TilliT Edge

TilliT Edge software

TilliT uses a specialised Internet of Things (IoT) device called TilliT Edge to establish a digital connection between your equipment and operators. TilliT Edge is highly versatile, allowing for seamless integration with various devices, including SCADA systems, PLCs, or wireless counters, making it effortless to install in any production environment without complexity.

TilliT Edge is shipped ready to be integrated into your facility, without the need for coding or engineering. It supports a wide range of protocols, including OPC-UA, Ethernet/IP, Profinet, and Modbus.

TilliT Edge Device

TilliT Edge can be installed two different ways.

We suggest to involve the relevant personnel within your company to make the appropriate choice for your existing systems

Using Edge Device

You will receive a physical device with the preloaded TilliT Edge software. This device is specifically selected to be placed on the production floor, inside a control cabinet, and uses two network interfaces to separate your business and automation network. Choose this option if you require direct connection to PLC's. This setup will require an electrician to install the device.

Description	Requirement
Internet Connectivity	Yes (Static or DHCP)
Automation Network Connectivity	Yes (Static or DHCP)
Up/Down Bandwidth Min	5mpbs
Up/Down Usage Min	10GB/Month
Ethernet Connectivity	CAT-6E cable (If automation network is isolated from internet, then a cable to each network is required)
Wi-Fi Connection	Optional (requires high signal strength with no drop outs)
4G Connection	Optional (contact if relevant to your installation)
Protocol Support	OPC-UA, MODBUS TCP, Ethernet/IP, Profinet
Power	24V
Mounting	DIN Rail mount
Dimensions	On request (supply constraints mean the device sent may be different)
NTP Service	*.debian.pool.ntp.org (can be changed upon request to connect to a local NTP service)
DNS	8.8.8.8 (can be changed upon request to connect to a local DNS)

If connecting via a Static IP, you need to supply the following information to TilliT to correctly configure the TilliT Edge device for you. Consider the same for a wireless gateway if using.

• IP Address (e.g. 192.168.0.5)

• Default Gateway (e.g. 192.168.0.1)

• Subnet (e.g. 255.255.255.0)

If your network is behind a firewall, you will need to allow the device to reach the following endpoints in addition to the endpoints already stated in Security

Domain Name	Protocol	Ports
raspbian.raspberrypi.org	TCP	80
deb.nodesource.com	TCP	443
*.debian.pool.ntp.org	UDP	123

A comment on *.amazonaws.com. Since AWS utilises microservice and dynamic CDN architecture we connect to multiple amazon endpoints that may change. We also may increase the number of services we utilise. For this reason, we recommend using the *.amazonaws.com

TilliT Edge Device level firewall

All TilliT Edge devices come with an inbuilt firewall service called iptables. It restricts what connections the device is allowed to make. You can see the exact rules that we have setup below. To summarize, the device will never allow an external device to initate a connection, all connections are initiated by the TilliT Edge device.

sudo iptables -P INPUT DROP
sudo iptables -P OUTPUT ACCEPT
sudo iptables -P FORWARD ACCEPT
sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
sudo iptables -A INPUT -s localhost -d localhost -p tcp -j ACCEPT

Using a Virtual Machine

If a physical device is not required, and you are connecting to data sources that are accessible on a network, you can run a Docker instance on a local machine capable of running Linux that you provide. This installation is highly recommended if you have an existing managed IT infrastructure where all data sources are accessible on the network.

Description	Requirement
Internet Connectivity	Yes
Automation Network Connectivity	Yes
Up/Down Bandwidth Min	5mpbs
Up/Down Usage Min	10GB/Month
Protocol Support	OPC-UA, MODBUS TCP, Ethernet/IP, Profinet
Operating System	Ubuntu 22.02 (contact if other is required)
CPU	2xCores@2.8Ghz
RAM	4GB
HDD	20GB (installation size)
Docker Engine	Version 20.10
Docker Compose	Version 2.15.1

If your network is behind a firewall, you will need to allow the device to reach the following endpoints in addition to those already stated in Security

Domain Name	Protocol	Ports
archive.ubuntu.com	TCP	80
deb.nodesource.com	TCP	443
ntp.ubuntu.com	UDP	123
*.docker.io	TCP	443
*.docker.com	TCP	443

With even just a counter, TilliT is able to provide availability and performance metrics to a reporting system via a web portal or via API connection