NCoDE Peplink is a network control dashboard from Vinova Systems for anywhere running a Peplink router — vessels, offices, mobile homes, construction sites, hotels and campuses. It gives the people who depend on the network full monitoring and control of every WAN link, connected device and content policy, without handing out the router's admin password.
It runs as a Docker container on your own network and talks directly to the router's local API. Real-time control of every WAN — VSAT, Starlink, LTE, 5G — with live cellular signal metrics, per-link speed testing, MAC-level device blocking, content filtering and bandwidth history. No cloud service, no per-device licensing, and no internet connection required to manage your own network. Maritime deployments add territorial-waters alerting and Garmin OneHelm chartplotter support as licensed options.
NCoDE Peplink is packaged as a Docker container and runs either on the Peplink router itself, on Docker-capable models, or on an NCoDE Engine MX10 or MX100 alongside the rest of the platform. No dependencies, no installer, no cloud account: pull and start.
Peplink Routers
Docker-capable models (MAX BR1, Balance)
NCoDE Engine
MX10, MX100
Any Docker Host
Any compatible platform
Peplink routers are some of the best maritime networking hardware available. But their admin interface is built for IT engineers - not for crew who need to check a link, block a device, or test a speed mid-voyage.
NCoDE Peplink sits in front of the router and exposes only what the crew needs - monitoring, control, and awareness - through a single clean interface. No admin passwords shared. No risk of misconfiguration.
01 - WAN Links
Every link. Live. Controllable.
Every WAN interface on the router is displayed with its current state - active, standby, or failed. Animated gauges show real-time download and upload speeds, and per-WAN sparkline charts track recent bandwidth trends at a glance.
But this isn't just monitoring. Enable or disable individual links, set failover priorities from 1 to 4, designate the primary WAN, restore original settings, and restart cellular modems. Detailed signal metrics for every cellular modem - RSSI, SINR, RSRP, and RSRQ - tell you exactly why a link is underperforming. See which carrier and band each SIM is on, what connection technology is active, and track per-SIM data usage.
02 - Speed Testing
Test what you're actually getting.
Run real Cloudflare-based speed tests on individual WAN links. The system automatically isolates each connection during testing by disabling the others, creates a temporary firewall passthrough rule, and streams live results to animated download and upload gauges.
When the test finishes, the firewall rule is removed and all WANs are restored. Your existing router firewall configuration is never touched.
Bandwidth usage is tracked over time, from recent hours out to longer periods - pulled directly from the router where supported, with the app maintaining its own rolling history on disk where the router does not provide one.
03 - Devices & Content
Who's on. What they can reach.
Every device on the vessel network is listed with hostname, MAC address, IP, and connection status. Add custom labels so you know which device belongs to whom. Block any device with one tap - this creates a real firewall deny rule on the router, not just a UI state.
Block entire content categories with a single tap: Social Media, Streaming and TV, Adult Content, Gaming, and Gambling. These controls map directly to the Peplink router's built-in content filtering and persist across app reloads.
Manage local DNS records on the router for easy device identification, and view GPS position, speed, and heading from the router's built-in receiver.
04 - Territorial Waters
Know where you are. Automatically.
NCoDE Peplink connects to your Starlink dish and polls its GPS position, checking each fix against the 12 nautical mile territorial water boundaries of 26 European countries. The poll interval is configurable.
Three zones are identified: international, warning buffer, and territorial. When the vessel enters a warning or territorial zone, a full-screen alarm overlay activates with audio alerts showing the distance to the boundary and the country involved.
The warning buffer distance is configurable in nautical miles. The Starlink dish can also be remotely rebooted from the dashboard when needed.
05 - At the Helm · Licensed Option
On the chartplotter. Not just the laptop.
For vessels, NCoDE Peplink can appear as a native app on Garmin OneHelm chartplotters — available as an optional extra on your licence. It advertises itself on the vessel network the way Garmin expects, so the helm display finds it automatically — no manual URL entry, no pairing step.
It runs on any tablet or phone on board too — the same dashboard, wherever the person who needs it happens to be standing.
The interface is built for that environment rather than adapted to it: every button, tab and control is sized for finger navigation on a wet chartplotter screen under way. Nothing loads from the internet — every asset is bundled locally, so it works on an isolated vessel network with no connectivity at all.
Peplink routers power connectivity in 22+ industries. NCoDE Peplink works wherever your router does — no cloud dependency, no per-device licensing, no vendor lock-in.
Maritime & Offshore
Starlink territorial waters alerts, crew content filtering, WAN failover between VSAT and cellular, bandwidth management at sea.
Construction & Mining
Rapid cellular deployment for temporary jobsites. Content filtering for workforce productivity. Device management without IT staff on site.
Education
CIPA-compliant content filtering for schools. Student internet safety dashboard. Bandwidth management across campus networks.
Hospitality
Guest network content filtering. Per-device bandwidth limits. WAN failover for remote resorts running cellular and Starlink.
Public Safety
Local-first operation for OPSEC. FirstNet/T-Priority compatible. Field bandwidth testing and WAN monitoring without cloud access.
Fleet & Transport
Passenger Wi-Fi content filtering. Per-vehicle WAN monitoring. Cellular signal tracking across routes.
Why It Pays For Itself
A setting nobody checked just got three times more expensive.
On 27 September 2026 Starlink Ocean Mode data goes from $2/GB to $6/GB. The rate is not the difficult part — the difficult part is that while Ocean Mode is enabled it applies to every gigabyte the terminal consumes, regardless of where the vessel is. A terminal left in Ocean Mode alongside the dock bills crew streaming at offshore rates.
This is the whole argument for a control layer in one example. The router can already prioritise links, cap devices and fail over. What it cannot do is tell the captain, the ETO or the shore-side manager what is happening in language they can act on — without handing them the admin password. So the expensive setting stays on, and the first anyone hears of it is the invoice.
NCoDE Peplink makes the spend deliberate: live per-WAN visibility so an expensive path is obvious while it is carrying traffic, device-level blocking so one tablet cannot consume an evening's budget, and territorial-waters awareness so the question “should this be on right now?” has an answer on the bridge. Read the full breakdown of the pricing change →
SPECIFICATIONS
What it does, precisely.
Capability
Specification
What that gives you
Deployment
Docker container, running on a Docker-capable Peplink router, an NCoDE Engine MX10 or MX100, or any Docker host
No installer and no cloud account — pull and start
WAN control
Enable or disable individual links, set failover priority 1–4, designate the primary WAN, restore original settings, restart cellular modems
Crew change the link mix without holding the router admin password
Cellular diagnostics
RSSI, SINR, RSRP and RSRQ per modem, with carrier, band, connection technology and per-SIM data usage
Shows why a link is underperforming, not just that it is
Speed testing
Cloudflare-based test per WAN; other links isolated for the duration, temporary firewall passthrough created, then all links and rules restored
Measures each link on its own, leaving existing firewall configuration untouched
Bandwidth history
Recent hours through to longer periods, read from the router where supported, with the app keeping its own rolling history on disk
Usage data survives firmware that does not retain it
Device control
Hostname, MAC address, IP and connection status with custom labels; one-tap block
Writes a real firewall deny rule on the router, not a UI state
Content filtering
Social Media, Streaming and TV, Adult Content, Gaming and Gambling categories
Maps to the router's built-in filtering and persists across app reloads
Territorial waters
Starlink GPS polled against the 12 nautical mile boundaries of 26 European countries; poll interval and warning buffer both configurable (licensed option)
Full-screen alarm with audio on entering the warning or territorial zone
Garmin OneHelm
Native chartplotter app, self-advertising on the vessel network, touch targets sized for wet chartplotter screens, every asset bundled locally (licensed option)
Works at the helm on an isolated network with no connectivity at all
Frequently Asked Questions
NCoDE Peplink — FAQ
What is NCoDE Peplink?
NCoDE Peplink is a network control dashboard from Vinova Systems for anywhere running a Peplink router — vessels, offices, mobile homes, construction sites, hotels and campuses. It runs as a Docker container on your own network and connects directly to the router's local API, giving a single dashboard to monitor and control every WAN link, test line speed, block devices, apply content policy and track bandwidth use, without anyone needing the router's admin password.
Does NCoDE Peplink need a cloud account or an internet connection?
No. NCoDE Peplink talks directly to the router over your own local network, so monitoring and control keep working with no internet connection and no cloud service. It does not depend on Peplink InControl. The only feature that reaches the internet is the speed test itself, which needs a connection to measure.
Is NCoDE Peplink only for boats?
No. It works anywhere a Peplink router is deployed — offices, mobile homes and RVs, construction sites, hotels, schools and vehicle fleets all run the same dashboard. Maritime is where it started and it carries two features specific to that use, territorial-waters alerting and Garmin OneHelm chartplotter support, which are available as licensed options rather than being part of the core product.
Can NCoDE Peplink manage Starlink on a superyacht?
Yes. NCoDE Peplink reads position, status and obstruction data directly from the Starlink dish on the local network, and the dish can be rebooted from the dashboard. Starlink sits alongside VSAT and cellular as a WAN link you can enable, disable, prioritise and speed test like any other. Position sharing must be switched on in the Starlink app for the location features to work.
What happens when a vessel approaches territorial waters?
With the territorial-waters option licensed, NCoDE Peplink checks the vessel's position against 12 nautical mile boundaries for 26 European countries and identifies three zones: international, a configurable warning buffer, and territorial. On entering the warning or territorial zone it raises a full-screen alarm with an audible alert, showing the distance to the boundary and which country's waters are ahead, so the crew can apply the right connectivity policy before the vessel crosses.
Does NCoDE Peplink replace what the Peplink router already does?
No, it drives it. Bonding, load balancing and failover are the router's own functions and stay that way. NCoDE Peplink gives you command and visibility over them — enable or disable any link, reorder failover priority, promote a link to primary, restart a cellular modem, and read live signal quality per modem. Device blocking creates a real firewall rule on the router rather than a setting that only exists in the dashboard.
How does NCoDE Peplink support maritime cyber compliance?
It supports the access control and network segmentation measures expected under IMO Resolution MSC.428(98) and its guidelines in MSC-FAL.1/Circ.3 — often referred to as “IMO 2021” — and under the risk management obligations of the NIS2 Directive. Crew get the network visibility and control they need without being given router administrator credentials, device access is enforced at the router, and bandwidth use is recorded. For new-build vessels, IACS UR E26 has made network segmentation a contractual requirement since 1 July 2024.
Stop Sharing the Admin Password
Give your crew the network visibility and control they need - without giving them the keys to the router.
