Skip to content

Peplink Balance: the head-end of your SD-WAN

Balance routers join sites, plants and vessels into one network: several WAN lines, failover without dropped sessions and the endpoint for SpeedFusion. DRYNET designs, installs and operates them.

  • Peplink Certified Gold PartnerPeplink Gold Partner
  • Fortinet Engage Partner
  • 24/7 support & incident hotline
  • From Kiel – for vessels, ports and onshore sites

What a Balance router is for

Peplink's MAX routers sit where it is rough: on vessels, in vehicles, on sites. The Balance series is their counterpart on land. It sits in the office, plant, port office or data centre, takes fibre, cable, DSL and cellular as WAN links and distributes traffic by your rules. If a line fails, the next one takes over without dropping calls or VPN sessions.

The Balance is also the SpeedFusion hub: vessels, outstations and vehicles build their tunnels to it. One network in which a technician on board reaches the same systems as in the office. How we build this with BRYTE is on our SD-WAN Gateway page.

  • Multi-WAN: fibre, cable, DSL, 4G/5G and Starlink in one device
  • Hot failover and load balancing by your own rules
  • SpeedFusion endpoint for vessels, vehicles and remote sites
  • Managed in InControl2; Wi-Fi 6 and AP controller on small models
Diagram: Balance as SD-WAN hub for vessels, sites and offices

Balance models at a glance

Selection from the current Peplink product list, values from Peplink datasheets and tech specs, September 2026; SpeedFusion throughput without / with AES-256.

B One 2× GE WAN, 4× GE LAN, USB-C WAN, Wi-Fi 6; 1 Gbps router throughput; SpeedFusion 400 / 200 Mbps; 2 to 20 peers; 1–150 users; no cellular
Balance 20X 1× GE WAN + embedded LTE modem (category depends on region) + USB + FlexModule Mini slot (5G possible); 4× GE LAN, Wi-Fi 5; up to 1 Gbps; SpeedFusion 100 / 60 Mbps; 2 or 5 peers; 1–60 users
Balance 310X 2× GE WAN + LTE-A modem with 2 SIM slots (CAT-12 or CAT-20) + 2× USB + expansion module; 9× GE LAN; 2.5 Gbps; SpeedFusion 600 / 500 Mbps; 3, 30 or 50 peers; 50–500 users; -40 to +65 °C
Balance 580X 5× GE WAN, 3× GE LAN, FlexModule Mini slot; 4 Gbps; SpeedFusion 500 Mbps; 50 or 100 peers; 300–1,000 users; now listed as legacy in Peplink's tech specs, successor on request
SDX / Balance EC SDX and SDX Pro with modular FlexModule bays, plus Balance 1350/2500/5000 EC for data centre and head office; also the newer Balance 310 line (310, 310 5G, 310 Fiber 5G) with 10G ports; sized by peer count and throughput in the project
Diagram: hot failover from 5G to Starlink without dropped sessions

Balance as SpeedFusion hub or FusionHub in the cloud?

A SpeedFusion tunnel needs an endpoint: a Balance in your data centre, a FusionHub virtual machine in your cloud, or Peplink's SpeedFusion Connect service. Your own Balance or FusionHub gives you fixed IP addresses, full control over routing and firewall, and independence from the cloud provider.

On request we set up and operate a FusionHub instance as part of our Managed Services, connected to your site network. In your cloud, provided through DRYNET or as a Balance on premises: decided in the network design. Bonding, failover and licences are explained under SpeedFusion & InControl2.

Deployments in energy, utilities, ports and industry

Our building block for site networks of critical infrastructure operators.

DRYNET Icon icon-ph-drop-badge

Municipal and water utilities

Administration, waterworks, treatment plant and pumping stations in one SD-WAN; control systems segmented, cellular backup for every line.

DRYNET Icon icon-ph-lightning-badge

Energy and grid operators

Substations, wind farms and service bases connected to the central network: Balance at headquarters, MAX router on site, SpeedFusion in between.

DRYNET Icon icon-ph-anchor-badge

Ports and shipping companies

The Balance in the owner's office or terminal is the endpoint for domes on board and BR1 routers on the quay. One network for fleet and shore.

DRYNET Icon icon-ph-factory-badge

Industry and plants

Production sites with two providers, MPLS replacement, priority for ERP and telephony, separate guest network.

DRYNET Icon icon-ph-broadcast-badge

Media houses

Newsroom and broadcast centre as hub for OB vans and reporter teams; bonded uplinks terminate on the Balance.

DRYNET Icon icon-ph-shield-check-badge

NIS2 and evidence

Segmentation, logging and redundancy are building blocks of risk management under the new BSIG. We document what the Balance contributes.

How DRYNET runs a Balance rollout

From survey to operation. Good existing firewalls stay.

01

Survey and design

Record sites, lines, applications and security needs; define model, WAN mix and SpeedFusion topology.

02

Staging in Kiel

Pre-configure devices, create them in InControl2, standardise configurations, following our Rollout & Standardisation approach.

03

Migration without downtime

Bring new lines up in parallel, shift traffic step by step, cancel old lines afterwards.

04

Operation

Monitoring, firmware, licences and changes as managed SD-WAN, 24/7 incident handling on request.

Balance and Fortinet: WAN layer and security layer

Peplink Balance and FortiGate complement each other: the Balance handles WAN aggregation, failover and SpeedFusion, the FortiGate behind it firewall, intrusion prevention and web filtering. Keep your FortiGate, or get both from us as a Fortinet Engage Partner. More under Cyber Security.

NIS2, as of September 2026: Germany's NIS2 implementation act (NIS2UmsuCG) entered into force on 6 December 2025 and rewrote the BSI Act (BSIG). The registration deadline for affected entities ended on 6 March 2026, with the BSI accepting late registrations until 31 July 2026. Operators of critical facilities must additionally provide evidence of their measures to the BSI: first three years after designation, then every three years (Section 39 BSIG). Whether your company is in scope is something we clarify with you under Compliance & Regulations.

Frequently asked questions about Peplink Balance

Which Balance fits my site?

Up to about 150 users without cellular: B One. Small sites with LTE or 5G backup: Balance 20X. Head offices with several lines and many SpeedFusion peers: Balance 310X or larger. Deciding factors are peer count, encrypted throughput and WAN ports.

Balance or Fortinet SD-WAN?

FortiGate can do SD-WAN, but not SpeedFusion bonding with Peplink routers on vessels and vehicles. With MAX routers in the field you need a Balance or FusionHub as endpoint. Pure site-to-site networking works with either; we recommend based on your estate and team.

What do the licences cost?

Every Balance comes with a one-year warranty and, for PRM models, one year of PrimeCare including InControl2 and SpeedFusion features. After that you renew PrimeCare or EssentialCare for one or several years. Extra SpeedFusion peers are licences. Prices on request.

Can the Balance use Starlink as WAN?

Yes. Starlink connects to a WAN port like any Ethernet line and is included in failover or load-balancing rules. As a backup for sites without a second fixed line this is a common solution.

Can you replace our MPLS lines?

In most cases, yes. Two internet connections from different providers plus SpeedFusion tunnels between sites replace MPLS at comparable availability and lower cost, migrated step by step.

Is a Balance router NIS2 compliant?

No single device is NIS2 compliant; the organisation has to be. The Balance provides building blocks: segmentation, redundant connectivity, central logging and configuration management. We document these measures so they feed into your risk management under the BSIG. As of September 2026.

Request an SD-WAN design

Prefer to talk? +49 431 55607040

Related pages

Peplink Balance from the Gold Partner

Rethink your site network

Send us your sites and lines. We propose Balance models, topology and a migration plan.

Request 24/7 support

Tell us briefly what you need. Our team will get back to you as quickly as possible.