For Builders

Built by engineers.
For engineers.

API-first. Open source OpenWrt agent, managed platform. Self-hosting available under licence on Enterprise. The platform you'd build yourself if you had 3 years and a team of 14.

ac-client on GitHub → Operator tier — $0.50/device

Open Source

ac-client is BSD 3-Clause.
Ship it on any OpenWrt box.

The USP/TR-369 device agent for OpenWRT. 1,500+ router models. Full TR-181:2.16 data model. Post-quantum TLS. One opkg install and your router is managed.

# Install on OpenWRT
opkg update
opkg install ac-client

# Configure
# Defaults already point at the controller.

# Start
/etc/init.d/ac-client enable
/etc/init.d/ac-client start

# Device appears in your Aether dashboard instantly

Full TR-181:2.16 data model

30+ DM modules: WiFi, DHCP, hosts, firewall, QoS, diagnostics, firmware, security, VoIP, bulk data, GNSS. Complete device visibility.

2 MTPs supported

The agent speaks WebSocket and MQTT. The platform terminates all four USP MTPs — WebSocket, MQTT, STOMP and CoAP — so you can bring your own agent on any of them.

Post-quantum TLS

X25519 + ML-KEM-768 mTLS via step-ca provisioned certs. Future-proof device-to-cloud security from day one.

Claim by proof of possession

Set one token in UCI config. Device auto-links to your tenant on first boot. No portal login, no per-device manual registration.

API-first

The UI is optional.
The API is not.

Every action in Aether is available via REST and GraphQL. If you can imagine a curl command for it, we have an endpoint.

List all managed devices

curl -H "Authorization: Bearer $TOKEN" \
  https://api.optimcloud.com/v1/devices

# Response
{
  "devices": [
    {
      "id": "dev_7f3a9b",
      "serial": "AP-001-CAFE",
      "protocol": "ucentralv2",
      "status": "connected",
      "uptime_s": 432800
    }
  ]
}

Push a config change

curl -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"ssid":"MyNet","band":"5g"}' \
  https://api.optimcloud.com/v1/devices/dev_7f3a9b/wifi

# Delta pushed to device as a JSON Patch
# JSON Patch RFC 6902 — 200 bytes not 50KB

On-Premise

Need it on your infra?
Enterprise has you covered.

Aether runs as a managed service by default. Self-hosted and on-premise deployment are available under separate licence on the Enterprise tier — for carriers with data residency requirements or operators who need full infrastructure control. Kubernetes-based, Helm-deployed, same codebase as cloud.

# Add Aether Helm repo
helm repo add aether https://charts.optimcloud.com/aether
helm repo update

# Install with bundled dependencies
helm install aether aether/aether \
  --namespace aether --create-namespace \
  --set global.domain=aether.yourdomain.com \
  --set global.storageClass=standard \
  --values values.yaml

# Port 8080 → operator portal
# Port 443  → device connections (WebSocket/MQTT)
# Port 8883 → MQTT broker

RUNTIME

Single Rust binary

No JVM, no Node, no Python

MEMORY

<512 MB base

Single binary on commodity hardware

LATENCY

200 B config delta

JSON Patch, not full config push

Built by engineers. For engineers.

ac-client is BSD 3-Clause.Ship it on any OpenWrt box.