Case Study · Connected Devices

Modern device management at the edge.

A secure administration platform for commissioning, configuration, diagnostics and operating-system recovery on resource-constrained Embedded Linux devices.

Critical infrastructureEmbedded LinuxReact · Drogon C++ · SWUpdate

Edge Device Manager● Device online

OverviewAdministrationNetworkSecurityDiagnosticsSoftware update

Device administration

Secure access and recovery

Web accessHTTPS only

CertificateValid · managed

System imageCurrent · recovery ready

DiagnosticsLogs and packet capture

Review configuration

The challenge

A legacy web-management application had grown around complex edge-device operations: commissioning, network setup, configuration import, certificate handling, diagnostics and operating-system recovery. The product needed a faster and clearer user experience without weakening the security or reliability required on deployed devices.

Engineering approach

Crossware rebuilt the browser interface as a responsive React single-page application and integrated it with a Drogon C++ HTTP gateway. Structured JSON-RPC services handle device operations, while dedicated REST paths support efficient file transfer. A securely isolated compatibility layer preserves legacy API support and existing system integration, enabling installed products to move to the new interface without regression or disruptive migration. Security, update and diagnostic functions were treated as core platform capabilities rather than UI add-ons.

Containerised management architecture

ClientAdministrator browserCommissioning, configuration, diagnostics and recovery workflows

→

Managed application environment

Web UI containerReact single-page application

Reverse proxyTLS termination and controlled routing

Drogon C++ API gatewaySessions, validation, JSON-RPC, secure legacy APIs and file transfer

Update adapterSigned images, progress and recovery control

→

Host servicesEmbedded Linux deviceNetwork · certificates · logs · packet capture · configuration · A/B update partitions

Container runtime and service supervision · isolated processes · explicit interfaces · persistent device data

Architectural idea: browser-facing components are isolated from privileged device services. The Drogon gateway exposes only validated operations, while compatibility, update and diagnostic adapters translate UI requests into controlled host actions.

Delivered capabilities

One interface for the complete device lifecycle.

01Modern operationsResponsive workflows reduce friction during installation and administration.

02Secure commissioningCookie sessions, CSRF protection, validation filters and password hardening.

03Configuration controlNormalised imports and structured service interactions across device settings.

04Field diagnosticsSystem logs, diagnostic switches, packet capture and downloadable support bundles.

05Reliable recoveryProxied software updates with dual-partition recovery and image validation.

06Seamless compatibilitySecure legacy API support and existing-system integration preserve functionality during upgrades.

Platform engineering

Frontend, backend and operating system were designed as one product.

The platform coordinates React, Drogon C++, Nginx, JSON-RPC services, secure legacy APIs and the Embedded Linux update system. Existing installations retain their established system integration while gaining the new web experience, so the transition remains seamless and functionally compatible. This end-to-end view was essential: an attractive interface would not solve unreliable upgrades, and robust device services would remain difficult to operate without clear workflows.

Security by sequenceRestriction, validation, CSRF and session controls protect every privileged request.

Compatibility preservedLegacy APIs and existing integrations remain available through controlled interfaces.

Recovery designed inUpdate fallback and recovery validation are part of the normal lifecycle.

Modernising an embedded management interface?

We can connect UX, security, device services and update infrastructure into one maintainable platform.

Learn more →