Tuxera TCP/IP Stack

Key technical features

• Fully MISRA-compliant 

• Supports both IPv4 and IPv6 

• Integrates with both RTOS and non-RTOS based systems 

• Small RAM and ROM footprint 

• High performance 

• Multiple network interfaces support 

• Extensive set of secure protocols and applications 

• Routing module provided 

• Native and Sockets interface support 

• Wide range of TCP and UDP applications 

• Fast/zero copy between network interfaces where common memory pools are defined 

• Mechanisms to ensure authenticity, integrity, and confidentiality between devices in a network 

Tuxera TCP/IP Stack standard modules

MQTT

A small, low-bandwidth networking protocol for connecting remote embedded applications. Tuxera’s MQTT supports versions 3.1.1 and 5.0, runs on our trusted TCP/IP stack, and uses verifiable TLS for secure connections.

NAT

Network Address Translation (NAT) allows an organization to set up a network using private addresses, while still allowing its members to communicate over the public internet. 

SNMP

SNMP module (v2 and v3) enables secure, reliable network management for embedded devices. It lets engineers monitor usage, detect network faults, and configure devices remotely with low overhead and robust fault tolerance. 

Additional modules include:

• Physical: Ethernet low-level drivers, PPP Driver 

• Data link: Ethernet Interface, Serial (PPP) low-level driver 

• Network: ICMP, IGMP, ARP, AutoIP, ICMP, NAT, ND, MLD, IPv4, IPv6 

• Transport: UDP, TCP 

• Session: Sockets 

• Application: DHCP, DNS, FTP, MQTT, NTP, SMTP, SNTP, Telnet, TFTP, SCP 

Network security

Secure communications over networks

Our security applications and protocols give you consistent, secure data sharing between embedded devices: 

EAP

Extensible Authentication Protocol (EAP) supports secure connections with multiple EAT types like EAPOL, EAP-TLS, EAP-IKEv2, and EAP-MD5, and can easily be extended for others. 

EST-CoAP

Enrollment over Secure Transport (EST) handles secure certificate enrollment for Internet of Things (IoT) devices, using the Constrained Application Protocol (CoAP) instead of HTTP—ideal for low-resource environments. 

HTTPS Secure Server, HTTPS Secure Client

Our flexible web server solution for embedded systems lets you create dynamic content in a secure environment. It uses the client/server model with HTTPS, where a web browser acts as the client and an application as the server. Tuxera’s Transport Layer Security (TLS) module ensures secure operations, with resources located using Uniform Resource Identifiers (URIs). 

IPsec and IKEv2

Our IPsec module ensures integrity, confidentiality, and authentication between devices in a network, using Internet Key Exchange (IKEv2) to establish security associations. Like other components of the Tuxera TCP/IP Stack, our IPsec and IKEv2 modules undergo a rigorous development process to guarantee reliability and security. 

MACsec

Media Access Control Security (MACsec) secures point-to-point or shared Ethernet links, ensuring data confidentiality, integrity, and authenticity. Our MACsec implementation is platform-independent, integrates with both RTOS and non-RTOS systems, and comes with tested reference drivers and full documentation. 

SSH (SCP, SFTP)

Tuxera’s optimized Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) modules provide secure network communication for embedded devices, supporting TLS 1.2, 1.3, and DTLS 1.2, 1.3 over TCP/IP and UDP protocols. 

TLS/DTLS

Tuxera’s optimized Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) modules provide secure network communication for embedded devices, supporting TLS 1.2, 1.3, and DTLS 1.2, 1.3 over TCP/IP and UDP protocols.

Encryption add-on

Tuxera CryptoCore™ module for encryption over networks 

The Tuxera CryptoCore™ module is an add-on to the TCP/IP Stack, securing embedded systems with multiple encryption and hash algorithms. It accelerates development while protecting data on flash or during transmission. CryptoCore follows a formal verification process and includes a MISRA compliance report, supporting AES, 3DES, DSS, ECC, EDH, MD5, RSA, SHA, and Tiger algorithms.