SCADA router for substations, renewables and remote energy assets

A substation, a wind turbine and a pipeline valve station share one problem. They sit far from fibre, run protocols built for private networks, and must stay reachable around the clock. Here is how Instaroute maps to the requirements utility specifications usually set.

For line-by-line mapping to DISCOM specifications such as the PFC RT-DAS model specification, see IoT and M2M connectivity.

Nexapp has published use cases for each of these site types:

• Smart grid and substations: RTU and FRTU backhaul for distribution automation, feeder monitoring and RMU telemetry over IEC 101/104 or DNP3.
• Wind turbines: remote monitoring and management of turbines, with engineers reaching turbine controllers through logged remote access.
• Solar farms: connectivity for inverters and plant SCADA across many sites, managed centrally.
• Oil and gas pipelines and fuel storage: telemetry from valve stations, tank farms and fuel-retail sites over cellular links.
• Water pumping stations: automated connectivity for remote pumps and their controllers.
• Remote tower sites: management of remote sites where no fixed line exists.
• Smart meters and EV chargers: cellular backhaul for data concentrator units and charging points.

See the full router catalogue for specifications.

Power-sector cyber security is now a binding regulation. The Central Electricity Authority notified the CEA (Cyber Security in Power Sector) Regulations, 2026 on 31 July 2026. They come into force on 1 April 2027. A few provisions, including 5(39), 6(2) and 6(7), start on dates the CEA will set separately. The regulations build on the CEA's 2021 cyber security guidelines. They apply to entities that own, operate or manage OT linked to the interconnected power system. For generating companies, captive plants and energy storage, the threshold is 50 MW or more.

The obligations are yours, not your vendor's. Here is how the network layer helps with the clauses that touch it.

These rules sit alongside CERT-In's 2022 Directions, which already require incident reports within 6 hours and ICT logs kept for 180 days within India. We map our controls to the clauses in your cyber security policy on request.

Your turbine or inverter vendor needs access at 3 am. They should not need the whole network. With the InstaAccess client, each engineer or vendor reaches only the specific controller or RTU they support. Every session is logged. SD-LAN lets your team reach devices behind a router without opening a port to the internet. Out-of-band management keeps every router reachable even on SIMs with no public IP. That gives you the monitored, logged access that CEA regulation 5(17) asks for. See secure remote access.

Grid assets stay in service for decades, and so does the value of their data. Every IPsec IKEv2 tunnel from an Instaroute router uses hybrid classical plus ML-KEM key exchange (NIST FIPS 203), with ML-DSA authentication (FIPS 204). Firmware and configuration are post-quantum signed, so a tampered image is refused. That protects recorded telemetry against harvest-now, decrypt-later attacks. It also fits India's quantum-safe roadmap, which sets early milestones for critical infrastructure. Read more on post-quantum cryptography and the DST deadlines.

Utility estates grow to thousands of routers, and every site visit costs a day. Instaroute SDWAN Lite 2.0 manages up to 100,000 devices per deployment. You import serial numbers by CSV, and each router pulls its configuration at first power-on. There are about 20 configuration domains, including SIM policy, VPN, firewall, serial and protocol settings. Alarms cover signal, data usage, link state and device health. Firmware rolls out to a canary group first, with rollback. You pay a flat per-device price with no data metering. You can self-host it in your own data centre, which suits utilities that must keep operational data under their control. See SDWAN Lite 2.0.

For large plants and control centres, the Nexapp Controller adds full SD-WAN with application-aware steering and sub-second failover across MPLS, ILL, broadband and cellular.