FastNetMon is designed to be flexible by default. In addition to standard server deployments, it can be embedded into a wide range of hardware platforms and integrated directly into existing DDoS detection and mitigation systems.
This makes FastNetMon suitable for network vendors, service providers, and engineering teams building custom security appliances or distributed monitoring solutions.
Designed for Embedded and Distributed Deployments
FastNetMon can be deployed on-premise or in cloud environments. In scenarios where traditional server deployments are not practical — such as limited rack space, lack of spare servers, or remote locations with constrained resources — FastNetMon can run on embedded and compact computing platforms.
Typical deployment targets include industrial computers, single-board computers (SBCs), and other embeddable systems used for network monitoring and security workloads.
ARM64 Support for Flow-Based DDoS Detection
FastNetMon provides full support for ARM64 (AArch64) architectures and is optimised for flow-based traffic processing. This makes it particularly well suited for handling NetFlow, IPFIX, and sFlow data without requiring high-end hardware.
ARM64 platforms are strongly recommended when FastNetMon is used purely for flow-based monitoring and DDoS detection, as they offer an efficient balance of performance, power consumption, and cost.
FastNetMon has been tested on a variety of ARM64 platforms running Linux, including common SBCs and embedded systems using Ubuntu or compatible distributions.
Cloud and Virtual Embedded Use Cases
FastNetMon can also be deployed on cloud platforms that offer ARM64 instances. For example, in AWS environments, FastNetMon can run on ARM-based instances using Graviton processors, enabling cost-efficient and scalable DDoS detection in virtualised and hybrid architectures.
This approach is commonly used when FastNetMon is embedded as a detection component alongside other cloud-native network services.
Port Mirroring Considerations
FastNetMon supports traffic ingestion via port mirroring (SPAN), but this method requires significantly more computing resources compared to flow-based protocols. When using port mirroring in embedded scenarios, higher-performance hardware is typically required.
For embedded and low-resource deployments, flow-based telemetry remains the recommended approach.
Tested Platforms and Installation
FastNetMon has been tested on multiple embedded and SBC platforms, including systems based on ROCK Pi, ESPRESSObin, and similar ARM64 hardware. Installation follows the same standard FastNetMon installer process used on traditional servers, with no special builds required.
As hardware ecosystems evolve, FastNetMon continues to evaluate and test new platforms to expand support for additional embedded use cases.
Start Building with FastNetMon
FastNetMon can be embedded into a wide range of DDoS detection architectures, from compact edge deployments to large-scale distributed systems.Start a free trial to test FastNetMon on your target platform, or contact our team to discuss embedded deployment scenarios, performance requirements, and integration options.

