Device Management System — NetKonnekt
Cloud-Native DMS Platform

Smart Device
Management.
Scaled for the Future.

A cloud platform for managing routers, CPE, and IoT devices from one place. It helps teams set up devices, monitor them, push updates, and keep service stable without onsite work.

20+
Years Experience
50K+
Devices / Instance
TR-069 / 369
Dual Protocol
OpenAPI
OSS/BSS Ready
nk-dms — controller@us-central1
›DMS Controller v3.2.1 — Online
›Initializing TR-069 ACS endpoint…
✓ ACS bound to :7547 (HTTPS)
✓ TR-369 USP Agent connected
›Loading GKE node pool…
✓ us-central1-a [READY] 3 nodes
✓ us-central1-b [READY] 3 nodes
✓ us-central1-c [READY] 3 nodes
›PostgreSQL · Redis · ClickHouse
✓ All datastores healthy
›Syncing device fleet…
⏳ 4,812 devices provisioned
ℹ Telemetry stream active — Grafana HA
›System fully operational. ▌
TR-069 ACS
TR-369 USP
GCP SaaS
TLS 1.3
The Challenge

The subscriber edge is
fragmented and complex

  • Reactive support and costly truck rolls for every field issue
  • Siloed tooling that can’t span legacy and next-gen devices
  • Devices stranded behind NAT firewalls, unreachable for management
Fragmented edge device network visualization
The Paradigm Shift

From reactive firefighting
to proactive control

Legacy Management
NetKonnekt Cloud DMS
Manual Configuration
Smart-Algorithm Zero-Touch
Reactive / Truck Rolls
Proactive TR-143 Remote Diagnostics
TR-069 Silos
Unified TR-069 + TR-369 (USP)
Closed Systems
OpenAPI 2.0 OSS/BSS Integration
GCP-SaaS Infrastructure

Built on Geo-Redundant
Cloud Architecture

Access Layer
Cloud Load Balancer Anycast IP
WAF Protection DDoS Protection
TLS 1.3 Let’s Encrypt
↓
GKE Cluster — Kubernetes Orchestration
us-central1-a us-central1-b us-central1-c
ACS / USP Controllers
API Gateway
Telemetry Collector
Auto-Scaler (HPA)
↓
Data & Caching Layer
PostgreSQL HA Primary
Redis Cache
ClickHouse
GCS Object Storage
Regional Cluster
A 9-node GKE pool spread across three zones for redundancy and failure isolation.
Horizontal Auto-Scale
Kubernetes HPA adds or removes controller replicas automatically as load changes.
Zero-Downtime Deploy
Rolling updates keep device management available while the platform is being upgraded.
NK Cloud DMS ACS dashboard overview
Zero-Touch Onboarding

Plug in, connect,
and control

  • Plug In — the device powers on and reaches the network
  • Connect — it hits the ACS URL / USP endpoint automatically
  • Control — it’s provisioned and manageable from the cloud
Zero-touch device provisioning workflow
True Interoperability

Break free from
vendor lock-in

Modern Protocols
CWMP · TR-069 USP · TR-369
Legacy Data Models Supported
TR-098 TR-104 TR-106 TR-111 TR-131 TR-135 TR-143 TR-181 TR-196
Cloud DMS device interoperability network
NAT Traversal

Reach devices hidden
behind NAT firewalls

  • UDP Connection Requests (STUN)
  • XMPP Connection Requests
  • Custom proxy deployment for non-standard devices
Cloud DMS NAT traversal diagram
Sovereign Security

Enterprise-Grade
Security by Default

TLS 1.3 Encryption
All ACS and USP communications are encrypted using TLS 1.3 with automatic certificate management.
HTTP Digest Authentication
Per-device credentials help prevent unauthorized device registration and replay attacks.
Subnet Access Restrictions
Management interfaces can be restricted to approved subnets and admin endpoints.
Security Status
All systems nominal
TLS 1.3
ACTIVE
HTTP Digest Auth
ENFORCED
Subnet Firewall
LOCKED
Secure cloud-native architecture for NK Cloud DMS
Remote Diagnostics

Deep-dive diagnostics
without a truck roll

IPPing
Reachability & latency
TraceRoute
Hop-by-hop path
SpeedTest
Download & Upload
UDPEcho / Plus
Jitter & loss
NSLookup
DNS resolution
NK Cloud DMS diagnostics suite dashboard
WiFi Radar

Auto-tune WiFi for
peak performance

  • Detects channel interference in real time
  • Auto-shifts subscribers to the cleanest channel
  • Optimizes both 2.4 GHz and 5 GHz radios
Wi-Fi radar and automatic channel optimization visualization
Fleet Telemetry — Real-time
LIVE
Online Devices
4,812
Alerts
3
us-central1-a
94%
us-central1-b
98%
Real-Time Analytics

Visibility Across Every Device

NK Cloud DMS command center architecture
3-Tier Platform

One platform, three
purpose-built portals

Device support portal with real-time visibility
Tier 1 & 2 Troubleshooting
Support Portal
Translates complex device parameters into a user-friendly interface — view real-time subscriber network info, update firmware instantly, and run diagnostics or direct RPC methods in advanced mode.
Admin portal for large-scale device operations
Mass-Scale Operations
Admin Portal
Your centralized command center — launch mass firmware upgrades, push configuration campaigns to many CPEs at once, manage the platform user base, and review campaign results and scenario logs.
Northbound interface integration with OSS and BSS platforms
OSS / BSS Integration
Northbound Interface
An OpenAPI 2.0 NBI over secure HTTPS for rapid service deployment — read and update inventory, trigger RPCs on device groups, run diagnostics, and manage services like VOIP, HSI, and WIFI.
Plain-Language Overview

What this service does in simple terms

NK DMS TR-069 cloud device management overview
Start Fast
Remote Provisioning
Automatically onboard devices and apply the correct settings when they first connect.
See Health
Monitoring and Alerts
Track uptime, performance, and alerts so your team can act before customers notice issues.
Stay Secure
Controlled Updates
Push firmware and policy changes safely while keeping device access tightly controlled.
Who Uses It

Built for the people who manage large fleets

Internet Service Providers
Use DMS to activate customer routers, reduce truck rolls, and keep support work in one place.
Enterprise IT Teams
Monitor branch devices, enforce policies, and fix issues remotely across offices and sites.
IoT Fleet Operations
Track gateways and connected devices in the field with telemetry-backed diagnostics.
Device fleet operations workflow in NK Cloud DMS
Pay-as-you-grow

From the lab to the
enterprise, on demand

Free / DemoRPC
1–3 devices
A free proof-of-concept to validate onboarding and RPC execution end to end.
Advanced
50,000+ devices
Everything in Starter, scaled for larger fleets.
Unlocks External Auth & NAT support
Advanced+
Custom scale
Maximum control for large carriers and managed-service operators.
Unlocks Config File Management
Quick FAQ

Common questions, answered simply

Question 1
Can it manage old and new devices?
Yes. It supports mixed fleets with TR-069 for legacy devices and TR-369 for newer ones.
Question 2
Does it help reduce support work?
Yes. Remote setup, monitoring, and updates mean many issues can be solved without field visits.
Question 3
Is this only for telecom providers?
No. It is also useful for enterprise IT teams and managed network operators with distributed device fleets.
Question 4
Can security policies be customized?
Yes. Teams can apply controls such as encryption settings, credential policies, subnet restrictions, and optional VPN integration.
Logical Architecture

Core Components

Go · Python
ACS / USP Controller
The core of the platform — handles all TR-069 CWMP sessions and TR-369 USP messaging.
Redis 7
Caching Layer
Redis provides sub-millisecond caching for active device sessions.
PostgreSQL 16
Persistent Database
Authoritative source of truth for device inventory and config profiles.
Full Lifecycle

The complete device
lifecycle solution

Get Started

Ready to Modernize?

Scroll to Top