For operators, MSPs and enterprise edge estates

The control room for your edge fleet.

Hundreds of routers and gateways across sites, vehicles and cabinets. Multi-WAN links that fail over at 3am. Bridged Matter, Thread and Zigbee estates nobody can see. This is the stack that turns all of it into one operated fleet.

At a glance Friendly UltraPRO runs on the gateway, the One-IoT platform runs the fleet, and Edge Command puts a NOC wall, a field-tech mobile view and an executive view over the top. Campaigns, failover, security posture and eSIM, one pane per persona.
Why edge fleets hurt

Generic dashboards stop at charts. Vendor tools stop at one vendor.

Heterogeneous by nature

Edge estates accumulate hardware generations and vendors. Each brings its own portal, and none of them shows the whole fleet.

Truck rolls eat the margin

Without remote diagnostics, Wi-Fi surveys and guided field workflows, every anomaly becomes a site visit.

Updates nobody dares run

Fleet-wide firmware rollouts without canaries, waves and abort conditions are how one bad image becomes an outage across every site at once.

The invisible bridged estate

Matter, Thread and Zigbee devices behind the gateway carry real service value and usually zero management visibility.

The stack

Three layers, one fleet

On the gateway

UltraPRO LwM2M client

A modern C++ client built for OpenWrt-class routers and gateways, in production on live reference hardware.

  • LwM2M Gateway object (Object 25): a multi-protocol bridge that surfaces Matter, Thread and Zigbee devices for management
  • Firmware updates through Object 5, software packages through Object 9, delta transfers and resume
  • Certificate and PSK security, DTLS with Connection ID for links that sleep and roam
Under the fleet

One-IoT™ platform

The same carrier-grade core that runs tens of millions of devices: every gateway interaction flows through its northbound APIs.

  • Onboarding, observation and telemetry at fleet scale, multi-tenant by design
  • Rules engine and event subscriptions: registration lifecycle, observe notifications, campaign progress, alarms
  • On-premises, private cloud or Friendly-hosted
Over the top

One-IoT Edge Command

The fleet operations console: one product that resolves into purpose-built views per persona. Currently a design preview you can click through, open to design partners.

  • NOC operator wall, field-technician mobile, fleet administrator, security officer and executive views
  • Multi-WAN health and failover, Starlink terminal telemetry, Wi-Fi management and surveys
  • Firewall and VPN posture, eSIM lifecycle, campaign designer with canary staging, waves and aborts

Designed against live reference hardware, not lorem ipsum: the demo fleet includes a real OpenWrt router running the Friendly UltraPRO client.

Capability detail

What fleet operations actually covers

Multi-WAN and Starlink

Connectivity

Link health, failover events and Starlink terminal telemetry per site, so the fleet view explains the outage before the customer reports it.

FOTA and SOTA campaigns

Maintenance

Firmware (Object 5) and software (Object 9) campaigns with canary staging, wave scheduling and regression aborts. Fleet-wide change without fleet-wide risk.

Security posture

Security

Firewall and VPN state, patch level and configuration drift across every site, visible to the security officer view as a posture, not a spreadsheet.

eSIM lifecycle

Connectivity

Profile state and lifecycle operations for cellular-backed gateways, managed alongside the device rather than in a separate operator portal.

Bridged device estates

Gateway bridging

Matter, Thread and Zigbee devices surfaced through the gateway's LwM2M Gateway object and managed as first-class fleet citizens.

Edge AI workloads

Design preview

Model deployment and inference monitoring for TFLite Micro and ONNX Runtime workloads running on the edge devices themselves.

Agent operations, guarded

Design preview

Fleet Ops, Analytics, Auto-Fix and Security Sentinel agents acting under tiered auto-approval: humans approve by risk class, every action audited.

Field technician mobile

Operations

The site visit that does happen gets a guided mobile workflow with the device's live state, not a printout and a hunch.

Last-mile topologies

From the network to the last-mile device

Backhaul on 5G/LTE or fibre; LoRaWAN, Thread/Matter/Zigbee and Wi-Fi to the last device; one management plane behind all of it. The gateway is where those lanes converge.

Last-mile connectivity topology: a central edge gateway with LoRaWAN star-of-stars at 1 to 5 km, Thread, Matter and Zigbee mesh at 10 to 100 m, Wi-Fi 6 DBDC star at 100 to 500 m, and WAN backhaul over 5G/LTE cellular standby on two M.2 WWAN slots plus gigabit Ethernet
Each radio lane keeps its own physics; the gateway folds them into one managed estate.
LaneRangeTopologyCarries
LoRaWAN1 to 5 kmStar of stars, multi-year batteryRemote telemetry, outbuildings, sub-metering
Thread / Matter / Zigbee 3.010 to 100 mSelf-healing meshSensors, locks, lighting; bridged via LwM2M Object 25
Wi-Fi 6 (DBDC)100 to 500 mStar, high throughputCameras and heavy data
Backhaul WANSite uplink5G/LTE cellular standby (2× M.2 WWAN) + gigabit Ethernet or fibreEverything northbound, with failover

The point that matters: the lane is a deployment choice; the LwM2M session behaviour and the management evidence are the same on every one of them.

Branch survivability flow when the fibre WAN disconnects: local automations keep executing off the LAN, the app falls back to locally scoped tokens, telemetry buffers to eMMC and replays in order with de-duplication, and SGP.32 eSIM cellular standby carries security and life-safety alarms
Branch survivability. When the WAN drops, automations run off the LAN, telemetry buffers to disk and replays in order, and SGP.32 cellular standby carries the events that cannot wait.
Industrial legacy plant bridged through an edge gateway into the management platform
Legacy plant, bridged. Brownfield industrial estates join the fleet through the gateway rather than through a forklift upgrade.
Connectivity control

eSIM steering with SGP.32

The operator relationship should be a fleet decision, not a soldering decision. SGP.32 makes the SIM a managed object, and the gateway already carries the machinery.

eIM fleet steering policy Gateway IPAd eUICC UltraPRO client Objects 504 / 3443 Operator A profile enabled Operator B profile standby ESipa over LwM2M or direct RSP Steering is a campaign: enable, disable and swap profiles in waves, with the same canary discipline as firmware.
  • SGP.32 v1.2 implemented in UltraPRO: LwM2M Objects 504 and 3443, the ESipa/ASN.1 codec, embedded IPAd, over LwM2M or direct RSP transport
  • Vendor adapter seams for Thales, G+D, Kigen and Jasper back-ends
  • Dual-profile survivability: cellular standby profiles for the events that cannot wait for the WAN to return
  • Steering as a fleet campaign: waves, canaries and rollback, operated from the same console as FOTA
  • Verified by roughly 2,500 unit and integration test cases; live SM-DP+ / SM-DS verification is the current programme stage
Edge intelligence

AI inferencing, managed like firmware

Models on the edge are fleet assets: deployed, versioned, monitored and rolled back with the same discipline as any other software on the gateway.

Edge AI video pipeline: raw camera input is classified locally on the gateway NPU, so only lightweight metadata, event triggers and thumbnails cross the WAN, eliminating 80 to 90 percent of upstream bandwidth
The edge video pipeline. Person, vehicle and package classification runs locally on the gateway NPU; only metadata, events and thumbnails cross the WAN. That removes 80 to 90 percent of upstream bandwidth compared with record-everything cloud architectures.

Inference on the device

UltraPRO Edge AI

A backend abstraction over TensorFlow Lite and ONNX Runtime, on CPU everywhere and on GPU or NPU where the silicon SDK provides one.

Models as managed objects

Object 33410

A dedicated Edge-AI object with 36+ resources exposes model identity, version, health and inference statistics to the management plane.

Deployment with discipline

SOTA campaigns

Models ship through the same Object 9 software campaigns as any package: canary sites first, waves after, abort conditions armed.

Monitored from the console

Design preview

Edge Command surfaces model deployment state and inference monitoring per site, next to the WAN, Wi-Fi and security posture it already shows.

Where it runs

Edge fleets in the field

Mining conveyor site on a local edge gateway with intermittent backhaul
Mining

Remote sites, intermittent backhaul

Local gateways keep the site operating; the fleet view reconciles when the link returns.

Oil field assets connected over satellite backhaul
Oil and gas

Satellite-backed field assets

NTN and Starlink links managed with the same tooling as urban fibre sites.

Smart building systems converging on an edge gateway
Buildings

Sites as fleet citizens

HVAC, occupancy and energy behind a site gateway, bridged into one operational view.

Substation edge sensors and renewables telemetry
Energy

Grid edge

Substation gateways with failover assurance and campaign-grade update discipline.

For operators and MSPs

Your managed-CPE service, with your brand on the wall of your NOC

Edge Command is white-label capable by design. Operators and MSPs run managed edge-router fleets as a branded service: the NOC wall for operations, the mobile app for field techs, the executive view for the quarterly meeting.

Enterprises with edge estates get the same machinery pointed inward: retail, energy and transport sites with visibility, campaigns and failover assurance across hundreds of locations.

Honesty first: today Edge Command is a design preview you can click through, pinned to live reference hardware and a simulated fleet. That is exactly why now is the time to shape it as a design partner. UltraPRO and the One-IoT platform beneath it are in production.

See the Edge Command preview

A working session against the live demo fleet, plus the design-partner programme details.

Submissions route to Friendly's CRM. No newsletter, no drip by default.

NOC wall, field mobile, executive view. One fleet.

Request the preview session