How TSG Works
The following technical analysis examines the software development practices and network
hardware operations underlying TSG. While detailed, this information is essential for
understanding the system's actual functionality and implementation methods.
TSGX: Geedge’s Integrated Hardware Solution
The Tiangou Security Gateway is primarily marketed as an integrated hardware solution
known as TSGX. Initially, it operated on white-label hardware provided by HP Enterprise
and DELL; however, it now utilizes hardware supplied by the Chinese server manufacturer
Nettrix, which is a spinoff of the supercomputer manufacturer Sugon. Sugon was
sanctioned by the U.S. government for alleged links to the People’s Liberation Arm
Image Caption:
Image of TSG-X on hardware supplied by the
Chinese server manufacturer Nettrix.
Image Caption:
Image of TSG-X on white-label
hardware provided by HP Enterprise.
TSG nodes are designed to be combined into a cluster, with the internet traffic passing
through and being distributed amongst them. Instead of just having one firewall appliance
or two for redundancy, TSG-X is able to scale horizontally and the customer can add
additional nodes. Each node adds more capacity for processing more internet traffic. The
individual nodes are connected together through a network packet broker that load
balances the traffic based on the source and the destination. The network packet brokers
(NPBs) are hardware appliances, and this data indicates that there are deployments where
Geedge has used NPBs from third party vendors like Niagara Networks. Geedge also
provides their own product called Ether Fabric, which is described below.