HAMR-FORGE, LLC  ·  FORGE OS

Connectivity that survives the edge.

FORGE OS bonds every available link — Starlink, LTE, fiber, GEO sat — into one encrypted, self-healing connection your field teams run and your NOC can trust.

Book a pilot See how it works Datasheet (PDF)

        
        Resilient  ·  Encrypted end to end
Runs without a network engineer

      Built for
      First responders·
      Critical infrastructure·
      State & local gov·
      Expedition & maritime
    

Why FORGE

Three problems the edge always hits — and how FORGE answers each.

01 / Resiliency

Links fail. The connection doesn't.

FORGE OS bonds every uplink into one pipe — not just for resiliency, but capacity too. It degrades gracefully instead of dropping, and fine-tuned scheduling keeps lossy satellite links usable where ordinary TCP collapses. A single link can fail and your TCP session stays up, completely uninterrupted.

02 / Security

Encrypted end to end. Closed by default.

Every tunnel is TLS 1.3, mutually authenticated, AES-256-GCM — enforced, never optional. Isolation is fail-closed: lose the tunnel and the site stops forwarding. Routing isn't authorization — an allowlist gates every transiting packet, and revocation is instant.

TLS 1.3 AES-256-GCM Mutual auth FIPS / STIG path

HUB tunnel — MPTCP, TLS 1.3 mutual auth, AES-256-GCM-SHA384, ECDSA P-384

03 / Simplicity

Networking a non-expert can run.

Plain-English status, not daemon output. One honest signal — green means it's truly working, not just plugged in. It even catches the silent killer: "tunnel up, learning no routes" reads amber, never a false green.

A field operator localizes the fault and hands the NOC exactly what's wrong — turning truck rolls into two-minute fixes.

FIELD STATUS

operator view

Internet is reachable

Encrypted tunnel is up

VERIFIED

Learning routes…

tunnel up, 0 routes yet

CHECK

Amber means honestly not-ready — never a false green.

04 / SD-WAN Automation

Enterprise services, pushed — not configured.

The FORGE HUB pushes NTP, DNS, authentication, syslog, and SNMP down to every spoke automatically. Your field operator never hand-configures a single enterprise service connection — the whole policy set arrives with enrollment and stays in sync from the HUB.

FORGE HUB

PUSHES CONFIG

NTP

DNS

Authentication

Syslog

SNMP

HAMR Spoke

● RECEIVES AUTOMATICALLY

How It Works

Every link, bonded into one encrypted path.

Each HAMR field spoke bonds every WAN link the site has — up to four at once: Starlink, LTE, fiber, GEO sat. FORGE bonds them into a single mutually-authenticated tunnel back to the FORGE HUB, so losing any one link never drops the session.

        MPTCP bonding·
        Mutual-auth TLS·
        Fail-closed isolation·
        Low-touch enrollment · NOC-approved
      

Proven Performance

Real numbers, through the full encrypted stack.

Aggregation efficiency is the real throughput FORGE delivers as a share of the links' combined theoretical ceiling. Two 250 Mbps WANs give a 500 Mbps ceiling — FORGE bonds them to ~435 Mbps of usable, encrypted capacity, about 87%.

Bonding across real link scenarios

WAN-emulation rig · path skew vs aggregation

Matched 100 Mbps links

~64 ms skew

87%

Mismatched 250 Mbps links

~94 ms skew

78%

5G + Starlink

realistic mix · 0.01% loss + 3% jitter

~20 ms skew

84%

GEO satellite ~500 ms+ latency gap → hot standby (failover)

The latency gap is too wide to bond without dragging the aggregate down, so FORGE parks GEO as a hot standby — it carries no traffic while the primary links are healthy, then takes over instantly if they fail.

The 5G + Starlink run carried 0.01% packet loss on both links and ~3% jitter on the Starlink uplink — and still bonded at ~84%.

Graceful degradation, not a cliff · measured on a faithful WAN-emulation rig · live-radio field trial is the next milestone.

Break-tested

We break it on purpose. Here's what happened.

Every number below comes from a failure we inflicted deliberately on a live system — and will happily inflict again in front of you.

01

Cut a WAN mid-stream

Zero dropped packets. Traffic shifts to surviving paths in-flight; the dashboard shows the honest count within a second.

02

Kill the hub's uplink

Every spoke detects it, declares it honestly, and reconnects the moment the path returns. Full fleet redundancy back in 3.5 seconds.

03

Silent ISP failure

link light green, internet gone

Caught by live path probes in ~14 seconds. Link lights lie; probes don't.

04

A flapping link

5 drops in 60 seconds

Automatically benched with escalating probation, reinstated only after proving itself clean. Bad links don't get to churn your tunnel.

05

A degraded satellite path

Benched the moment its latency would drag the bond down — and if it carries the tunnel's anchor connection, FORGE rebuilds that connection onto the best healthy path automatically. One ~4-second blip, once — not a 600 ms tax on every packet forever.

06

Config change under load

Edit any WAN live. Zero interruption. We test this on purpose so you never discover it by accident.

every result reproducible · live-fire demo on request · bring your own cable to cut

Who It's For

Built for the places connectivity can't fail.

01

First Responders & Public Safety

Command posts and apparatus that stay online through the incident.

02

Critical Infrastructure & Utilities

Remote sites and SCADA links that simply can't drop.

03

State & Local Government

Field offices and mobile units, centrally governed.

04

Expedition, Media & Maritime

Production crews and vessels far past reliable coverage.

Get Started

Let's forge your edge network.

Resilient, encrypted, and simple enough that your field team runs it — cutting your NOC's time-to-resolution. Book a pilot or request a live demo.

@ Emailinquiries@hamr-forge.com

☎ Call(706) 910-7952

HAMR-FORGE, LLC · Andrew Baxter

Name

Organization

Work email

Use case

What do you need?

Your message goes straight to our team. We reply within one business day.