VeeaONE Fundamentals

The VeeaONE Platform brings together hardware, software, and management tools to deliver flexible, powerful connectivity and computing capabilities at the network edge—where people, devices, and applications interact. By processing data locally, close to its source, the platform improves responsiveness, reduces reliance on external resources, and supports both cloud-connected and autonomous deployments.

This edge computing approach offers several key benefits:

1. Faster response times for applications and services.
2. Lower storage and bandwidth demands by minimizing the amount of data that must travel to and from centralized cloud servers.
3. Improved data security through localized storage and processing.
4. Support for autonomous operations, making hybrid cloud and edge architectures possible.

Unlike traditional edge systems that rely on bulky micro-data centers (racks of servers housed in cabinets), VeeaONE employs a scalable, compact, and easy-to-deploy architecture. Its foundation is built on wireless mesh technologies combined with highly integrated edge devices.

This modular design allows organizations to scale deployments seamlessly, starting with a single VeeaHub and expanding into large, distributed meshes as needs grow. Each VeeaHub contributes processing power, storage, and connectivity to the network, ensuring that the system grows stronger and more capable with every node added. 

The VeeaONE Platform adapts to a wide variety of use cases – from enterprise campuses and smart buildings to rural broadband and industrial IoT – while maintaining consistent performance and centralized manageability through Control Center and VeeaHub Manager.

The Role of a VeeaHub

At the heart of the platform is the VeeaHub. Each VeeaHub combines:

• Quad-core compute resources.
• Multiple wireless and wired connectivity options.
• On-device storage.
• Security built into the hardware via a chain of trust that ensures only signed software can run.

VeeaHubs are compact and designed for deployment wherever routers or access points are commonly installed. They run on standard commercial power and do not require active cooling, making them ideal for both residential and enterprise environments. Models are available for indoor, outdoor, SOHO, and enterprise use cases.

Every VeeaHub provides:

• Standard Wi-Fi, Ethernet, Bluetooth®, and Zigbee connectivity with intelligent coexistence management.
• Optional 4G WAN backhaul and LoRaWAN gateway for specialized deployments.
• Automatic mesh formation and adaptation with no manual intervention required.
• Support for both small deployments and large-scale meshes covering extensive areas.

A single VeeaHub provides robust capability, but the true strength of the platform comes when multiple hubs are connected together to form a vMesh network. Using both Wi-Fi and Ethernet, these hubs create a self-organizing, resilient local mesh that can support multiple LANs. Applications running on one VeeaHub can seamlessly access IoT devices and resources connected to any other hub in the mesh.

vMesh and vBus technologies

The platform is powered by proprietary technologies:

• vMesh – Creates a self-healing, hybrid wired/wireless mesh network with optimized routing. If one node fails or is removed, traffic is automatically rerouted.
• vBus – An abstraction layer that enables applications running on any node to work seamlessly with devices, data, and storage resources across the entire mesh.

Together, these technologies ensure flexibility, resilience, and simple expansion of the network.

vMesh Fundamentals

• Every VeeaHub must be part of a mesh—even if you’re only using a single hub.
• The first VeeaHub added to a mesh becomes the Gateway Node. It handles internet access for all other hubs in the mesh. If you’re using a 4G/5G-enabled hub for cellular internet, it must be the first device added to the mesh to act as the Gateway.

Platform Security

The VeeaONE Platform is designed from the ground up with security as a core principle, protecting users, services, and applications across every layer of the system. All application privileges are carefully managed, and configuration is performed exclusively through the secure user interfaces provided by Veea.

Applications and services not included in the base software are made available through Control Center, with some requiring a subscription. Partner-developed applications must go through the official Veea Developer Program, where they are built using the VeeaHub Toolkit. Each application runs in an isolated container, fully sandboxed from other applications and from the underlying platform software, ensuring maximum separation and protection.

Access to specific VeeaHub features is governed by a licensing system, granting applications permission only for the resources they need. All applications must also be digitally signed by their developers before they can be accepted for distribution on the platform.

If a VeeaHub were ever to be compromised, the system is designed to contain the impact to that single unit and prevent it from spreading across the mesh.

Built-in Security Measures

VeeaONE implements multiple layers of protection, including but not limited to:

• Hardware Root of Trust 
  Each device validates its bootloader against a cryptographic key permanently programmed into the hardware. Only trusted bootloaders can run. A secure chain of trust extends through every stage of system startup.
• Authenticated System Images 
  The operating system and file system are cryptographically signed. Any tampering breaks the signature, and the system will refuse to load unsigned or altered software.
• Protected Keys
  Device identity keys are stored in hardware and cannot be extracted or copied. They can only be used securely within the device.
• Disabled Debug Access
  Hardware-level debugging interfaces, such as JTAG, are permanently disabled to prevent low-level tampering.
• Controlled Logins
  By default, all logins—including internal debug ports—are disabled. SSH logins may be enabled only in isolated, secure containers if required for specific use cases.
• Firewall Protection 
  The platform exposes no unnecessary network services. A built-in firewall minimizes the attack surface and helps prevent unauthorized access.

Glossary & Terms

• VeeaHub – A smart edge server that runs applications and connects devices close to where data is generated, reducing latency and boosting performance.
• VeeaCloud – The online backbone of VeeaONE. It handles account login, permissions, device management, and service deployment across your network.
• Control Center (CC) – A web-based dashboard for monitoring and managing your VeeaHubs, services, users, and networks from anywhere.
• VeeaHub Manager (VHM) – A mobile app (iOS/Android) for enrolling, configuring, and remotely managing VeeaHubs on the go.
• Container – A lightweight virtual environment that packages and runs software consistently. Most Veea services run in containers.
• Service – A deployable app made up of one or more containers. Examples include Wi-Fi services, IoT protocol bridges, and more.

Next Steps

Getting Started