ALPON Cloud

ALPON X4 · ALPON X5 AI · Sixfab Connect · Edge AI Fleet Management

ALPON Cloud is the management plane for your industrial edge AI computer fleet, accessible at connect.sixfab.com. Onboard devices, monitor telemetry, push OTA updates, deploy containers, and manage cellular connectivity from a single interface.

What is ALPON Cloud?

ALPON Cloud is the cloud-based fleet management platform for ALPON edge AI computers. It provides remote monitoring, OTA software updates, browser-based terminal access, container deployment, and cellular connectivity management for ALPON X4 and ALPON X5 AI devices, all delivered through the Sixfab Connect platform at connect.sixfab.com.

01Quick Tour 02Device Onboarding 03Fleet Management 04Monitoring & Telemetry 05Remote Access 06OTA Updates 07eSIM & Connectivity 08Container Registry 09Security & Access 10Billing & Data Pools

Quick Tour

Every ALPON device has a dedicated Asset Detail page on Connect, organized into four tabs. Each tab targets a specific aspect of edge AI computer management, from health metrics to container workloads.

Tab 01

Overview

At-a-glance summary: device status, cellular state, uptime, RAM, CPU, watchdog, running containers, and a live location map.

Tab 02

Device

Hardware telemetry: CPU usage and temperature, RAM and storage, input and base voltages, fault status, identity (S/N, MAC, IMEI), remote terminal, and OTA updates.

Tab 03

Network

Connectivity controls: interface priority, Wi-Fi pairing, modem inspection, eSIM profile management, uptime history, and Sixfab SIM data usage.

Tab 04

Application

Container workloads: deploy from Sixfab Container Registry or any public registry, manage lifecycle (start, pause, restart, remove), and stream logs.

From the Connect platform perspective, ALPON X4 and ALPON X5 AI are functionally identical. The Asset Detail layout, monitoring fields, and remote operations are the same across both edge AI computer variants.

Device Onboarding

How do I add an ALPON to Sixfab Connect?

Log in to connect.sixfab.com, open Assets from the side menu, click Register Asset, then either scan the QR code on the device or enter its serial number manually. Once registered, toggle the activation switch to bring the device online.

How to register an ALPON device

Open the Assets page

Click Register Asset

Use the Register Asset button. Two registration methods are supported:

QR scan: use the built-in scanner to read the QR code printed on the ALPON enclosure. Serial number and metadata are filled automatically.
Manual entry: type the device Serial Number printed on the label, then click Register.

Activate the asset

Open the new asset and toggle the activation switch at the top of the Asset Detail page. The device must be online and the account balance must cover at least the monthly fee.

An asset is only billed while it is in the Active state. Inactive assets cannot consume cellular data.

Verify connectivity

Within a few minutes, the Asset Detail page reports Device Status: Connected, populates CPU and memory metrics, and lists running containers.

The first 5 ALPON X4 and first 5 ALPON X5 AI devices registered to a customer account each receive a $30 balance bonus. The credit is applied automatically at registration and covers monthly fees and Pay-As-You-Go usage.

Fleet Management

Fleet management on ALPON Cloud combines two primitives: tags for organizing assets, and teams for sharing access with controlled permissions. Together they scale from a single device to large industrial deployments.

Property	Rules
Tag Key	1 to 32 characters. Letters, numbers, and underscores only. Unique per customer. Immutable after creation.
Tag Name	1 to 32 characters. Letters, numbers, underscores, and whitespace allowed. Editable.
Tag Color	Selected from a predefined color list. Optional at creation. Editable.
Deletion	Only unattached tags can be deleted. Detach from all assets first.

Teams & permissions

Teams let an account owner invite collaborators with granular, revocable permissions. Combine with tags to scope access: an owner can grant assets.manage to a developer, restricted to assets tagged development only.

Open Profile & Team Management

From the side menu of Connect, navigate to your profile and open the team management section.

Send a team invitation

Click Send Team Invitation, enter the email address of an existing Connect user, and select the permissions to grant.

Apply tag-based filtering

For asset permissions like assets.view or assets.manage, a Tags Filter appears. Restrict the member to specific tags, or check Manage All Tags for unrestricted access.

Member accepts the invite

The invitation appears as an in-app notification (no email is sent). Once accepted, the member can switch to the team via the account dropdown in the top-right corner of Connect.

Permission updates take effect immediately. If a member is using your team and you revoke their access, they are logged out the next time they navigate or perform an action.

Monitoring & Telemetry

Each ALPON device streams a structured set of metrics to ALPON Cloud, surfaced across the Overview, Device, and Network tabs of the Asset Detail page. Telemetry covers compute, power, connectivity, and physical location, suitable for operating industrial edge AI computer fleets.

Available metrics

Group	Fields
Identity	Asset Type, Serial Number (S/N), MAC address, IMEI, Architecture, OS & Distro, Hostname, Cellular Modem.
Compute	CPU total usage (%), CPU temperature (°C), RAM used / total, Storage used / total.
Power	Input voltage, Base voltage, Peripheral voltage, Input current.
Health	Watchdog status, Fault status, Peripheral on/off state, Uptime over the last 7 days.
Network	Interface priority and status (Wi-Fi, Ethernet, Cellular), Connectivity history, Modem vendor / model / firmware / IMEI / vendor ID.
Connectivity	eSIM profiles (name, vendor, ICCID, APN, network profile, status), Sixfab SIM data usage (download / upload / total).
Location	GPS coordinates plotted on a map, refreshed every 12 hours. Falls back to cell-tower estimation if GPS is unavailable.

Uptime and connectivity history

The Network tab includes a 7-day connectivity timeline rendered in 2-hour buckets. States are color-coded:

100% Operational: device fully functional during the bucket.
Partial Outage: limited functionality (one or more interfaces degraded).
Cellular Outage: cellular link unavailable, other interfaces may still be active.
Offline: device unreachable.

Device telemetry refreshes within seconds of a state change. Sixfab SIM data usage is reported with a delay of up to 2 hours; PRO SIM usage may take up to 4 hours due to cellular network counter reservation logic. Location is updated every 12 hours.

Remote Access

ALPON Cloud provides browser-based shell access to every connected device, with no SSH client, public IP, or local network configuration required. There are two access modes: Remote Terminal for the device owner, and Remote Support for time-bounded Sixfab assistance.

Remote Terminal

Open a secure shell directly from the Connect dashboard. Available for the device host or for any running container, accessed via the Application → Containers → Actions menu.

Authorized via either a valid access code (TOTP derived from the device token) or a session JWT with the required permissions.

Remote Support

Time-bounded access for the Sixfab support team to assist with troubleshooting. Owner-controlled: only the device owner can enable it; Sixfab staff cannot grant themselves access.

Access remains valid for 10 days. The owner can revoke it at any time from the Asset Detail page.

How to enable Remote Support

Open the asset on Connect, scroll to the Remote Support card on the Device tab.
Click Enable Access. A support token is generated and shared with the Sixfab team.
Sixfab staff connect via the platform backoffice while the token is valid.
Click Disable Support Token at any time to revoke access immediately.

Remote Support is gated by explicit owner consent and a hard expiry. Combined with the audit trail on Connect, this prevents silent access to deployed edge AI hardware while keeping a low-friction path for support escalation.

OTA Updates

How do OTA updates work on ALPON?

The Sixfab Embedded Software team publishes signed update bundles. When a device is running an outdated version, an Update button appears on the Asset Detail page. Updates are applied asynchronously, and progress is streamed to the dashboard in real time.

Update flow

Bundle is published

New software bundles (containing system applications and device firmware) are published by the Embedded Software team and indexed in the Connect backend.

Update button appears

If the device is running an older version than the latest available bundle, the Update Device button appears in the Device Maintenance card.

Apply the update

Click Update Device. The platform queues an async task and the device pulls the bundle, applies it, and reboots if needed. Progress streams to the UI via Server-Sent Events.

Verify completion

Once finished, the Device Version field updates to the new bundle version and the Update button disappears until the next release.

Beta channel

Devices flagged as beta on Connect receive additional update capabilities:

Can install beta-tagged bundles in addition to stable releases.
Can be updated to any selected bundle version, not only the latest one.
Useful for staged rollouts and pre-release validation across an AI on edge deployment.

OTA updates run in the background and may take several minutes depending on bundle size and connection quality. Closing the browser tab does not cancel the update; status resumes streaming when the page is reopened.

eSIM & Connectivity

ALPON Cloud manages cellular connectivity for every device through the Network tab. ALPON supports three SIM types and dynamic interface priority, providing resilient connectivity for AI gateway deployments.

Supported SIM types

SIM type	Description
Sixfab SIM (SuperSIM)	Multi-IMSI Sixfab SIM with coverage in 180+ countries and 400+ networks. Usage and billing tracked natively on Connect, with a 2-hour reporting delay.
PRO SIM	Premium connectivity with Service Profiles (USA, Europe, Global, Sleep). Per-byte billing reconciled daily at 03:00 UTC against carrier CDR reports.
eSIM (third-party)	Customer-supplied profiles installed via activation code. Profile lifecycle managed on Connect; usage of third-party eSIMs is not surfaced in dashboards.

How to install an eSIM profile

Confirm device is online

The device must be reachable on Connect for the eUICC to receive the profile. An offline device returns an error.

Add a new profile

On the Network tab, click + Add Profile. Enter the activation code provided by your eSIM vendor and click Download.

Accept terms and download

Review and accept the eSIM terms (note the restrictions on profile deletion and transfer). The status moves through Preparing and Downloading before reaching Success.

Configure APN

Click Configure on the new profile, enter the APN and Name details, then click Save. The profile is now ready to use.

Switch active profile

Use the Switch button in the Status column to move between installed profiles. The cellular modem reattaches with the new profile within seconds.

The eSIM management section is hidden on AXIS GW asset pages. Standard ALPON X4 and ALPON X5 AI devices retain full eSIM functionality.

Interface priority

Each ALPON has multiple network interfaces (Wi-Fi, Cellular, Ethernet). The active interface is selected by priority. Drag and drop entries on the Interface Monitoring card to reorder them, click Configure to apply, then Save.

Lower priority value = higher preference. The interface with priority 30 is preferred over 50.
If the highest-priority interface is unavailable, ALPON automatically falls back to the next.
Status column shows In use, Available, or Unavailable in real time.

Connect to Wi-Fi

To pair an ALPON to a Wi-Fi network from Connect:

Confirm the device is online on the Connect platform.
Click Connect to Wi-Fi on the Network tab.
Pick the SSID from the scan list, or enter SSID and password manually.
Click Connect and wait for the join to complete.

Container Registry

Sixfab provides a private Container Registry for storing application images and pushing them to ALPON fleets. The registry is integrated with Connect and pre-authenticated on every ALPON device, removing the need to manage Docker credentials per device.

What you can do

Push images

Upload private container images to your repository (username/image-name) using a generated 6-digit username and password.

Auto-pull on devices

ALPON devices authenticate with the registry automatically. They can pull from the owner's private repos and from official Sixfab images, nothing else.

Inspect & track usage

View manifests, sizes, creation dates, and which devices are running each tag. Use this view before deleting an image.

Delete safely

Remove a tag or an entire repository. Images currently used by a device are protected from deletion.

Default quotas

Limit	Default
Storage	10 GB total per account
Image tags	100 tags total per account
Quota increase	Available on request from the Sixfab engineering team

The registry password is generated and displayed exactly once when you first open the Registry page. Copy and store it in a secrets manager. If lost, use Reset Password on the Registry page to issue a new one. Registry credentials are independent from your Connect account login.

Push an image (example)

From your build machine:

# Log in to the Sixfab Container Registry
docker login cr.sixfab.io -u 123456

# Tag your image with your repository path
docker tag my-app:latest cr.sixfab.io/123456/my-app:latest

# Push it
docker push cr.sixfab.io/123456/my-app:latest

Replace 123456 with your registry username, shown on the Registry page.

Security & Access

ALPON Cloud enforces tenant isolation, time-bounded access, and explicit consent for elevated operations. The security model spans device authentication, registry access, and team permissions.

Device authentication

Every ALPON ships with a unique device token provisioned during manufacturing. Devices not registered at the manufacturing stage cannot be claimed later.
Remote terminal sessions require either a valid TOTP-derived access code or a session JWT with the right permissions; requests that meet neither are rejected.
Backend-to-device commands traverse the Sixfab Network. Long-running operations stream progress via Server-Sent Events to the dashboard.

Registry isolation

A device can pull only from its owner's repositories and from official Sixfab images. Cross-tenant access is rejected at the registry layer.
Registry credentials are scoped to push only; they cannot be used to pull. Pulls happen via the device's own machine identity.

Permission model

Connect permissions are granular and tag-aware. A team member's UI adapts to their permissions in real time, hiding controls for actions they cannot perform.

Permission	Scope
`assets.view`	Read-only access to assigned assets, optionally filtered by tag.
`assets.manage`	Activate, configure, update, and deploy to assigned assets, optionally filtered by tag.
`billing.view`	Read-only access to invoices, balance, and usage reports.
`billing.manage`	Add balance, manage payment methods, subscribe to data pools.

Sixfab support staff cannot self-assign access to your devices. Remote Support is enabled exclusively by the device owner from the Asset Detail page, expires automatically after 10 days, and can be revoked at any time.

Billing & Data Pools

How am I billed for ALPON?

Sixfab uses a prepaid balance model with auto-recharge. Each active ALPON device incurs a flat $6 monthly fee, plus cellular data charged either Pay-As-You-Go or against a subscribed Data Pool. Inactive devices are not billed.

Pricing summary

Item	Cost
ALPON device monthly fee	$6 per active device
Sixfab SIM monthly fee	$2 per active SIM
Data (PAYG)	From $0.10/MB depending on the network used
Data Pool (subscription)	Fixed monthly fee for a 30-day shared bucket; auto-renews on usage
Sixfab API	Free
Container Registry storage	Free up to default quota (10 GB / 100 tags)

How auto-recharge works

Configure a Minimum Balance Threshold and Auto-Charge Amount (at least $10) under Billing.
The system performs an hourly check on every account.
If the balance falls below the threshold, the auto-charge amount is added from the registered card.
If a card is declined three times in a row, automatic charging is paused; manual top-up is required to resume.

Data Pools

A Data Pool is a shared, prepaid data bucket used by all compatible assets in the account. Pools are reactive: a new 30-day record is created the moment a device consumes data on a covered network and a previous record has expired. Subscribing to a pool prevents fallback to higher PAYG rates.

30-day validity: unused data does not roll over after the record expires.
Reactive renewal: the next record is purchased only when usage occurs, not on a fixed date.
Coverage: only networks listed in the pool are eligible. Other networks fall back to PAYG.
Refunds: a full refund is possible if the record is unused (100% remaining) and was created in the last 20 days.

Negative balances trigger a warning timeline: Day 0 first email, Day 3 second email, Day 4 account suspension. A debt over $20 triggers immediate suspension. A successful manual payment reactivates all SIMs and devices on the next hourly check.

Next: Deploy Applications

The Application tab on each ALPON Asset Detail page is where you ship workloads to the device. Container deployment, registry pulls, lifecycle controls, log streaming, and ai gateway patterns are covered in a dedicated guide.

Continue to

Deploy Applications

In that guide: deploying your first container, pulling from the Sixfab Container Registry or any public registry, accessing containers locally and remotely, and managing the container lifecycle from the cloud.