. We also touch on how to choose the right LoRaWAN architecture and how to deploy a private LoRaWAN network.

We'll showcase some case studies highlighting why businesses choose LoRaWAN, as well as answer some frequently asked questions about this technology.

What is LoRaWAN

LoRaWAN is a wireless networking protocol that enables long-range communication between IoT devices while minimizing power consumption and maintaining low operating costs. LoRaWAN technology is based on the LoRa (Long-Range) modulation technique.

The LoRaWAN network uses a star-of-stars layout, with gateways serving as intermediaries between end devices and the main network server. These gateways, linked via standard IP connections, simply transform RF packets into IP packets and vice versa. The long-range traits of the LoRaÒ physical layer facilitate wireless communication, enabling a one-hop connection between the end device and multiple gateways.

The network supports two-way communication and multicast addressing groups for tasks like Firmware Over-The-Air (FOTA) upgrades or mass message distribution, ensuring efficient use of spectrum.

LoRaWAN vs LoRa

When it comes to wireless communication for IoT devices, two terms you'll often encounter are LoRa and LoRaWAN. While they may sound similar, they refer to different aspects of the technology. Let's break down their differences:

LoRa

LoRa stands for Long Range. It is a wireless modulation technique used for creating long-range communication links.

In simpler terms, it's the physical layer or the wireless radio frequency technology that enables long-range communication among IoT devices. It's designed to use minimal power while covering large areas, making it ideal for IoT applications where devices need to send small amounts of data over long distances.

LoRaWAN

On the other hand, LoRaWAN represents the network protocol on which LoRa operates. It defines the communication protocol and system architecture for the network while managing the communication between devices and the internet. This includes aspects like addressing, security, and the handling of messages.]

Advantages of LoRaWAN

Let's look at the advantages that make LoRaWAN a vital tool in today's tech landscape:

Long-Range Communication

LoRaWAN excels in facilitating communication over long distances. It can sustain connections up to 15 kilometers in rural areas and about 5 kilometers in urban environments. This makes it a perfect fit for applications that operate in remote areas, such as agricultural sensors or wildlife tracking devices.

Low Power Consumption

Another key advantage of LoRaWAN is its low power requirement. LoRaWAN devices can run on a single battery for years, making it an economical choice for large-scale deployments.

Robust Security Features

With LoRaWAN, you don't have to compromise on security. It employs encryption for communication between devices and networks, ensuring data privacy and protection against unauthorized access.

Scalability

LoRaWAN can handle millions of messages per base station daily, making it capable of supporting growing IoT deployments.

Read more about LoRaWAN 101: All you need to know Before Getting Started

Key Components of LoRaWAN

LoRaWAN functions through a series of interconnected components. Understanding these elements can help you grasp how this technology operates and why it's advantageous for long-range, low-power applications. Here's a simple breakdown of the main components:

1. End Nodes or Devices

These are the objects in IoT networks that collect data. They could be anything from temperature sensors to tracking devices. Their primary function is to gather information and send it to a gateway using LoRaWAN protocol.

2. Gateways

Gateways serve as the bridge between end nodes and the network server. Gateways for LoRaWAN receive data from multiple end nodes and forward it to the network server. Importantly, they do not process this data—their role is purely to transmit it.

3. Network Server

This is the heart of the LoRaWAN system. The network server processes the data received from gateways, handles security checks, and controls data traffic. It also manages the network's overall performance and efficiency.

4. Application Server

Once the network server has processed the data, it sends it to the application server. This server is where the data becomes accessible to the end-user. Depending on the specific application, users might view this data through a web interface, mobile app, or another platform.

5. Join Server

This component is responsible for the device authentication process. It ensures that only authorized devices can connect to the network, enhancing the security of the entire system.

How to Determine the Right LoRaWAN Architecture

When setting up a LoRaWAN network, one of the key decisions you'll need to make is choosing the right architecture. While there's no one-size-fits-all answer, here are some factors to consider to help you make the best choice:

a) Coverage Needs

Consider the geographical area your network needs to cover. If you're dealing with a small area such as a single building or campus, a single-channel gateway might suffice. However, for larger areas or rural locations, a multi-channel gateway might be more efficient, as it can handle a higher volume of data from numerous devices.

b) Number of Devices

Think about how many devices will be connecting to your network. A higher number of devices might require a more robust network architecture to manage all the connections and data traffic efficiently.

c) Data Transmission Frequency

How often your devices will be transmitting data is another crucial factor. If your devices send data infrequently, a simpler architecture might work. However, if your devices transmit data frequently, you'll need a more robust network setup to handle the high data volume.

d) Security Requirements

Depending on the sensitivity of the data your network will handle, different levels of security may be needed. Ensure that the architecture you choose can meet these requirements. Learn more on GDPR certification

e) Cost and Maintenance

Lastly, consider the cost of setting up and maintaining your network. While a more complex architecture might offer more features, it could also be more expensive and require more maintenance.

How to Deploy a Private LoRaWAN Network

Deploying a private LoRaWAN network involves several key steps. Here's a simple guide to help you get started:

Step 1: Acquire a Gateway for LoRaWAN

This device acts like a "base station" for your network. Its placement is important for optimal performance - it should be positioned at a height and away from obstacles that can interfere with the signal.

Step 2: Register the Gateway on Your Network Server

Once your gateway is in place, you need to register it on your network server. You'll do this by entering its unique identifier and other necessary information.

Step 3: Activate LoRaWAN Sensors

Next, activate the sensors you plan to use with your network. This is typically done in OTAA (Over The Air Activation) mode, or ABP (Activation by Personalization) mode if necessary. Activation involves encoding the parameters or scanning the QR code provided with the sensor.

Step 4: Start the LoRaWAN Sensor

After activation, start the sensor. It will establish its first connection with the network server and negotiate its encryption keys for secure communication.

Step 5: Connect the Network Server to Your Application

Now that your network is active, you can connect the network server to your application. This is usually done via an interface that the network server provides, such as MQTT, Web Services, or Web Sockets.

Step 6: Add More Gateways (Optional)

If you need to improve coverage or ensure a better quality of service, you can add more gateways to your network. Simply install the new gateway and register it on the same instance of the network server.

Step 7: Manage the Network

Finally, remember to monitor and manage your network regularly. This includes checking device connections, data transmission, and network security.

Case Studies: Why Businesses Choose LoRaWAN

Let's take a look at some real-life examples that highlight why individuals and businesses choose LoRaWAN for their projects.

Energy Solution for Power Measurement

One RAKwireless customer sought to build an energy solution capable of measuring voltage, power factor, and aggregated apparent energy. Their choice fell on LoRaWAN primarily due to its low power consumption advantage.

The solution they developed does not rely on batteries but instead generates energy magnetically. This approach not only makes the solution eco-friendly but also cuts down on maintenance efforts. Here, LoRaWAN's low power consumption technology proved to be an ideal choice, aligning perfectly with the customer's need for an energy-efficient solution.

Hospital Solution

Another RAKwireless customer was tasked with deploying a solution for a hospital. In this scenario, LoRaWAN's scalability and ease of management were key advantages.

If they had opted for Zigbee technology, they would have been required to deploy hundreds of gateways to achieve full coverage. This would have not only been challenging to maintain but also could have introduced significant security risks.

With LoRaWAN, they were able to achieve full coverage by deploying just two or three gateways, dramatically reducing maintenance efforts.

These case studies demonstrate how LoRaWAN's unique features - low power consumption, scalability, and ease of management - can be crucial factors in deciding the right technology for specific use cases.

Read more about RAKstars Success Stories

Frequently Asked Questions on LoRaWAN

Q: LoRaWAN vs Other LPWA Network Solutions?

A: LoRaWAN stands out for its long-range capabilities and low power consumption, making it suitable for IoT applications where devices need to send small amounts of data over long distances.

Q: What is Uplink and Downlink in LoRaWAN Networks?

A: Uplink refers to data sent from the end devices to the gateway, while downlink is data sent from the gateway to the end devices.

Q: Is it legal to use LoRaWan? Is there a need for an authorization or a license?

A: Yes, it is legal to use LoRaWAN. However, the exact regulations vary by country. In some cases, you may need a license for certain frequency bands.

Q: What is the range of a LoRaWAN network?

A: The range of a LoRaWAN network varies based on several factors but typically, it can cover up to 10 km in rural areas and 2 km in urban settings.

Q: Can LoRaWAN networks be hacked?

A: Like any network, LoRaWAN networks can be susceptible to hacking. However, they have built-in security features that help protect against such threats.

Q: Can LoRaWAN be used for real-time applications?

A: LoRaWAN can be used for near-real-time applications. However, due to its low data rate, it may not be ideal for applications requiring high-speed data transmission.

Q: What is a Gateway for LoRaWAN?

A: A Gateway for LoRaWAN acts as a bridge between the end devices (like sensors) and the network server, receiving data from the devices and forwarding it to the server.

Hello, RAKstars!

As we wrap up November 2023, our latest newsletter brings you a mix of exciting product news and a recap of RAKwireless' participation in global events. Keep reading for an exclusive 15% discount available only to our newsletter subscribers!

Great news for developers! The RAK4630 module is now “Works With Amazon Sidewalk” qualified. Get your hands on the RAK4630 Evaluation Kit and start creating devices compatible with Amazon Sidewalk.

Introducing Blues.ONE for WisBlock – a complete cellular IoT solution. It's time to simplify your IoT projects with this easy-to-use, powerful setup.

WisDM steps up with version 1.6.1, featuring ChirpStack V4 MQTT Bridge Support, Gateway Setup Enhancement, and UI improvements for easier subscription management.

Experience optimized memory use and flexible LoRa mode selection with RUI3 v4.1.0. Tailor your IoT solutions with this latest update.

Discover the WisBlock Solution Kit for IAQ, a comprehensive kit for indoor air quality monitoring. Get 15% off on this kit, exclusively for our newsletter subscribers!

Mark your calendars! Our Holiday Sale is coming this Dec 18–31, 2023. Get 10% discount on select products!

Philippines: NU Fairview IoT Symposium 2023

A successful event at NU Fairview IoT Symposium 2023! Our Tech Marketing Manager, Carl Rowan, delivered a keynote on RAKwireless, LoRa® technology, and the impact of WisBlock in agriculture.

Barcelona: Smart City Expo 2023

The Smart City Expo, the world's largest event for urban innovation, took place on Nov 7–9. Our product expert Xose Pérez shared his insights on Nov 9, contributing to the global conversation on smart cities.

UK: CENSIS Tech Summit 2023

At the CENSIS Tech Summit 2023 on November 2nd in Glasgow, we joined other innovators and tech leaders to discuss the latest in IoT and smart technology.

Stay connected for more updates, and share your RAKwireless projects and experiences with us. We're excited to see what December brings!

Warm regards,

The RAKwireless Team

Our world is increasingly interconnected, thanks to IoT Networks. These networks allow a myriad of devices to communicate and share data seamlessly, from our homes to our cars, and even our health and wellness gadgets.

In this blog, we will explore the following topics:

• What is an IoT network?
• How does an IoT network operate?
• Different types of IoT networks

We will also discuss practical examples of IoT devices and scenarios, giving you a glimpse into how these networks influence our daily experiences. Moreover, we'll offer guidance on selecting an appropriate network for your needs, considering aspects like cost, energy usage, data transfer limits, and more.

What is an IoT Network and How Does It Work?

An IoT network is a system that connects a multitude of devices, enabling them to collect and share data seamlessly. The operation of these networks can be broken down into three key steps:

1. Data Collection: IoT devices, embedded with sensors and software, gather data from their surroundings.
2. Data Transmission: The devices then transmit this data over the network, which can be either wired or wireless.
3. Data Processing: The transmitted data can be analyzed locally or sent to the cloud for further processing, leading to actionable insights.

For instance, a smart thermostat collects data about temperature and humidity levels in your home. This data is then sent via the IoT network to a cloud-based application. The application processes the data and adjusts your home's heating or cooling system accordingly.

An IoT network works as the crucial link that allows our homes, cars, and even health and wellness devices to become'smart' and interconnected.

Types of IoT Networks

Understanding the different types of IoT networks is crucial to finding the right IoT network solution for your needs. Here's a rundown of some of the most common types.

Wired & Short Range Wireless Networks

Wired and short-range wireless networks are often used in IoT networks where devices are located close to each other. These networks allow IoT devices to communicate directly with each other or with a central hub, making them ideal for applications like smart homes or industrial automation.

M2M – 2G, 3G, 4G & 5G Networks

Machine-to-machine (M2M) networks use cellular technology to connect IoT devices. This category includes 2G, 3G, 4G, and the latest, 5G networks. Each subsequent generation offers faster speeds and greater capacity, enabling more data to be transmitted between IoT devices.

LPWAN – Low Power Wide Area Networks

Low Power Wide Area Networks (LPWAN) are designed for long-range communications at a low bit rate. They are highly energy-efficient, making them perfect for IoT devices that need to operate for long periods without recharging. Examples of LPWAN technology include SigFox and LoRaWAN®.

NB-IoT (Narrow Band IoT)

NB-IoT is a type of LPWAN technology designed specifically for IoT applications. It uses a narrow frequency band to provide wide area coverage and deep penetration, making it suitable for IoT devices located in remote or hard-to-reach areas.

Disruptive Public Networks

Disruptive public networks are emerging technologies that aim to provide free or low-cost connectivity for IoT devices. They leverage existing infrastructure, such as Wi-Fi hotspots or Bluetooth beacons, to create a network of connected devices.

Image caption: There are various types of IoT networks with their unique characteristics and potential applications.

Sample on IoT Devices & Scenarios

Let's explore how IoT networks are applied in real-world scenarios.

1. Tunnel

Private 4G, 5G, and NB-IoT networks are used to provide high-speed wireless access. These networks ensure security for local data, guarantee bandwidth for specific devices, prevent data leakage, and offer wide-range IoT coverage. Additionally, they manage device access effectively.

2. Farm

In this setting, private LTE-M and 5G networks are employed. Like the tunnel scenario, they provide high-speed wireless access, secure local data, assure bandwidth for certain devices, prevent data leakage, and facilitate wide-range IoT coverage. Device access management is also a key feature.

3. Factory and Logistic Hub Scenario

Here, private LTE and 5G networks are utilized. They offer high-speed wireless access, ensure local network security, guarantee bandwidth for particular devices, and prevent data leakage. A stable redundancy data path is provided for data safety, and device access is managed efficiently.

These scenarios demonstrate how diverse IoT networks and devices can be tailored to suit various needs and environments. Read: Successful IoT deployments, research, and solution

How to Choose the Right Network

Selecting an appropriate IoT network solution for your project can be a complex task. Here are some key factors to consider:

Bandwidth Requirements

Identify whether your application requires wide-band data or narrowband applications. For wide-band data, public networks like LTE, 4G, and 5G are typically used, while private networks often use WiFi. For narrowband applications, consider public LPWAN options like NB-IoT or Cat-M, or private options such as LoRaWAN.

Cost Considerations

Traditional M2M networks using 2G, 3G, 4G, and 5G may come with high equipment and subscription costs. On the other hand, LPWAN technologies like SigFox and LoRaWAN aim to offer cost-effective solutions for IoT devices.

Energy Consumption

Energy efficiency is critical for IoT networks, particularly for battery-operated IoT devices. LPWAN technologies like SigFox and LoRaWAN are designed to be energy-efficient, offering a viable solution for such devices.

Coverage and Reliability

Consider the network's coverage and reliability. Traditional M2M networks offer global coverage, while emerging public networks like Helium and Amazon Sidewalk present new possibilities for IoT connectivity.

Understanding your project's specific needs and constraints, along with the strengths and weaknesses of each type of IoT network, will guide you in making the best choice for your IoT network solution.

Final Thoughts: Empowering the Future of IoT

Navigating the array of IoT networks and finding the right IoT network solution for your specific needs can be challenging. However, understanding the strengths of options like LPWAN, traditional M2M networks, and newer networks can provide crucial guidance. IoT devices are steadily becoming the backbone of our interconnected world, and the right IoT network can empower these devices to operate at their full potential.

Frequently Asked Questions

1. What are IoT Networks?

IoT Networks refer to the systems of interconnected IoT devices that communicate and share data with each other. These networks can use various technologies, including LPWAN, LoRaWAN, WiFi, and cellular data.

2. What are disruptive public networks in IoT?

Disruptive public networks in IoT refer to new network solutions that challenge traditional models. Examples include Helium and Amazon Sidewalk, which offer decentralized and community-based network coverage for IoT devices.

3. Is 5G IoT?

5G is not IoT, but it's a vital technology that supports IoT. It provides faster speed and lower latency than its predecessors, making real-time data transfer for IoT devices more efficient.

4. Does IoT need the Internet?

Not all IoT devices require the internet. Some can communicate using other types of networks like Bluetooth or Zigbee. However, for IoT devices to communicate over long distances or to access cloud services, internet connectivity is usually needed.

5. What is the role of LoRaWAN in IoT?

LoRaWAN is a type of LPWAN technology used in IoT. It offers long-range communication with low power consumption, making it ideal for battery-operated IoT devices in areas where WiFi or cellular connectivity might not be available.

Learn more about the difference between LoRa® and LoRaWAN.

Have you ever struggled with overcooked pork butt during a backyard barbecue?

As an outdoor cooking enthusiast, I know the frustration of juggling between my grill and a weak Wi-Fi signal. But what if you could monitor your meat's temperature seamlessly, without being confined to your router's limited range?

Introducing the Long-Range Connected Meat Thermometer, a trailblazer for outdoor cooking powered by Amazon Sidewalk.

The Challenge:

Outdoor cooking, particularly smoking and grilling, demands precise temperature control for perfect tenderness and flavor. Unfortunately, traditional Wi-Fi-connected cooking devices often lose signal outdoors, forcing you to guess or make frequent trips inside to check the connection. This not only spoils the cooking experience but can also result in over or undercooked meals.

The Solution:

The Long-Range Connected Meat Thermometer, equipped with Amazon Sidewalk technology, solves these problems. This innovative gadget ensures you stay connected, even when grilling in the most distant part of your backyard.

Key Features:

• Extended Connectivity: Using Amazon Sidewalk's long-range abilities, the thermometer keeps a stable connection well beyond standard Wi-Fi's reach.
• Real-Time Alerts: Get immediate notifications on your smartphone about your meat's temperature, guaranteeing perfectly cooked meals every time.
• Easy Setup: The device connects smoothly to the Amazon Sidewalk network, avoiding complicated setups and manual onboarding.
• Secure and Private: With Amazon Sidewalk's encrypted technology, your cooking data stays safe and private.

User Experience:

Imagine smoking a pork butt for hours without worrying about losing your thermometer's connection. You're free to socialize with guests, relax, or handle other cooking tasks, all while getting real-time updates on your phone. This convenience and peace of mind significantly enhance the outdoor cooking experience.

Conclusion:

The Long-Range Connected Meat Thermometer is more than just a gadget; it's a demonstration of how IoT can change everyday tasks. Utilizing the capabilities of Amazon Sidewalk, this device ensures that your outdoor cooking is marked by accuracy, convenience, and dependability. Say goodbye to overcooked meats and Wi-Fi issues, and welcome the future of outdoor grilling and smoking.

For more information about RAK’s Starter Kit for Amazon Sidewalk, click here.

Introduction

Imagine this: You're on vacation, enjoying some much-needed relaxation. Meanwhile, back at home, a pipe bursts without your knowledge, and water starts to flood your living spaces. By the time you get back, the damage is severe, resulting in expensive repairs and loss of irreplaceable items.

No one wants to experience this, which is why leak detection is so important for homes and businesses alike—introducing SmartSense Pro by SenoSpace, a revolutionary tool in leak detection and environmental monitoring.

Why Leak Monitoring Matters

Leaks, usually unnoticed until substantial damage has occurred, can wreak havoc on property and assets. They can also create dangerous conditions, particularly in industrial environments. Early detection is crucial to avoid these problems, and this is where SmartSense Pro steps in.

Meet SmartSense Pro

SmartSense Pro, developed in partnership with RAKwireless, is an advanced IoT solution that uses the Amazon Sidewalk network for comprehensive leak detection and environmental monitoring. It's more than just a leak sensor; it's a multi-functional device that can monitor environmental conditions, track devices, and even oversee entry and exit points.

Key Features of SmartSense Pro

• Versatile Monitoring: Not just for detecting leaks, it provides environmental reports, door/window updates, and instant alerts.
• Expanded Functionality: A headphone jack-based IO port offers extra features.
• Long-Range Connectivity: Utilizing Amazon Sidewalk, it ensures reliable, long-range communication, crucial for extensive premises.

The Need for Connectivity and Range

Leak detection systems need to be consistently connected and capable of covering large areas, especially in commercial or industrial settings. Traditional Wi-Fi systems often fall short in range and reliability. This is where Amazon Sidewalk excels, providing the broad coverage and dependable connectivity that SmartSense Pro requires.

SmartSense Pro and Amazon Sidewalk: An Ideal Pairing

By connecting with Amazon Sidewalk, SmartSense Pro guarantees quick detection of leaks and environmental shifts, no matter the location. This connection allows users to get alerts and monitor their areas remotely with ease, offering comfort and swift action.

Beyond Sidewalk: SmartSense Pro's Flexibility

Besides Amazon Sidewalk, SmartSense Pro is also compatible with LoRaWAN®, adding versatility for different installation requirements and applications. The SenoSpace Framework boosts its functionality, supplying a unique wireless protocol and software platform for thorough monitoring and management.

Conclusion

SenoSpace's SmartSense Pro, with its integration into Amazon Sidewalk and compatibility with various wireless protocols, marks a notable advancement in leak detection and environmental monitoring technology. Whether for a small apartment or a large corporate complex, SmartSense Pro provides a dependable, scalable solution to safeguard your assets and environment.

MIAMI, US, December 4, 2023—RAKwireless, a leading provider of private network solutions, has announced the launch of the RAK4630 module for Amazon Sidewalk, a state-of-the-art module that has received Amazon Sidewalk qualification.

The RAK4630 module is powered by the Nordic nRF52840 MCU with BLE 5.0 and integrated with the cutting-edge SX1262 LoRa® transceiver from Semtech, optimized for low-bandwidth, long-range connectivity. This makes it ideal for applications like sensor networks, smart home devices, and other devices that benefit from extended coverage both at home and beyond.

RAK4630 module for Amazon Sidewalk is designed to seamlessly integrate with RAKwireless’ renowned WisBlock ecosystem. Boasting over 130 interconnecting hardware modules, the WisBlock system is a “Modular IoT Platform” that enables IoT developers and solution architects to craft industrial-grade, deployment-ready IoT nodes without the complexities of hardware design. With the RAK4630 module for Amazon Sidewalk, RAKwireless is offering a unique solution that facilitates the transition from a mere idea to a tangible, operational device.

Manufacturers can effortlessly integrate the RAK4630 module into their devices, ensuring compatibility with the Amazon Sidewalk network. 

“RAKwireless is committed to supporting device manufacturers by providing a comprehensive suite of services, including antenna design and manufacturing,” says Ken Yu, Founder and CEO of RAKwireless. “Our vision is to provide a holistic solution for manufacturers. We don't just stop at module design. Our goal is to ensure cost-effective devices with a swift time-to-market for our partners.”

RAKwireless also introduced the Starter Kit for Amazon Sidewalk, complemented by the RAK4630 Evaluation Kit, designed to offer developers a swift and seamless initiation into the Amazon Sidewalk ecosystem. The Starter Kit for Amazon Sidewalk embodies RAKwireless’ commitment to not just provide tools, but also to ensure that developers have the best resources to bring their innovative ideas to life.

For more information about the RAK4630 module for Amazon Sidewalk and the Starter Kit for Amazon Sidewalk, visit RAKwireless.

About RAKwireless

RAKwireless is a leading provider of private network solutions. The global technology company helps businesses scale their IoT solutions, from small-scale projects to enterprise-level deployments.

Visit the RAKwireless website rakwireless.com

Connect with RAKwireless on X twitter.com/RAKwireless 

For more information, contact:

RAKwireless Press

E-mail: press@rakwireless.com

About Amazon Sidewalk

Amazon Sidewalk is an encrypted, free-to-connect community network designed to provide reliable connectivity for billions of devices. Sidewalk now provides coverage to approximately 90% of the US population and supports long-range connected solutions for communities and enterprises. With AWS IoT Core for Amazon Sidewalk, customers can now easily provision, onboard, and monitor their Amazon Sidewalk devices.

Hello RAKstars,

We’re back with a new edition of our biweekly newsletter.

Get the latest updates on RAKwireless, product launches, and real-world IoT solutions in our biweekly bulletin. Don’t miss out on our Black Friday deals and upcoming IoT expos. Stick with us until the end!

Our major update to the flagship firmware, WisGateOS2 2.2.0, is here, setting new benchmarks in the world of gateways for LoRaWAN. From enhanced security with OpenWRT to ChirpStack V4 Integration, the update empowers users with greater flexibility, reliability, and ease of use.

RAKwireless and Blues have partnered to launch Blues.ONE, a comprehensive IoT solution that streamlines the development and deployment of IoT devices. This innovative hardware platform combines global internet connectivity, flexible sensor selection, and seamless cloud integration, making it a powerful tool for IoT device makers, app developers, and DIY gadget enthusiasts.

Join Marc, one of our initial testers for WisDM, as he demos the key features of RAKwireless' #WisDM cloud management platform. From remote access to performance statistics, Marc shares his firsthand insights.

Mark your calendars for Black Friday/Cyber Monday from November 24–28, 2023. We're offering a 10% storewide discount on our advanced IoT solutions. Discover exclusive deals upon check out on November 24.

Join us at the IoT Tech Expo Global in Olympia London, UK, this 30th November - 1st December. Our product experts, Xose Pérez and Gavin Brown, will be at Booth #251 to showcase our advanced networking solutions. Learn from industry experts about cutting-edge technologies and key topics like Data Analytics and IIoT. Connect with tech leaders, innovators, and IT Directors. General registration is free! For premium passes, use our VIP code VIPEU25 for a 25% discount.

On our recent trip to Japan for the LoRaWAN Tokyo Live event, we explored cities like Kyoto and Osaka. What stood out? The integration of IoT in everyday life. We witnessed smart buildings harnessing solar energy, reducing CO2 emissions, and showcasing the potential of IoT in real-world applications. These glimpses into real projects serve as inspiration for IoT developers, emphasizing the tangible impact of their work.

Power outages can be unpredictable and potentially damaging, especially when your gateway is in the middle of crucial operations. How do you ensure your gateway remains operational during sudden power interruptions? How do you elevate your gateway installation to an enterprise-grade level?

Our answer: The new Battery Backup UPS. Designed for both DC and PoE power inputs, it offers:

• Seamless transition to backup power during outages.
• Compatibility with a range of gateway models.
• Extended operational time, ensuring data integrity and continuous transmission.

Introducing the IoT Development Kit, exclusively powered by WisBlock. This toolkit is a solution-oriented experience tailored for developers. With its modular design, the kit encompasses a diverse range of sensors, connectivity modules, power options, and enclosures. This allows developers to not only customize their projects but also adapt them to specific real-world needs and innovative ideas.

Why choose the IoT Development Kit?

• Solution-Oriented: Don't just experiment or prototype. Dive into real-life challenges and find solutions with kits tailored for specific applications.
• Modular Flexibility: With WisBlock at its core, enjoy the freedom to mix and match components, ensuring your project is as unique as your idea.
• Quick Start: Whether you're looking to monitor environmental changes, track assets, or enhance home security, these kits are designed to get you started immediately, focusing on real-life applications.

Kits include:

• Environmental Sensor Kit
• Agriculture Sensors Kit
• Movement Detection Sensors Kit

For a limited time, purchase any kit and receive the WisBlock E-Book for free! This guide will help you kickstart your journey with WisBlock, ensuring you make the most of your chosen kit.

Stay connected for more updates, and as always, share your RAKwireless experiences with us. Until next time!

Every story has its beginning, and this one starts in the tech corridors of Europe. It was late 2022, transitioning into the early days of 2023. As I traveled across the continent, engaging with RAKwireless customers, distributors, and developers, I could feel the palpable wave of change on the horizon.

During my meetings, a common sentiment echoed: the rising popularity of NB-IoT in Europe. Many carriers were starting to advocate for this application. Developers, particularly those in the agriculture sector, were keen on utilizing cellular, and there was a growing demand for a seamless combination of cellular and LoRaWAN®. However, it wasn't as easy as flipping a switch. They voiced three distinct challenges:

1. Desire for a Universal Cellular IoT Module: Developers expected a single module to support global bands.
2. Diverse Connectivity Modes: Whether it's LTE-M, NB-IoT, or GSM, developers need a cellular module that could transition across these modes effortlessly. Even in regions like Africa, where NB-IoT was yet to gain traction, there was a demand for devices compatible with GSM.
3. User-Friendly Modules: Larger module companies, in their drive to reduce costs and maintain large volume supplies, often overlooked the user experience. Developers grappled with complex AT command sequences and multiple configurations tailored to individual cellular providers.

In a serendipitous turn of events, I met Brandon from Blues at the IoT Stars Panel during the 2023 Embedded World event in Nuremberg, Germany. Our conversation led to the revelation that Blues was exactly what we needed. Blues specialized in creating easy-to-use cellular modules encompassing the features that were sought after in the ideal IoT cellular module. The match felt almost destined.

I told Brandon about the WisBlock system, a commercial-style modular IoT ecosystem that ranges from sensors and computing to enclosures. This easy-to-code modular IoT system combined with Blues' advanced cellular module, could truly make our shared vision a reality.

While WisBlock was revolutionizing the modular IoT space, Blues was taking strides of their own. They weren’t just building sophisticated modules; they were actively fueling the developer community's dreams. With their newly launched Accelerator program, Blues aims to be the wind beneath the wings of budding innovators. The program provided fully documented reference applications, ensuring that developers had a clear pathway from ideation to creation. They were given the blueprints to assemble Notecard- and Notehub-powered solutions seamlessly.

Integrating WisBlock with Accelerator Applications

By merging the strengths of both our ecosystems, developers not only had a roadmap but a superhighway! WisBlock’s versatility meant that these reference applications could be implemented with a cleaner setup, lesser complexity, and even greater efficiency. The combined offering meant developers didn’t just have tools; they had a complete toolbox. We saw a future where developers would be handed the toolbox to transform their innovative ideas into scalable and commercial products.

Moreover, the increasing interest in combining LoRaWAN and cellular has opened a new realm of possibilities. I've mentioned the potential of hybrid connectivity in my previous blogs, and its ability to foster innovation is evident. Consider these use-cases:

• Use Case 1: Establishing LoRaWAN as the primary connectivity mode and Cellular NB-IoT as secondary or vice versa offers unparalleled flexibility in device communication.
• Use Case 2: Using Cellular as a backhaul and leveraging LoRa for peer-to-peer wake-up calls for devices can redefine IoT communication dynamics.
• Use Case 3: In scenarios where equipping every device with a cellular modem becomes prohibitively expensive, multiple sensors can share a single cellular modem by transmitting data using LoRa P2P.

RAKwireless’ partnership with Blues is not just a business collaboration; it's a step forward to redefine the landscape of IoT development. Together, we are poised to make cellular IoT straightforward, efficient, and easily accessible for developers around the globe.

So, if you're a developer looking to transform your innovative ideas into scalable and commercial products, the future is here, and it's exciting!

Stay tuned for more updates, and always remember – innovation is just a module away.

Shenzhen, China, October 26, 2023 — RAKwireless, in partnership with Blues, is excited to introduce Blues.ONE - a comprehensive IoT solution that simplifies the development and deployment of IoT devices. Blues.ONE is not just a product but a complete hardware platform that includes RAK13102 (WisBlock Blues Notecarrier), Blues.IO NoteCard, WisBlock Base Board, and WisBlock Core module.

Blues.ONE is a powerful tool for IoT device makers, industrial machinery experts, GPS-tracking app developers, and DIY gadget enthusiasts. It provides secure, reliable, global internet connectivity via cellular technology and the flexibility to select sensors and industrial interface modules from the WisBlock ecosystem. This makes it easy for developers to build commercial-ready devices with ease.

Revolutionizing IoT Connectivity with Blues.ONE

At the heart of Blues.ONE is the RAK13102 - a module that allows the Blues.IO NoteCard to connect to the WisBlock ecosystem. The RAK13102 is an integral part of the platform and serves as an essential component in simplifying the way IoT devices connect to the internet using cellular technology.

The integration of RAK13102 into Blues.ONE brings two powerful IoT ecosystems together. It not only expands the user base of both Blues and RAK but also offers a more comprehensive IoT solution.

Brandon Satrom, Blues' VP of Developer Experience & Engineering, underscores the pivotal role this new offering will play. He states, "Blues.ONE is set to make a significant impact on engineers building IoT products. Powered by the Blues Notecard, Blues.ONE makes it easier than ever for developers to build for cellular using bundled coverage and data in over 139 countries and a JSON-based programming model that eliminates the need for engineers to compose AT commands or write complex firmware to manage a modem. When matched with the unique modularity of the WisBlock ecosystem, Blues.ONE will accelerate product builders everywhere."

Simplifying IoT Development

So, how does Blues.ONE simplify IoT development and deployment?

• Partnership between RAK and Blues: The collaboration brings together the best of both worlds, offering a comprehensive IoT solution that simplifies IoT development.
• Worldwide Connectivity: With the Blues NoteCard, WisBlock can now connect globally without the need for multiple IoT SIM cards. A single setup works for any region, eliminating the need for complex AT commands and multiple configurations.
• Simplified Set-Up: Blues.ONE comes with pre-assembled and pre-flashed options for quick deployment, making the setup process easier than ever.
• Versatile Connectivity: Blues.ONE uses cellular connection as a primary or backup to LoRaWAN®, ensuring uninterrupted data flow.
• Seamless Integration: With the Blues.IO ecosystem, WisBlock can connect to the cloud effortlessly, leveraging tools like MQTT, Datacake visualizations, and webhooks.
• Multiple Protocols: Blues.ONE enables the creation of IoT devices that can automatically switch between LoRaWAN and cellular data transmission, depending on the available connectivity.
• One Cellular Module with Worldwide Coverage: The RAK13102 module provides worldwide coverage, supporting LTE-M, NB-IoT, and GSM networks with a single module. There's no need to set up different modules for different cellular network providers.
• Low-Cost Cellular Usage: While the free 500MB cellular data is provided by Blues.IO, it makes cellular usage cost-effective for projects with data transfer requirements.

A Fruitful Partnership between RAK and Blues

Blues.ONE offers a comprehensive and simplified approach to IoT development. It provides worldwide connectivity, versatile connectivity options, and seamless integration with the Blues.IO Ecosystem.

"Blues' Notecard and RAKwireless' WisBlock solutions offer a simplified and seamless IoT connectivity solution that bypasses traditional complexities. This partnership accelerates prototyping and provides users with a holistic solution that enables transition across regions without any issues. The adaptability of Blues eSIM technology and the assurance of backup connectivity ensures that our users can experience uninterrupted IoT connectivity. This partnership brings immense value to RAKwireless and our end-users," says Ken Yu, CEO of RAKwireless.

Whether you're building apps for GPS tracking, controlling industrial machinery, or creating custom IoT solutions, Blues.ONE has got you covered.

Visit our store today to learn more and buy your device.

About RAKwireless

RAKwireless is a multinational technology company established in June 2014 and is based in Shenzhen, China. It is changing the IoT landscape by eliminating design complexity and accelerating time-to-market for underserved and emerging markets, including open-source and industrial communities. Creating easy-to-deploy solutions and modular IoT products, RAKwireless is working to grow a community of system integrators, developers, and IoT solution providers who are passionate about taking IoT solutions further than ever before.

For more information, contact us at press@rakwireless.com.

About Blues

Blues Wireless is an innovation-driven company that makes IoT connectivity effortless for organizations of all sizes. Their mission is to empower individuals and businesses to make a positive impact through their reliable, innovative connectivity solutions. With their flagship products, Notecard and Notehub, they simplify the complexities of IoT connectivity, enabling secure cloud connection for any physical product. Leading their team is CEO Ray Ozzie, a software entrepreneur with a rich history in communications software and infrastructure. Blues is proud to have a 100% Developer Happiness Score and serve over 800 customers across 137 countries.

Today, we're thrilled to unveil the highly anticipated major update to our flagship firmware, WisGateOS2 2.2.0. This release is not just a standard update; it brings transformative changes and improvements that set new standards in the world of LoRaWAN gateways. We encourage you to read carefully.

Dive Into New Horizons

Upgraded OpenWRT for Enhanced Security and Reliability

The heart of our upgrade lies in the OpenWRT update to version 2102, which fortifies system defenses and streamlines operations.

Security is paramount in the IoT landscape. This move not only ensures that the system remains secure but also enhances its overall reliability. OpenWRT is renowned for its flexibility and security, making it a vital component of the WisGateOS2 platform.

Open SDK Coming Soon

Take advantage of the forthcoming open SDK, which will enable you to customize and integrate the system more effectively, tailoring it to your specific needs.

The latest WisGateOS2 SDK will be available upon request for developers and solution providers, offering endless opportunities for customization and integration into new and existing systems.

The year's end will also see the availability of an Extension SDK, providing an easy and user-friendly method to add custom features and functionality (extensions) to your system.

Extensions

Digital Signature Verification - In our relentless pursuit of security, we've revamped our online extension with signature verification.

This means that all extensions for WisGateOS2 2.2.x are digitally signed, assuring the authenticity of the extensions you're using. This measure is essential for safeguarding your gateway against potential threats or malicious extensions. Only trusted source extensions will be available.

An approved extension gallery is now directly accessible in the Web UI; it offers customization in catalog form with auto-update. Only extensions compatible with your exact gateway model will be available for installation.

Chinese Language GUI Support

Embracing our global user base, we've incorporated support for the Chinese language into the graphical user interface (GUI).

This move caters to a broader user base and makes it easier for Chinese-speaking users to manage their gateways efficiently.

User-Friendly Enhancements

From displaying syslogs sequentially for downloads to supporting spaces in ESSID and TDOA in UI, we've fine-tuned user interactions for superior ease of use.

We have added fake GPS options next to the Fine timestamp (Time Difference of Arrival or TDOA) for simulating GPS in use cases where the gateway doesn't have actual GPS, or the service is unavailable.

TDOA is a valuable technique for geolocation in IoT applications. This update introduces TDOA support in the gateway user interface, empowering users with the ability to leverage this location-based service for their IoT deployments.

In response to user feedback, the WisGateOS2 Firmware 2.2.0 update provides a more convenient way to access and analyze system logs. Users can now view and download syslog entries in sequence directly from the gateway's user interface. This feature streamlines troubleshooting and simplifies the process of identifying and resolving issues.

ChirpStack V4 Integration

The integration of ChirpStack V4 MQTT Bridge is a testament to our commitment to staying at the forefront of technology.

We support the implementation of the latest open-source LoRaWAN network server, so our products are up to date with the trends and services. This feature enhances interoperability and connectivity options for users, allowing them to seamlessly integrate their gateways with the latest ChirpStack-based networks.

Bugs? What Bugs?

Our development team has worked tirelessly to eliminate lingering bugs. Whether it was the slow loading of the gateway overview page in the absence of a 4G module or nuances with frequency assignments, our latest version ensures a seamless and enhanced user experience. For specific information, you can check the official Release Note.

The new firmware is now available for download and also for utilization in WisDM.

Important Advisory Before Updating

You might be eager to dive into the new features and explore the possibilities, but we urge all our users to approach this update with care. Please take note:

• Once you transition to WisGateOS2 2.2.0, you won't be able to downgrade to any previous versions via WisDM or the local Web UI. However, if it comes to that, we have you covered, contact us.
• We've integrated advanced security protocols, and all extensions for this version are digitally signed. Expect your extensions to auto-update during this upgrade.
• A special note to our WireGuard Extension users: Please contact our RAK support team before initiating the update to ensure a smooth transition.

In all seriousness, the WisGateOS2 Firmware 2.2.0 update is a significant milestone in the evolution of our WisGate Edge gateways. It is a big step with notable implications for any system that is being updated so don’t take it lightly.

With enhanced security, new features, and crucial bug fixes, this release is designed to empower users with greater flexibility, reliability, and ease of use. By keeping your firmware up to date, you're not only staying ahead of potential security threats but also ensuring that your IoT deployments continue to run smoothly.

To learn more about this update, visit the RAK support page and explore the full release notes. Don't miss out on these exciting improvements that can take your IoT deployments to the next level.

Welcome back to another edition of our biweekly digest, filled with exciting updates, event recaps, and more. Let's get started!

2.4 GHz LoRa News: ChirpStack Support

We're excited to announce that the 2.4 GHz LoRa module is now supported by ChirpStack! This integration further solidifies the potential of 2.4 GHz LoRa in the IoT landscape.

2.4 GHz LoRa News: Join the 2.4 GHz LoRa Workshop at The Things Conference

We invite developers to explore the future of 2.4 GHz LoRa with us. Experience the ease of deploying global IoT solutions using 2.4 GHz LoRa (RAK5148 concentrator) and bypass the complexities of various LoRaWAN regional bands. Don't miss our live demo of the 2.4 GHz LoRa Application at TheThingsConference 2023.

Delve into the dynamic activities of RAKwireless in Latin America:

Facility Visit in Brazil

Experience an actual installation with RAK7289V2 WisGate Edge Pro.

RAK3172 WisDuo LPWAN Module Approval

Celebrate with us as RAK3172 gets the green light to operate on the Everynet/ATC network in Brazil!

LoRaWAN at Solar Fair

Discover the the game-changing potential of RAK7240 WisGate Edge Prime showcased by a professional industrial branding company.

Engaging Visits

From customers to incubation centers, we're making IoT exploration accessible to all. Big thanks to friends and partners, including Constanta, TecSUS, BrDot, Zona Industrial, ChirpStack, and more. Together, we’re making LoRa accessible for everyone.

Exploring Connectivity Options for Your Gateway

Connecting your gateway to different platforms comes with a variety of options. Here, we showcase two such possibilities for your consideration.

ThingsBoard with HTTP Integration via WisGate Edge V2's network server: Visualize your end devices data in ThingsBoard with WisGate Edge V2's network server & HTTP integration.

ThingsBoard with the MQTT Broker via WisGate Edge V2's network server: Visualize your end device’s data in ThingsBoard with the WisGate Edge V2 Built-In network server and external MQTT Broker.

Connect your RAK Indoor & Outdoor LoRaWAN Gateway with WisGateOS 2 to TTN via the CUPS server.

Gain insights on your gateways' performance and troubleshoot effectively with WisDM.

Real IoT Solution

Discover our dedication to providing genuine IoT solutions that make a difference. Find out how we're leading the way in simplifying IoT adoption.

Stay tuned for more updates, and don't forget to share your RAKwireless experiences with us. Until next time!

Best,

The RAKwireless Team

In the heart of Malaysia, a high-tech revolution is quietly unfolding. The traditional farming landscape is being reshaped by the power of the Internet of Things (IoT), with Sustainable Hrvest Sdn Bhd (SH) leading the charge. This innovative company is harnessing the capabilities of LoRaWAN and data analytics to revolutionize the cultivation of durian, one of the country's most cherished fruits.

Revolutionizing Farming with IoT: SH's Innovative Approach

SH's team, composed of experts in cloud computing, software, and connectivity, does not come from a farming background. This might seem like a disadvantage, but it's actually their strength. They approach farming from a fresh perspective, focusing on how technology can be used to enhance agricultural practices. They understand that the value of IoT in farming isn't just about return on investment (ROI) but also about the ability to analyze and utilize data to improve Standard Operating Procedures (SOPs).

Han Wei, SH's founder, is a respected figure in the high-tech space. Before venturing into durian farming, he gained valuable experience in IoT farming with chili peppers. His reputation is such that he was invited to the Hong Kong IPO event of Alibaba, one of the world's largest e-commerce companies, where he had the honor of striking the bell.

The Role of RAKwireless Gateway in SH's Smart Farming Solution

Under Han Wei's leadership, SH has developed a smart farming solution that leverages our WisGate Edge Pro (RAK7289V2). LoRa-enabled sensors are deployed across durian farms in Malaysia, collecting real-time data on various aspects of the farm, such as soil moisture levels, nutrient content, and irrigation system performance. This data is then analyzed and presented on a user-friendly dashboard, giving farmers a comprehensive view of their farm's health and enabling them to quickly respond to any issues.

Choosing the right gateway was a critical decision for SH. After testing multiple options, they found that the RAKwireless gateway stood out in terms of quality, ease of use, range, and cost.

In the humid climate of Malaysia, the durability of the gateway is paramount, and the RAK7289V2's robust material rating ensures it can withstand the elements. Its impressive range and RF performance, coupled with a battery backup system, ensure a stable and reliable connection, which is crucial in preventing potential losses in farming.

Moreover, the ease of configuration of the RAK7289V2 gateway means faster deployment times, saving costs for the end customer. And speaking of cost, the affordability of the RAKwireless gateway is a significant factor in making IoT accessible to more farmers. This helps them manage their farms more efficiently based on data.

The impact of this technology on durian farming in Malaysia has been profound. Farmers now have real-time visibility into the health of their farms at every stage of the growth cycle, from pre-harvest to post-harvest. This has not only made their lives easier but also improved their bottom line.

Conclusion

SH's approach to durian farming in Malaysia exemplifies the transformative potential of IoT in agriculture. By focusing on data analysis and choosing the right technology, they are helping to create a more sustainable and productive future for farming in Malaysia. This is a clear demonstration of why IoT is challenging – it requires smart people, a deep understanding of the vertical, and the right technology. But when these elements come together, the results can be truly revolutionary.

Han Wei will have a speech at the event where you can learn more about SH's approach. Don't miss this opportunity to witness the company's groundbreaking speech firsthand and discover how it can revolutionize farming practices in Malaysia.

To secure your spot at the event and enjoy a 20% discount on sign-ups, use code LoRaWAN-TOK20. Register now at LoRaWAN Live Tokyo Registration.

LoRaWAN® (and LoRa) is the LPWA network of choice for many people these days. There are several reasons for this, but a key one is the ability to deploy your own private network with LoRa, eliminating dependencies on external operators. You can deploy your sensors, your gateways, and even host your own LoRaWAN® Network Server using any of the different open-source options available, or use a third-party SaaS solution. Regardless of the option you choose, whether you're an individual or a large company, gateway management is a topic in its own right. Mainly because there is no standard. Yet.

There are already several non-standard options available. Some gateway manufacturers offer their own solution, compatible with their gateways, like we do at RAKwireless. You can use WisDM to manage all WisGate Edge gateways (indoors and outdoors).

Some platforms offer an "agent" that you need to install on the gateway to connect to their management solutions. These solutions are usually poorly maintained, focusing on specific brands and even specific firmware versions (sometimes you have to downgrade the firmware to install the agent!).

Then there are some third-party generic options, but they require a specific OS installed on the gateway. This is only possible with a small subset of gateways and almost never with "commercial" gateways. Keep in mind that the "job" of a LoRaWAN® gateway is very simple, so they are usually very resource-limited and, besides legal or warranty considerations, replacing the OS is not even technically feasible most of the time. Our WisGate Connect is one of these platforms where you have considerable flexibility: VPN, custom OS, or simply good old SSH.

Of course, you can always manage the gateways individually, usually by providing SSH access to it. And the first thing that should come to your mind now is "security." Indeed, all fleet management solutions I know use some kind of VPN tunnel between the gateway and the server to secure communications. You don't need any special port open on the gateway to manage it since the tunnel is opened from the gateway outwards. You might need to have other ports open for the LNS, but that's not related to gateway management.

Unlike with SSH, VPN connections are "alive" at all times, meaning there is a cost in bandwidth even when you're not actively using the gateway. On the other hand, to SSH into the gateway, you need to have an open port on the device and probably forwarded on any router along its path. This presents a security risk and a maintenance cost.

Unless the gateway initiates the communication itself, but then the question is: where should it connect to? And when?

A Tunnel Inside a Tunnel

A reverse SSH tunnel is a well-known method for connecting two machines when NAT or firewall limitations exist. This process often involves a third server, typically located in the DMZ, serving as a stepping stone to jump from the client to the target device.

On the destination device (let's call it "device"), you open an SSH connection to the rendezvous server, forwarding a remote port to the local port 22/tcp (or wherever the sshd daemon is listening). Then, on the second machine (let's refer to this as "client"), you SSH into the rendezvous server and, from there, you SSH into the "device" using the same tunnel initially opened from the device to the rendezvous server.

Or from the terminal (port 58022/tcp on the rendezvous server forwards traffic to 22/tcp on the device):

Now from the client machine (connect to the remote device using the rendezvous as a stepping stone):

While this is advantageous, it's also complex for many people and requires several hidden steps:

• Shared keys exist between all three servers, so passwords aren't required (SSHing to a server with a password is generally considered poor security practice).
• The connection must be initiated from both sides: first from the device to the rendezvous server, and second from the client to the device via the rendezvous server.
• You need to know the IP of the rendezvous server and the port it uses to forward traffic to the device.
• The initial connection with the reverse forward must remain active at all times, so you can always SSH into the device from outside.

Even though this method is useful for some use cases, it's hard to automate, and the initial connection still requires someone inside. Additionally, anyone with access to your rendezvous server will also have access to your gateway.

So, does this lead to a dead-end road?

SSH No Ports

After all this complexity, there's good news: there is indeed a secure, remote, and straightforward way to achieve this!

Atsign is a globally distributed company offering networking tools. One of its projects is SSH No Ports, a connectivity solution with some unique features:

• A directory server (atDirectory) replaces ever-changing IPs with simple, unique device names known as atSigns.
• The tunnels are only active as needed, with the device primarily waiting for a request that the directory server has previously validated.
• A rendezvous server (Socket Rendezvous or SR) opens two single-use sockets, creating isolated secure tunnels from the client to the device.
• Two initial tunnels connect both machines to the rendezvous server upon request. The keys used for these tunnels are single-use and generated on-the-fly.

This entire process adheres to a Zero Trust Policy, securing your data end-to-end with keys stored only on your device and your client.

Atsign offers this service as SaaS with an annual fee covering one person and unlimited devices. For those who prefer a hands-on approach, they also provide all the components as Open Source code under the BSD-3-Clause license on the Atsign Foundation GitHub account. This allows you to host your own rendezvous server or atDirectory server, or both!

Deploying the Service

The procedure isn't complex but does require a few steps, only the first time around. You can find instructions directly in Atsign's Installation Guide. The guide covers the following steps:

1. Dependencies (primarily curl and sshd on both the device and client)
2. Obtaining the addresses (atSigns) for your device and client
3. Setting up both the device and client
4. Activating the addresses (a manual email validation is required for security)
5. Connecting!

Since I'm a fan of Docker, I'm going to execute steps 3 to 5 on the device using Docker for easier deployment. Atsign also provides a Docker image, and the latest 4.0 version (still in RC at the time of this writing) simplifies configuration using a docker-compose.yml file, an .envfile for configuration variables, and key files for each device. The client side follows the same procedure as described above. On the device side (your gateway), you will have these files:

workspace

|-- .keys
|   |-- @client_key.atKeys
|   |-- @device_key.atKeys
|-- .env
|-- docker-compose.yml

The *.atKeys files in the .keys folder hold the keys for the client and the device. You can obtain these from the noport site. The .env file contains the common configuration: the addresses of the client and device on the Atsign ecosystem, the device name, and the CRAM key for atSign activation. You can also get this from the noport site.

TO='@device'
TO_CRAM=09a....39a0
DEVICE='mygateway'
FROM='@client'

The docker-compose.yml file starts the activation service first and later the sshnpd service, which connects to the atDirectory, waiting for incoming connection requests.

version: '3.7'

services:

  activate:
    image: atsigncompany/activate_sshnpd:latest
    volumes:
      - ./.keys/:/atsign/.atsign/keys
    command: -a "${TO}" -c "${TO_CRAM}"

  sshnpd:
    image: atsigncompany/sshnpd
    container_name: sshnpd
    restart: unless-stopped
    volumes:
      - ./.keys/:/atsign/.atsign/keys
    command: -a "${TO}" -m "${FROM}" -d "${DEVICE}" -s -u -v
    depends_on:
      activate:
        condition: service_completed_successfully

As you can see, both the activate and sshnpd services share the same configuration variables, loaded by default from the .env file. The activate service will first attempt to activate the device key using the CRAM key (this bypasses manual validation, so use with caution), and the sshnpd service stays in the background waiting for requests. Since the service is set to restart unless stopped, it will automatically start with Docker after a reboot.

Finally, you just have to enter:

and you're done. Now, provided you've set up your client machine, you can connect to the device from your workstation (client) with a simple:

I recommend manually activating the atSign and removing the activate service in the docker-compose.yml file, along with the dependency on the sshnpd service.

If you're not comfortable with the terminal, you can run the same Docker compose configuration using Portainer (remember, just type `portainer up` on your RAKPiOS system to install the latest version).

When using Docker, the connection is established to the Docker container. You'll still need to jump to the host from there.

Zero Trust Policy

You might be thinking, "I see, so I'm securing my gateway by trusting a third party. That doesn't sound like security to me." That's a valid concern. However, let's take a closer look into the various components of this solution.

Your gateway (the device) and your workstation (the client) are under your control, and the software you run on them is open source. You can review it, and even build it yourself. This software connects to the directory server to retrieve the addresses of the rendezvous machine, the port it needs to connect to for the tunnel, and the keys to create the tunnels to the rendezvous server. Your workstation initiates the encrypted communication using your own keys, which aren't shared.

Next, there's the rendezvous server. Think of it as a modern version of a telecommunications switchboard, responsible for correctly wiring the different connections. It doesn't know who is calling; it merely knows which ports need to be connected. The communication itself is encrypted with keys unknown to the rendezvous server. If you prefer, you can host your own rendezvous server.

Lastly, there's the Directory server. This component stores the atSigns of all the machines in the system and validates requests. When a request is validated (meaning machine A has permission to connect to machine B), it informs both parties about the rendezvous server address and the ports they need to connect to. And guess what? You can host this service yourself, too.

So, depending on your security requirements, you have several options to consider.

Fleet Management

One final note: managing a single gateway is not the same as fleet management. When you have more than a few gateways, managing them individually can become a significant challenge. I've been informed that a "configuration management" feature is on the roadmap, which could help manage gateways in sets. However, even without this feature, there are other options available, such as Ansible. Perhaps it's worth exploring? Any takers?

At RAKwireless, we are more than just a company - we are a community.

We are firm believers in the power of collective innovation and are dedicated to cultivating an environment where ideas can flourish and solutions can be co-created.

Our decision to open-source the RAK Sticker Tracker (RAK2270) is a testament to this commitment.

A bit about the RAK Sticker Tracker: This sleek, label-like tracker for LoRaWAN® is designed for easy attachment to any product. It also provides real-time location tracking through the advanced features of the Helium network server.

Why We Chose Open Source for RAK2270 LoRaWAN® Sticker

Open-sourcing the RAK2270 isn't just about transparency; it's about creating a space for innovation. Here are just a few reasons why we chose to go the open-source route:

• Unleashing Creative Applications: The RAK2270 isn't just a tracker; it's a canvas for innovation. By open-sourcing, we're inviting developers to imagine and implement novel applications for sticker-based tracking that we haven't even thought of yet.
• Transparency for Delicate Use Cases: Given that the RAK2270 can be used in sensitive scenarios like vaccine distribution or high-end product tracking, transparency in how it operates is paramount. Open sourcing ensures that stakeholders can verify its reliability and security for themselves.
• Harnessing Global Expertise: The LoRaWAN® community is vast and diverse. By open-sourcing the RAK2270, we tap into the expertise of developers from different regions, understanding the unique tracking challenges they face and collaboratively refining the sticker to meet global needs.
• Rapid Evolution for a Dynamic World: The world of asset tracking is evolving rapidly, with new challenges emerging daily. An open-source RAK2270 means that improvements can be crowdsourced, ensuring that the sticker remains at the cutting edge of both technology and application.

Benefits of Joining Our Journey

By joining our open-source journey, you're not just accessing cutting-edge innovations; you're becoming part of a collaborative and vibrant community. Here's what you can expect:

• Access to Cutting-Edge Innovations: Be the first to know about updates, new features, and improvements to the RAK2270 and other RAKwireless products.
• Collaborative Environment: Engage with a community of like-minded developers, share ideas, and get feedback on your projects.
• Exclusive Workshops and Webinars: Learn from experts, participate in hands-on sessions, and enhance your skills.
• Opportunities for Recognition: Showcase your contributions, get featured on our platform, and gain recognition in the global developer community.

How You Can Contribute

Your contribution is what makes our open-source community thrive. There are several ways you can contribute to the RAK2270 project:

• Code Contributions: Enhance functionalities, fix bugs, or add new features to the RAK2270 firmware.
• Documentation: Help in improving guides, tutorials, and API documentation for better user understanding.
• Community Support: Engage in community forums, answer queries, and assist new members in getting started.
• Share Use Cases: Have an innovative application or use case for the RAK2270? Share it with the community and inspire others.

Get Started

Ready to be a part of this exciting journey? Here's how you can dive in: