Nuvoton MA35D1 Industrial Linux Gateway – Linux At The Edge Without The Datacentre Overhead
- 4 days ago
- 7 min read
Introduction – Linux at the edge without bringing a server
A lot of industrial gateways and HMIs today run a full Linux stack, but the hardware underneath is often a small PC or a large application processor that carries datacentre‑style overheads in power, BOM and software maintenance.
Nuvoton’s MA35D1 series takes a different approach: it is a heterogeneous dual Cortex‑A35 plus Cortex‑M4 microprocessor, designed from the outset as an embedded Linux edge gateway platform rather than a cut‑down server. With integrated stacked DDR2/DDR3L MCP, dual Gigabit Ethernet MACs, up to 17 UARTs, 4× CAN FD, TFT‑LCD with 1080p video and a dedicated security island, it covers most of what industrial designers currently use x86 boxes for, but in a smaller, lower‑power and more controlled form factor.
If you are building protocol converters, industrial gateways or graphical HMIs and want Linux at the edge without dragging in a PC architecture, MA35D1 is worth a serious look.
Features that make MA35D1 a gateway MPU
At the heart of MA35D1 is a heterogeneous compute cluster:
Dual 64‑bit Arm Cortex‑A35 cores up to 800 MHz, each with 32 KB I‑cache, 32 KB D‑cache and a shared 512 KB L2 cache, including NEON and Armv8 crypto extensions for efficient Linux and userland workloads.
A 32‑bit Cortex‑M4 core up to 180 MHz with FPU, MPU and its own tightly‑coupled SRAM, intended for hard real‑time tasks while the A35 cores run Linux.
This split lets you run a full Linux distribution (Nuvoton references mainline Linux and OpenWRT support) on the A35 cluster while offloading deterministic I/O and control loops to the M4.
For memory, MA35D1 integrates:
A 16‑bit DDR2/DDR3/DDR3L controller up to 533 MHz (effective DDR data rate), supporting up to 2 GB external SDRAM.
Package options with stacked DDR2/DDR3L SDRAM (multi‑chip package) up to 512 MB, available in LQFP‑216 and BGA packages, which cuts PCB layers and EMI and simplifies routing for gateway‑class boards.
On the I/O side it is clearly aimed at gateways and HMIs:
Two Gigabit Ethernet MACs with RMII/RGMII, IEEE 1588 support, energy‑efficient Ethernet and jumbo frame capability up to 16 KB.
Up to 17 UARTs and 4× CAN FD controllers with 2 Kword message RAM each, satisfying serial‑heavy and CAN‑based industrial installations.
Two SD/eMMC interfaces (SDIO 3.0 and eMMC HS200), dual USB 2.0 HS (dual‑role + host‑only), QSPI and SPI, plus I2C and other peripherals.
A TFT‑LCD controller supporting 24‑bit RGB at up to 1920×1080 at 60 fps, a 2D graphics engine, JPEG decoder and H.264 decoder up to 1080p45, plus dual CMOS sensor interfaces.
Security is not bolted on as an afterthought. The MA35D1 includes:
Trusted Secure Island (TSI), an isolated security subsystem hosting AES, SHA, RSA, ECC, SM2/3/4 and TRNG engines, key store and OTP.
Secure boot, TrustZone for the A35, tamper pins and mechanisms aimed at IEC 62443‑class device security.
Those blocks mean you can realistically design a Linux gateway that handles OT protocols, VPNs, certificates and secure boot without needing extra security ASICs or TPMs.
Headline specs for MA35D1 as an industrial gateway
A subset of key parameters relevant to gateway and HMI designs:
Aspect | Key data (MA35D1) |
|---|---|
CPU complex | Dual Cortex‑A35 up to 800 MHz with 512 KB shared L2; Cortex‑M4 up to 180 MHz with FPU and dedicated SRAM |
Memory | 128 KB boot ROM; up to 384 KB SRAM; external 16‑bit DDR2/DDR3/DDR3L up to 2 GB; stacked DDR MCP up to 512 MB in selected LQFP/BGA packages |
Display / graphics | TFT‑LCD controller up to 1920×1080@60; 2D graphics engine; JPEG decoder up to 16368×16368; H.264 decoder up to 1920×1080@45 fps |
Ethernet | 2× Gigabit Ethernet MACs with RMII/RGMII, IEEE 1588 PTP, jumbo frames up to 16 KB, EEE support |
Serial / fieldbus | Up to 17 UARTs; 4× CAN FD (ISO 11898‑1:2015) with up to 64‑byte payload and 2 Kword message RAM each |
Storage | NAND and SPI NOR/SPI NAND boot; SD/SDHC/SDXC; eMMC HS200; USB mass‑storage via USB 2.0 HS |
Security | Trusted Secure Island, TrustZone, secure boot, AES/SHA/ECC/RSA/SM2/3/4, TRNG, key store, OTP, tamper pins |
Packages | LQFP‑216 with DDR MCP (24×24 mm); BGA‑312 MCP DDR (15×15 mm); BGA‑364 external DDR (14×14 mm) |
Temperature / longevity | Industrial temperature range (e.g. −40 °C to 105 °C/125 °C Tj, package‑dependent); MA35 family parts added to Nuvoton 10‑year longevity programme 2026–2036 |
Nuvoton’s own application material highlights MA35D1 being used in:
Industrial motion control platforms with CODESYS SoftPLC, EtherCAT, Modbus, EtherNet/IP and OPC UA on Linux, using the A35 cores for PLC logic and networking while the M4 manages fast axis control.
Industrial HMI operator panels with 15.6" Full HD displays, 2D graphics and video decode, serial + Ethernet connectivity and 24/7 operation requirements.
Those are very similar to the kinds of projects Ineltek’s customers build with x86 or high‑end MPUs today.
Where MA35D1 beats x86 or over‑spec’d MPUs
MA35D1 will not replace a server‑class x86 – that is not the point. The question is whether you really need a PC‑class CPU in the panel or gateway, or whether a focused MPU will do the job better.
Power and thermal budget
A dual Cortex‑A35 at 800 MHz plus M4 typically lands well below the power of an x86 SoC running a similar workload, which simplifies enclosure design, removes fans and reduces failure points.
Integrated DDR MCP up to 512 MB on‑package reduces I/O power and improves EMI, compared with external DIMMs or SO‑DIMMs on higher‑speed buses.
BOM and PCB complexity
LQFP‑216 or BGA‑312 with stacked DDR is significantly simpler to route than a high‑pin‑count x86 plus separate DDR4/DDR5 interface; you avoid long differential traces, tight length matching and additional power rails.
You also save BOM on power management (fewer rails and sequencing requirements) and on external security devices, because TSI covers a lot of the secure boot and crypto needs.
I/O mix that matches industrial reality
Dual GbE, 17 UARTs and 4× CAN FD on MA35D1 map naturally onto “two networks plus a stack of serial things and CAN” which describes many real gateways.
By contrast, PC‑class platforms often require multiple external UART, CAN or GPIO expanders to achieve the same connectivity, adding BOM, board area and driver complexity.
Software stack fit
Nuvoton highlights mainline Linux and OpenWRT support, with customers running CODESYS SoftPLC (IEC 61131‑3) on the A35 cluster and real‑time control on the M4.
A smaller, purpose‑built Linux image on MA35D1 is easier to keep patched and controlled than a general‑purpose OS image on x86, and you are less tempted to accumulate “IT‑style” services you do not actually need at the edge.
Lifecycle and availability
MA35D1 devices with DDR MCP are flagged for long‑term availability, with MA35 family PNs planned into Nuvoton’s product longevity programme (2026–2036).
Many x86 parts are tied to PC refresh cycles, which can lead to shorter lifecycles or unexpected platform changes for industrial customers.
In short, if your gateway needs Linux, graphics, dual Ethernet and fieldbus, but not an entire datacentre stack, MA35D1 gives you a better match between silicon capabilities and application needs.
Industrial gateway and HMI use cases
Industrial edge gateway
A classic scenario is a DIN‑rail gateway aggregating PLCs, drives and sensors, then talking northbound to SCADA or cloud services.
Dual GbE lets you separate OT and IT networks or implement redundant links.
17 UARTs and 4× CAN FD cover a wide mix of legacy and modern field protocols without external bridges.
The A35 cluster can run Linux with CODESYS, MQTT, OPC UA and secure tunnels, while the M4 monitors local I/O and handles fast safety‑related functions.
Industrial HMI panel
For an HMI, MA35D1’s display and video blocks are the differentiators:
Parallel RGB TFT up to 1080p60 with hardware cursor, OSD and 2D graphics acceleration supports smooth GUIs without an external GPU.
Hardware JPEG and H.264 decode enable live video feeds and diagnostics in the HMI interface with modest CPU load.
With DDR MCP and BGA‑312 packages, you can place the MPU close to the display connector, reducing high‑speed routing.
EV charging and energy gateways
Nuvoton positions MA35D1 for new energy, including EV charger controllers and energy management systems.
Dual GbE supports separate metering and back‑office connections.
CAN FD, UART and USB allow integration with power electronics, smart meters and wireless modules.
TSI security and crypto blocks facilitate encrypted billing, firmware protection and secure remote updates.
Smart building and city infrastructure
For smart building gateways, escalator/lift controllers or city infrastructure, the balance of connectivity and graphics is again useful:
One MA35D1 can host a small HMI, serve a web GUI over Ethernet, and coordinate multiple field buses.
The industrial temperature range and long‑term availability address 10‑year lifecycle projects.
Conclusion
Nuvoton’s MA35D1 is what you get if you start from “industrial Linux gateway and HMI” requirements and work backwards into silicon, instead of trimming a PC down until it fits in an enclosure.
Dual Cortex‑A35 plus Cortex‑M4, stacked DDR MCP, dual GbE, high UART/CAN count, strong security and 1080p HMI support add up to a practical platform for edge Linux without the datacentre overhead of x86 or oversized MPUs.
If you are considering MA35D1 for a new gateway, protocol converter or HMI, contact Ineltek to review your use case, compare it against your current x86 or MPU platform, and select the right MA35D1 variants, memory options and supporting components to get a robust design into production.
FAQs - Nuvoton MA35D1 Linux Industrial Gateway at the Edge
Q. When does Nuvoton MA35D1 make more sense than a low-end x86 for an industrial gateway or HMI?
A. MA35D1 is usually the better choice when you need dual Gigabit Ethernet, up to around 512 MB–1 GB RAM, lots of UARTs and CAN FD, fanless low‑power operation and a strong secure‑boot and IEC 62443‑aligned security story, rather than PCIe lanes and general‑purpose PC expandability.
Q. How does the Cortex-M4 fit into a Linux-based MA35D1 gateway architecture?
A. The 180 MHz Cortex‑M4 acts as a real‑time and safety island for time‑critical loops, fast sampling and monitoring, continuing to operate independently of Linux; hardware semaphores and “Wormhole” channels provide deterministic communication between the A35 Linux side and the M4 side.
Q. Can MA35D1 run Linux plus CODESYS SoftPLC and industrial field protocols on the same platform?
A. Yes, Nuvoton showcases MA35D1 running Linux with CODESYS SoftPLC (IEC 61131‑3) alongside EtherCAT, Modbus, EtherNet/IP and OPC UA, using the A35 cores for PLC logic and networking while the M4 handles real‑time industrial control tasks.
Q. What makes MA35D1 suitable as a display-enabled HMI controller as well as a gateway?
A. MA35D1 integrates a 1080p60 TFT‑LCD controller, 2D graphics engine, JPEG and H.264 decoders plus stacked DDR MCP options, so a single device can drive rich GUIs and video on an HMI panel while simultaneously handling Ethernet, serial and CAN traffic.
Q. How does the stacked DDR MCP option help industrial designers?
A. Having DDR2/DDR3L SDRAM stacked in the MA35D1 package up to 512 MB simplifies PCB routing, reduces layer count and EMI, shrinks the overall board area and avoids complex high‑speed DDR layout, which is particularly advantageous for compact gateways and panel PCs.
Q. What security features does MA35D1 offer for hardening Linux gateways at the edge?
A. MA35D1 includes a Trusted Secure Island with AES/SHA/RSA/ECC/SM2/3/4 engines, key store and OTP, TrustZone, secure boot and tamper pins, providing a hardware root of trust, secure key storage and protection against code tampering aimed at IEC 62443‑class requirements.
