.NET 8.0 Cross-Platform (Win / Linux / ARM64) Decoupled GUI & Service SignalR WebSockets IPC Industrial IoT / VMS

1. Executive Summary

Uniflow is a high-performance, industrial-grade middleware platform designed to bridge the gap between diverse hardware protocols, enterprise software, and cloud ecosystems. It runs as a cross-platform service on Windows, Linux, and ARM64, providing a robust, scalable, and secure "connective tissue" for mission-critical data orchestration.

Uniflow solves protocol fragmentation by providing a unified data normalization layer and a powerful, low-latency visual rule engine. It enables real-time logic execution, cross-protocol translation, and centralized telemetry monitoring without custom coding for every integration.

Core Technical Value Propositions
  • Cross-Platform Execution: Runs natively on Windows (Service), Linux (systemd daemon), and ARM64 — 28 of 29 protocol plugins work 100% identically across all operating systems.
  • Protocol Agnostic: Unifies Modbus, OPC UA, SNMP, MQTT, BACnet, CAN Bus, and physical security VMS platforms.
  • Sequential Determinism: Guarantees predictable, priority-ordered execution sequences with sub-millisecond overhead.
  • Edge-Ready & Lightweight: Optimized for low-power industrial gateways (Raspberry Pi/Advantech) and high-density enterprise servers alike.
  • Rich Real-Time Visualization: Live topology signal graphs and telemetry monitoring dashboards rendered via D3.js and WebView2.
  • Extensible Plugin Architecture: Dynamic assembly sandboxing allows protocol extension at runtime without core service interruption.
Cross-Platform Execution Matrix
Figure 1.1: Fluent-style visualization of Uniflow cross-platform execution across Windows Service, Linux systemd daemon, and ARM64 Edge Gateways.

2. System Architecture: Distributed Client-Server Model

Uniflow utilizes a decoupled, independent client-server architecture powered by SignalR over WebSockets. This maximizes engine stability, execution performance, remote scalability, and ease of multi-node management.

2.1 Component Breakdown

Component Responsibility Technology Stack
Uniflow Service Headless background engine executing device polling, data normalization, and graph rule evaluation. Can run as multiple standalone nodes across network hosts. .NET 8.0, C#, Windows Service / Linux systemd daemon
Uniflow Independent GUI Fluent administration UI for visual graph design, source creation, and live telemetry monitoring. Connects seamlessly to single or multiple remote Service instances. .NET 8.0, Fluent UI / WinForms Shell, WebView2 (D3.js Topology Engine)
Network / IPC Layer High-speed communication bridge between GUI clients and Service instances, enabling local IPC or secure remote network administration. SignalR (WebSockets / RPC Commands & Real-Time Push Streams)

2.2 System Component Architecture Diagram

DISTRIBUTED CLIENT-SERVER ARCHITECTURE
+-------------------------------------------------------------------+
|               Uniflow Independent Administration GUI              |
|   +-------------------+  +-------------------+  +---------------+ |
|   |  WinForms/WPF UI  |  |  Topology View    |  | Rule & Source | |
|   |   Fluent Shell    |  |                   |  | Configuration | |
|   +-------------------+  +-------------------+  +---------------+ |
|                                |                                  |
|                     SignalR Client Manager                        |
+-------------------------------------------------------------------+
                                ||
                   SignalR WebSockets (RPC & Push)
                                ||
+-------------------------------------------------------------------+
|              Uniflow Background Service (Instance N)              |
|  +------------------+  +-------------------+  +-----------------+ |
|  |   SignalR Hub    |  | Rule Runtime Coord|  | Storage Registry| |
|  +------------------+  +-------------------+  +-----------------+ |
|                                |                                  |
|                    Plugin Manager (ALC Sandbox)                   |
|         +--------------+---------------+--------------+           |
|         |              |               |              |           |
|     Modbus/OPC UA  MQTT/Cloud      SNMP/Network    VMS/Security   |
+-------------------------------------------------------------------+
System Architecture Diagram
Figure 2.1: Distributed Client-Server architecture showing decoupled GUI control plane communicating with background services over SignalR.

2.3 Network Communication Flow (SignalR)

The decoupled GUI and Service engine communicate over SignalR WebSockets, allowing transparent local or remote network connections:

  • Command RPCs: Synchronous request/response calls for configuration changes (e.g., starting/stopping source adapters, updating graph rules, deploying plugin configs).
  • Real-Time Push Streams: High-frequency asynchronous telemetry streams pushing events, diagnostic logs, node state changes, and rule execution traces out to subscribed clients with sub-millisecond precision.

3. Dynamic Plugin Architecture & Data Ingestion

3.1 Sandboxed Assembly Loading (`AssemblyLoadContext`)

Rather than relying on a monolithic adapter codebase, Uniflow uses a dynamically loaded Plugin Architecture. Each protocol adapter (Modbus, OPC UA, SNMP, MQTT, File Access, ONVIF, etc.) is built as an independent assembly isolated within custom .NET AssemblyLoadContext sandboxes.

  • Hot-Swappable Runtime: Protocol plugins can be loaded, updated, or replaced at runtime without restarting the main service daemon or interrupting active rule streams.
  • Fault Isolation: Each plugin runs in a protected scope. A network fault or exception inside one protocol adapter will never crash the core engine or affect other active sources.
  • Unified Contract: All plugins implement standardized interfaces for reading, writing, address browsing, and state polling.
Dynamic Plugin Sandbox Diagram
Figure 3.1: Sandboxed AssemblyLoadContext plugin loading and telemetry data normalization architecture.

3.2 Unified Data Normalization

Every incoming telemetry signal—regardless of whether it originates from a Modbus PLC register, an SNMP OID, an MQTT JSON payload, or an Avigilon VMS alarm—is normalized into a strongly typed format. This allows visual rules to process data generically without protocol-specific branching.

3.3 Address Space Auto-Discovery

Plugins support dynamic address space browsing out of the box. Users can discover OPC UA node trees, query SNMP MIB OID structures, browse local and network file paths, or inspect Modbus address maps directly from the UI visual catalog.


4. Visual Rule Engine & Execution Safeguards

4.1 Directed Acyclic Graph (DAG) Execution

The Uniflow rule engine evaluates logic as a visual Directed Acyclic Graph (DAG):

  • Atomic Nodes: Computational blocks covering Triggers, Logic, Math, String manipulation, Flow Control, Bitwise packing, Cryptography, and Output Sinks.
  • Topological Ordering: Graph nodes evaluate strictly when all upstream inputs are fully resolved, guaranteeing deterministic computational output.
Visual Rule Engine Canvas
Figure 4.1: Visual workflow rule engine canvas with node-based DAG execution and real-time trace monitoring.

4.2 Sequential Determinism

Sequential Determinism Principle

While the execution coordinator dispatches independent workloads across .NET ThreadPool threads in parallel, rules bound to the same triggering event are executed in a strict, user-configurable priority order. This prevents race conditions and ensures predictable system behavior.

4.3 Performance Safeguards & Protection Mechanisms

  • Recursion Safety Breaker (Max Trigger Depth): To prevent CPU starvation from infinite feedback loops (e.g., Rule A updating Storage X, which triggers Rule A), Uniflow enforces a configurable trigger depth limiter. If execution depth exceeds the limit, the engine safely halts the loop and raises an execution fault.
  • Hardware Flooding Protection: Outbound write nodes feature configurable Cooldown (ms) and Debounce (ms) controls to prevent hammering physical PLCs or external APIs with rapid control bursts.
  • Event Storm Priority Scheduling: During high-traffic events, rules are dispatched according to assigned `Priority Levels` (10 to 100), ensuring critical safety rules execute ahead of background logging routines.

4.4 Dynamic Schema & JSON Payload Processing

To bridge legacy industrial hardware with modern cloud endpoints, Uniflow includes dynamic JSON object processing nodes. The engine automatically flattens deeply nested JSON structures into strongly typed visual properties, supporting full JSONPath expression extraction and canvas-level JSON serialization/deserialization.


5. Hardened Protocol Security Architecture

Security is built directly into Uniflow's protocol implementations to ensure compliance with enterprise and critical infrastructure standards:

Protocol Layer Security Mechanisms Implemented
SNMP v3 User-based Security Model (USM) with SHA-256 authentication and AES-256 privacy encryption.
OPC UA Certificate-based client/server authentication with Sign & Encrypt transport layer security (Basic256Sha256 / Aes128_Sha256_RsaOaep).
MQTT / IoT TLS 1.2 and TLS 1.3 transport security with X.509 client certificate authentication.
SignalR IPC Encrypted WebSockets with JWT token authentication for remote GUI connection management.
Protocol Security Architecture
Figure 5.1: Multi-layered protocol security architecture featuring SNMP v3 USM, OPC UA Sign & Encrypt, and TLS 1.3 X.509 encryption.

6. Interactive Topology & Real-Time Visualization

Uniflow's independent GUI provides a live view of system topology using a high-performance **D3.js graph engine** embedded inside a **WebView2** host container:

  • Visual Signal Flow: Active connections and rules pulse visually on screen as data frames flow through the system, giving operators instant awareness of active logic.
  • Node Health State Indicators: Nodes change color dynamically (Green = Healthy, Yellow = Warning/Reconnecting, Red = Fault) based on protocol connection status and rule evaluation results.
  • Deep-Dive Telemetry Snapshots: Clicking any node opens instant access to raw data buffers, live tag value tables, and execution timing logs.
Interactive D3.js Topology Dashboard
Figure 6.1: Live D3.js topology visualization dashboard with animated signal pulsing and real-time node health indicators.

7. Deployment & Integration Patterns

Uniflow supports two primary deployment topologies, which can be deployed individually or combined in enterprise environments:

Mode A: The Protocol Bridge (`System A -> System B`)

Translates data in real time between incompatible protocols and system layers without requiring an intermediate database or SCADA host.

Example: Converting Modbus PLC holding registers to MQTT JSON payloads and publishing them directly to AWS IoT SiteWise or Azure IoT Hub.

Mode B: The Unified Aggregator (`Multiple -> One`)

Ingests telemetry from dozens of disparate hardware sources, normalizes the data, and exposes the aggregated dataset under a single standard interface.

Example: Collecting telemetry from SNMP network switches, Serial sensors, and HTTP endpoints, and hosting all points under a centralized OPC UA Server node space for a master SCADA system.

Deployment Patterns Diagram
Figure 7.1: Deployment patterns: Protocol Bridge (Direct A-to-B translation) vs. Unified Aggregator (Multi-source SCADA hosting).

8. Comprehensive Protocol & Plugin Catalog

Uniflow provides native out-of-the-box support for over 29 industrial, IT, IoT, building automation, and physical security plugins:

Category Supported Plugins Primary Capabilities
Industrial Automation Modbus TCP (Client & Server), OPC UA (Client & Server), CAN Bus Register polling/hosting, node browsing, raw CAN frame parsing with Vector .DBC files.
Building Automation BACnet Agent, BACnet Walker BACnet IP device discovery, object property reading, and BACnet service hosting.
Networking & IT SNMP (Walker & Agent v2c/v3), HTTP Client, WebHook Server, TCP Client, Signal Generator OID polling, trap receiving, REST API integration, webhook ingestion, raw TCP socket bridging.
IoT & Cloud MQTT Client (Pub/Sub) TLS encrypted telemetry streaming, topic subscription, payload formatting.
Physical Security / VMS Avigilon VMS, Milestone VMS, Hexagon Lidar, SIA Receiver, SIA Agent VMS alarm/motion event ingestion, PTZ trigger control, Lidar perimeter tripwire detection, SIA alarm receiver processing.
Storage & Databases DBLink (SQL Server, MySQL, SQLite, PostgreSQL), File Access, FTP Client Database query/insert execution, local file read/write, automated remote FTP file transfers.
Hardware & Peripherals Serial Port (RS-232/RS-485), Image Processors, Bluetooth BLE, Kisan CM, Scheduler Direct COM port data streaming, optical image processing, BLE beacon scanning, cron/time-based scheduled automation.
Architecture Flow Diagram — Full Preview