A DIY, low-cost data diode for ICS. This has been migrated to python3 and has been modernized with setup scripts and systemd units to run on startup.
This project aims at creating a working data diode for a fraction of the price of the commercial ones.
There are two versions of hardware targeted by DYODE:
- DYODE full : a 19" rack-sized data diode
/dyodev1.jpg)
- DYODE light : a very compact and ultra low-cost version with performance limitations
/dyode_v2_final.JPG)
This fork runs on Python 3.11+ (the original code was Python 2). What changed, and how to deploy it, is in PYTHON3_MIGRATION.md. Known limitations and hardware-specific issues are in CAVEATS.md.
To configure a box, run the setup wizard from this folder:
bash ./install.shIt detects your network interfaces, writes the MAC addresses into config.yaml
for you, and can generate a systemd service, plus logging units for detailed diode activity log management.
For detailed information, including steps to make your own, take a look at the wiki. You may also take a look at the public talks done on this project.
The DYODE project is composed of 3 main parts:
- An INPUT counter
- A unidirectional, light-based data transfer mechanism
- An OUTPUT counter
The full version relies on optical-copper converters to transmit data, while the light version uses an optocoupler.
Hardware for DYODE light is open-source: PCB Gerber files are provided, as well as .stl files to 3D print the case.
DYODE is an open-source project developed in Python.
Features
- Modbus data transfer
- File transfer (DYODE full only)
- Screen sharing (DYODE full only)
- Log streaming: syslog and log files to a SIEM (DYODE full only, see LOG_STREAMING.md)
This project is published under GPLv3. Take a look at the full license.