VDI stays on its ISP path when another link dies.

Forwarding runs in the Linux kernel. Live sessions keep their mark. New work follows the healthy ISP. Built for office VDI at the LAN edge.

The promise

Office stays online. Dashboard can wait.

AE-200 sits between your LAN and your ISPs. It is not a VDI broker and not a cloud SD-WAN rewrite.

Sticky dual-WANCONNMARK affinity. Live flows stay put. New sessions follow quality probes.
Real perimeternftables firewall, anti-spoof, Suricata IDS. Empty charts stay empty until LIVE.
MFA consoleHTTPS portal with roles, lockout, TOTP, and one-time recovery keys.

Dual path

When a WAN flaps, established VDI sessions drain on their mark. New desks shift to a healthy link. No mid-call ISP hop.

Stop the Python UI. nftables and policy routing still carry browse and VDI. Internet does not wait on the dashboard.

Tuned for SMB and SME edges. Headcount is proven on a pilot floor, not printed as a brochure ceiling.

Explore the product

Feature surface, packet path, security posture, and plain specs with clear outs.

Sticky WAN, Balanced/Strict firewall, Suricata, MFA, QoS, USB backup, LIVE NOC.

LAN to vdi_fw to sticky vdi_wan to ISP links. Router first. NOC second.

LAN-only portal, locked-down change APIs, MFA, anti-spoof CPE exempt, posture grade.

What ships on day one. What AE-200 refuses to pretend it is.

Operations

No invented SLA tiles. History fills after the appliance is LIVE and writing JSONL.

Pilot

Bring ISP gateways and a pilot desk. Install, verify, prove two PCs, then flip office DHCP when you are ready.