--- title: "Securing Industrial PLCs with WIZnet W5500: An Open-Source IoT Gateway Solution" url: "https://maker.wiznet.io/Benjamin/projects/securing-industrial-plcs-with-wiznet-w5500-an-open-source-iot-gateway-solution/" markdown_url: "https://maker.wiznet.io/Benjamin/projects/securing-industrial-plcs-with-wiznet-w5500-an-open-source-iot-gateway-solution/md" type: "UCC: User Created Content" author: "Christofer Dutz" author_url: "https://www.techmonitor.ai/technology/cybersecurity/securing-plcs-iot-hardware?cf-view" editor: "WIZnet" editor_url: "https://maker.wiznet.io/" original_author: "Christofer Dutz" original_url: "https://www.techmonitor.ai/technology/cybersecurity/securing-plcs-iot-hardware?cf-view" license: "Apache License 2.0 (Apache-2.0)" published: "2025-03-19" language: "en" tags: ["Internet of Things", "W5500"] hardware: ["WIZnet W5500", "STMicroelectronics STM32F411RE"] likes: 0 views: 2086 comments: 0 source: "WIZnet Makers (https://maker.wiznet.io/)" --- # Securing Industrial PLCs with WIZnet W5500: An Open-Source IoT Gateway Solution > Using WIZnet W5500, this project builds a secure open-source gateway for industrial PLCs, integrating Apache PLC4X and MyNewt RTOS. Original author: Christofer Dutz (source: https://www.techmonitor.ai/technology/cybersecurity/securing-plcs-iot-hardware?cf-view) ## Components - **WIZnet W5500** x 1 ([docs](https://docs.wiznet.io/Product/Chip/Ethernet/W5500)) - **STMicroelectronics STM32F411RE** x 1 ([docs](https://www.st.com/en/microcontrollers-microprocessors/stm32f411re.html)) - Software: **WIZnet io Library** ([docs](https://github.com/Wiznet/ioLibrary_Driver)) WIZnet parts: W5500 ([Datasheet](https://docs.wiznet.io/Product/Chip/Ethernet/W5500/datasheet?utm_source=maker&utm_medium=project&utm_campaign=w5500), [product hub](https://maker.wiznet.io/products/w5500/)) ## Documents and links - [PLC4X Gateway Firmware](https://github.com/apache/plc4x) (code) - [W5500 Ethernet Driver](https://github.com/Wiznet/ioLibrary_Driver) (code) - [MyNewt RTOS Implementation](https://github.com/apache/mynewt-core) (code) - [gRPC Secure Protocol](https://github.com/grpc/grpc) (code) ## Article ### **Revolutionizing Industrial Security with WIZnet’s W5500: Open-Source IoT Gateway for PLCs** πŸ”Ή **Secure Your Industrial Devices: The Power of W5500 in Open-Source Networking Solutions** πŸ”Ή **How Apache PLC4X and WIZnet’s W5500 Enable Safe, Scalable IoT for Industrial Automation** ## **πŸ“Œ COMPONENTS & PROJECT DESCRIPTION** ### **Building a Secure PLC Gateway with Apache MyNewt and WIZnet W5500** Industrial **Programmable Logic Controllers (PLCs)** were never designed with cybersecurity in mind. These devices control critical industrial processes, yet many still rely on outdated protocols that lack encryption or authentication mechanisms. This makes them vulnerable to cyber threats, especially as industries transition towards **Industry 4.0** with **IoT-driven automation**. **This project addresses this security challenge by leveraging the WIZnet W5500 Ethernet chip to create an open-source PLC security gateway.** Developed by Christofer Dutz, an Apache Software Foundation contributor, this system integrates **Apache PLC4X**, **Apache MyNewt RTOS**, and **WIZnet W5500** to provide a robust, **cost-effective** network security layer for industrial PLCs. πŸš€ **This gateway enables industrial PLCs to securely connect to modern networks via Ethernet, WiFi, BLE, or LoRaWAN.** #### **πŸ›  Project Overview** - **MCUs Used:** STM32F767ZI (216MHz), STM32F411RE (100MHz), nRF52840 (64MHz, BLE), STM32L072 (32MHz, LoRaWAN) - **Networking Modules:** WIZnet **W5500 Ethernet Controller**, WiFi shield (X-NUCLEO-IDW01M), LoRaWAN module (B-L072Z-LRWAN1) - **Software & Protocols:** Apache **PLC4X**, Apache **MyNewt RTOS**, TLS security, gRPC for secure communication - **Purpose:** Convert **insecure industrial PLC networks** into **secure, IoT-enabled environments** - **Main Use Cases:** Industrial Automation, Secure PLC Communications, IoT Gateway for Smart Manufacturing --- ## **πŸ“Œ Why W5500? Security & Networking Benefits** πŸ”Ή **Reliable and Secure Ethernet Connectivity** The **WIZnet W5500** Ethernet chip was chosen to provide **a stable, hardware-accelerated TCP/IP networking solution**. Unlike software-based networking stacks, the W5500 **offloads all networking tasks to dedicated hardware**, ensuring **predictable performance, lower CPU load, and enhanced security**. πŸ”Ή **Ease of Integration & Low Power Consumption** - **SPI-based communication** allows for seamless integration with STM32, Nordic, and other MCU platforms. - Low power usage, making it suitable for **battery-powered industrial IoT applications**. - Supports **8 independent TCP connections simultaneously**, ideal for real-time industrial control. πŸ”Ή **Security Advantages of Hardwired TCP/IP** - **Prevents software-based attacks** like buffer overflow exploits common in software-based network stacks. - **Defends against SYN flooding attacks** by handling TCP handshakes at the hardware level. - Built-in packet buffering **ensures reliable data transmission even under network congestion**. πŸ”Ή **Optimized for IoT Edge Computing & Industrial Automation** - Offloading **TCP/IP processing to hardware** frees up the MCU for critical real-time tasks. - Works in low-latency environments, ensuring **real-time monitoring & control** of industrial devices. - Reliable Ethernet **eliminates WiFi connectivity issues** in factory settings with high interference. --- ## **πŸ“Œ System Architecture: W5500 in the Secure PLC Gateway** ### **πŸ”— How It Works** 1️⃣ **Apache PLC4X (Protocol Adapter) Extracts PLC Data** 2️⃣ **W5500 Transmits Data Over Secure Ethernet** 3️⃣ **Apache MyNewt RTOS Manages Communication & Security** 4️⃣ **TLS & gRPC Ensure Encrypted Data Exchange** 5️⃣ **Multi-Protocol Support:** WiFi, BLE, LoRaWAN (for remote PLCs) **Traditional PLC Communication (Insecure)** `[PLC] β†’ (Unsecured Network) β†’ [SCADA Server] ` **WIZnet W5500 Secured PLC Communication** `[PLC] β†’ (Secure W5500 Gateway) β†’ [Encrypted Ethernet] β†’ [SCADA Server]` πŸ”Ή **The Result?** A **cost-effective, highly secure industrial IoT gateway** that seamlessly integrates with modern networks while keeping legacy PLCs **safe from cyber threats**. --- ## **πŸ“Œ Development Process & Key Challenges** ### **πŸ”§ Hardware & Software Integration** - **Developed custom firmware** to interface **PLC4X with W5500 via SPI**. - Implemented **real-time Ethernet packet processing** with **Apache MyNewt RTOS**. - Optimized SPI communication to **maximize throughput between the STM32 MCU and W5500**. ### **πŸ” Security Implementation** - Configured **TLS encryption** for secure industrial data transmission. - Integrated **gRPC-based authentication** for remote PLC access. - Addressed **packet loss and real-time processing challenges** under high network loads. ### **⚑ Industrial Use Cases** βœ… **Factory Automation**: Secure PLC-to-Cloud connectivity. βœ… **Smart Infrastructure**: Remote monitoring of industrial equipment. βœ… **Energy Sector**: Secure SCADA system integration. βœ… **IIoT (Industrial IoT) Gateways**: Upgrading legacy PLCs for **Industry 4.0**. --- ## **πŸ“Œ Performance Benefits: W5500 vs. Software-Based Networking** | Feature | **WIZnet W5500 (Hardware TCP/IP)** | **Software TCP/IP Stack** | | --- | --- | --- | | **CPU Load** | **Minimal (Handled in Hardware)** | High (MCU must process all packets) | | **Network Stability** | **Very Stable (Dedicated Buffering)** | Unstable (Subject to software crashes) | | **Security** | **Resistant to DoS attacks** | Vulnerable to flooding & exploits | | **Throughput** | **100 Mbps** (Optimized SPI) | Lower (Dependent on MCU power) | | **Real-Time Performance** | **Optimized for Industrial Control** | Prone to timing issues | 🎯 **With W5500, PLC networks become faster, more secure, and more reliableβ€”without the burden of a software-based stack!** --- ## **πŸ“Œ Conclusion & Future Development** πŸ”Ή **WIZnet W5500 enables a cost-effective, open-source solution for industrial security** πŸ”Ή **Integrating Apache MyNewt RTOS & PLC4X enhances industrial IoT capabilities** πŸ”Ή **The system is scalable to support WiFi, BLE, and LoRaWAN for diverse industrial applications** ### **Future Enhancements** βœ… Adding **MQTT & WebSocket support** for cloud-based industrial monitoring βœ… Implementing **LoRaWAN for ultra-long-range PLC connectivity** βœ… Expanding **OPC-UA compatibility** for broader industrial protocol integration πŸš€ **This project is a game-changer for industrial IoT security, offering a flexible, open-source alternative to expensive proprietary solutions!** --- πŸ”— **Project Documentation & Code Repositories** πŸ“‚ [Apache PLC4X Project Page](https://plc4x.apache.org) πŸ“‚ [Apache MyNewt RTOS](https://mynewt.apache.org) πŸ“’ **Join the conversation! How do you see open-source IoT transforming industrial automation? Let us know in the comments below!** πŸš€ --- Source: https://maker.wiznet.io/Benjamin/projects/securing-industrial-plcs-with-wiznet-w5500-an-open-source-iot-gateway-solution/