Traditional network appliances run every function in one monolithic image. A bug in one feature can take down the whole box, and a security patch for one service means upgrading, and often rebooting, everything at once.
Hermes runs each service, such as routing, firewalling, IDS/IPS and telemetry, as its own isolated container. A fault in one service cannot cascade into the rest, a single function can be upgraded in place, and each service gets exactly the resources it needs. The same services run in our cloud, your cloud or at the edge.