Enterprise-Grade Routing OS
Powered by SONiC & VPP for Routers/Gateways

SONiC control plane combined with a VPP data plane delivers ultra-fast routing, secure VPN, and full network automation.

Start Now

Documentation

Pricing Plans

Flexible editions designed to grow with your network.

Free

$0

Forever Free

VRF, BGP, OSPF v2/v3
VXLAN,IPSec VPN
SNAT,DNAT,DNAT Pool
PPPoE Client
Stateless ACL
QoS

X86 Only

Download

Commercial

$999

+10% Annual Upgrade Fee

RIP v1/v2, MPLS
L2TPv3, GRE, Wireguard
CGNAT, MAP-E/MAP-T
PPPoE Client & Server
GeolP/GeoSite, SPI
HQoS

X86 Platform | ARM

Contact Sales

Enterprise

$1399 $1699

+10% Annual Upgrade Fee

Software Specification:

Same as the previous “Commercial”

Hardware Spec & Perf.

4 x 10GE, 4 x 2.5GE and 8 x 1GE

Routing capacity: 58Gbps
Firewall capacity: 58Gbps
Enc/Dec capacity: 58Gbps

HW+SW Bundle(ARM)

Contact Sales

Need Guidance on
Choosing

Not sure what’s right for you?
We can help you with your plan.

Contact Us

Spotlight Features

Explore the detailed feature comparison across Free, Commercial, and Enterprise editions of AsterNOS VPP.

Planned SupportSupportedUnsupported

Feature	Level 1 Function	Level 2 Function
Interface	Port Speed	1G/100M/10M
Interface	PoE Features	PoE Enable/Disable
Interface	PoE Features	Power delay
Interface	PoE Features	15W/ 30W / 60W
Interface	PoE Features	Priority: Low/High / Critical
Interface	PoE Features	Legacy Detect
Interface	PoE Features	PoE Timer Control
Interface	PoE Features	LLDP PoE Negotiation
Interface	PoE Features	PoE Power Monitor
Interface	Module Info	Presence / Absence
Interface	Module Info	Vendor info
Interface	Module Info	Optical Power
Interface	Bandwidth Alert	RX / TX Thresholds
Interface	Bandwidth Alert	Both Threshold
Interface	Batch Config	H/W Interfaces
Interface		LAG
Interface	LAN IF	4×2.5G/1G + 8×1G/100M/10M RJ45
Interface	WAN IF	4×10G SFP+
Interface	Wi-Fi Interface	Optional 2.4/5GHz Module
IP Unicast Routing	PBR	-
IP Unicast Routing	RIP v1/v2	-
MPLS	Basic MPLS	Static LSP(Multi nexthop)
MPLS	Basic MPLS	MPLS LDP
MPLS	Basic MPLS	LDP Security mechanism
MPLS	Basic MPLS	MPLS QoS
MPLS	VPN	VPWS(Static & Dynamic)
MPLS	VPN	VPLS
MPLS	VPN	L3VPN
NAT	Twice NAT	-
NAT	VRF Aware	-
NAT	NAT Hairpinning	-
NAT	CGNAT(Carrier-grade NAT)	-
NAT	MAP-E	-
NAT	MAP-T	-
Tunnel	GRE	L2/L3 tunnel
Tunnel	GRE	IPv4/IPv6
Tunnel	GRE	encap/decap stats
Tunnel	VXLAN	VTEP v4/v6
Tunnel	VXLAN	Static VXLAN
Tunnel	L2TPv3 VPN	-
Tunnel	IPsec VPN	Policy-Based (bypass / discard / protect)
Tunnel	Wireguard security VPN	Netbird Support
Tunnel	Wireguard security VPN	Encryption: ChaCha20-Poly1305 (RFC7539 AEAD)
Tunnel	Wireguard security VPN	Key Exchange: Curve25519 (ECDH)
Tunnel	Wireguard security VPN	Hashing: BLAKE2s (RFC7693)
Tunnel	Wireguard security VPN	Table keys: SipHash24
Tunnel	Wireguard security VPN	KDF: HKDF (RFC5869)
Tunnel	PPPoE Client	-
Tunnel	PPPoE Server	Support CHAP authentication and MTU/MRU adjustment
Tunnel	PPPoE Server	Support binding to Physical/Sub-interfaces; Max 8 Server instances
Tunnel	PPPoE Server	Radius User Authentication
Security	User Access AuthN	Portal
Security	DHCP v4/v6 Snooping	-
Security	ND Snooping	-
Security	ND policy	-
Security	DAI (Dynamic ARP Inspection)	-
Security	IPSG v4/v6	-
Security	ACL	Support GeoIP & GeoSite library for traffic classification
Security	ACL	Stateless/Stateful
Security	*SPI(Stateful packet inspection)	-
Security	Unicast Reverse Path Forwarding (uRPF)	-
QoS	Priority Mapping	dot1p to tc
QoS	Priority Mapping	dscp to tc
QoS	Priority Mapping	tc to queue
QoS	Queue Schedule	Strict
QoS	Queue Schedule	DWRR
QoS	HQoS	Multi-level shaping (Subscriber/User/User-group)
QoS	HQoS	Service-Level:8 queues mapping
QoS	HQoS	Traffic identification based on GeoIP/GeoSite and DSCP (EF/AF/CS for VoIP/Gaming).
High Availability	SLA	-
High Availability	SLAAC	-
High Availability	Routing Track	-
High Availability	Hash	-
Monitoring & Management	Prometheus exporter	-
Monitoring & Management	RestfulAPI	-
Monitoring & Management	uCentral	-
Interface	Port Speed	2.5G
Interface	Port Speed	10G
Interface	Port Config	(no shutdown) / shut down
Interface	Port Config	start delay
Interface	Interface Stats	Packets / Octets / Errors / Drops / Speed
Interface	Loopback IF	64 x Loopback
Interface	WAN IF	PPPoE / DHCP / Static IP
IP Unicast Routing	Static Routing	-
IP Unicast Routing	VRF	L3 Port Isolation
IP Unicast Routing	VRF	VLAN IF Isolation
IP Unicast Routing	VRF	LAG IF Isolation
IP Unicast Routing	VRF	Neighbor Isolation
IP Unicast Routing	VRF	LPM Isolation
IP Unicast Routing	VRF	Inter-VRF Forwarding
IP Unicast Routing	BGP / MP-BGP	-
IP Unicast Routing	OSPF v2/v3	-
IP Unicast Routing	Routing Policy	Route Map
IP Unicast Routing	Routing Policy	Prefix List (v4/v6)
IP Unicast Routing	ECMP/UCMP	-
IP Multicast	IGMP Snooping	enable/disable IGMP Snooping
IP Multicast	IGMP Snooping	static IGMP Snooping
IP Multicast	IGMP Snooping	dynamic IGMP Snooping
IP Multicast	IGMP Snooping	IGMP v1/v2/v3 Support
IP Multicast	IGMP Snooping	entry limit based on IGMP member port
IP Multicast	IGMP Snooping	IGMP Snooping mulicast query
IP Multicast	IGMP Snooping	IGMP Snooping Porxy
IP Multicast	MLD Snooping	enable/disable MLD Snooping
IP Multicast	MLD Snooping	dynamic MLD Snooping
IP Multicast	MLD Snooping	MLD v1/v2 Support
IP Multicast	MLD Snooping	entry limit based on member port
IP Multicast	MLD Snooping	MLD Snooping multicast query
IP Multicast	MLD Snooping	MLD Snooping Porxy
IP Multicast	PIM	enable/disable PIM
IP Multicast	PIM	PIM-SM Features (ASM/SSM & SPT Switchover)
IP Multicast	PIM	PIM Interface Support (Phy/VLAN/LAG) for IPv4/IPv6
MPLS	Basic MPLS	Interface: Enable/Disable on Physical Port
NAT	1:1 NAT / Port Forward	-
NAT	TCP MSS Clamping	-
NAT	Static / Dynamic Mapping	-
NAT	Sub-Port Support	-
NAT	IF Support (Phy/VLANIF/LAG/Loopback)	-
NAT	SNAT/DNAT/DNAT POOL	-
Tunnel	VXLAN	EVPN VXLAN
Tunnel	VXLAN	VXLAN gateway
Tunnel	VXLAN	encap format(v4 over v4, v6 over v4)
Tunnel	VXLAN	VXLAN Stats encap/decap
Tunnel	IPsec VPN	Route Based VPN
Tunnel	IPsec VPN	IKEv2
Tunnel	IPsec VPN	Diffie-Hellman (DH)
Tunnel	IPsec VPN	Message Authentication Code (MAC) algorithm support:
Tunnel	IPsec VPN	Encryption: AES (CBC/GCM/CTR), 3DES, ChaCha20/Poly1305
Tunnel	IPsec VPN	Encryption/Decryption support hardware offload
Service	ARP/NDP	-
Service	DHCPv4/v6 Server and Relay	-
Service	DNS	-
Security	BUM Ctl	-
Security	User Access AuthN	Dot1x
Security	ACL	Ingress/Egress
Security	ACL	Match: MAC/IP/L3/L4 Fields
Security	ACL	Permit/Deny
Security	ACL	Hit Statistics
Security	ACL	Port/LAG/VLAN/SubIF Bind
Security	ACL	CtrlPlane (NTP/SNMP/SSH/Telnet)
QoS	Rate Limit (RFC2697/2698/4115)	per port
QoS	Rate Limit (RFC2697/2698/4115)	per queue
QoS	Shaping	per interface
QoS	Flow Classify	IACL + CAR Binding
QoS	Flow Classify	EACL
QoS	Flow Classify	CAR (Committed Access Rate)
QoS	Qos Status	show IF qos stats
High Availability	MC-LAG	-
High Availability	VRRP	Backup group (HW/VLAN IF)
High Availability	VRRP	VRRPv3 (RFC5798)
High Availability	VRRP	Advertise interval / priority config
High Availability	VRRP	Master auto send ARP/ND
High Availability	BFD	-
High Availability	Monitor Link	-
Monitoring & Management	SPAN/ ERSPAN	-
Monitoring & Management	SNMP	-
Monitoring & Management	NetFlow/IPFIX	-
Monitoring & Management	ZTP (Zero Touch Provisioning)	-
Monitoring & Management	SSH	-
Monitoring & Management	Telnet	-

Reliable Updates & Support

Lifetime license, quarterly releases, and expert assistance for hassle-free operations.

Lifetime License

One-time purchase with a perpetual license; first-year updates included.

Quarterly Releases

Major updates every three months, plus frequent minor patches for stability.

Full Support

Access manuals, guides, and responsive assistance for smooth deployment.

Frequently Asked Questions

Your Guide to Software Versions, Deployment & Support

Is the Free Version available for download?

Yes. You can download the free version and install it on x86-based devices to enjoy the benefits of open networking. A step-by-step installation guide is available here. Click here to view it. Please note that no additional technical support is provided for the free version.

What’s the difference between the Free Version and the Paid Version?

The free version is limited to x86 platforms. The Paid Edition offers significant improvements in two aspects:

First, in terms of services, it provides exclusive technical support and consulting services;
Second, in terms of functionality, it adds multiple extended capabilities. For example, the tunneling technology supports MPLS, L2TPv3, GRE, and Wireguard VPN, and the address translation function supports CGNAT, MAP-E/MAP-T, etc.
For more extended functions of the paid version, you can learn about them in detail through the comparison table at the top of this page.

I want to deploy on ARM platforms. What are my options?

We don’t offer a standalone software license for ARM. For ARM deployments, Asterfusion provides hardware-software bundles that include AsterNOS VPP with the ET2508 product. Additionally, we offer the ET3608 and ET3616 series to meet your needs across different scenarios. All these solutions are available at competitive prices and come pre-integrated with AsterNOS VPP, delivering excellent performance and value.

What kind of technical support does Asterfusion provide?

With the paid edition, you’ll receive:

A perpetual software license
Comprehensive technical documentation
Online service response and remote support via email or meetings
Real-time remote assistance
Regular software updates following a structured release policy

AsterNOS follows a predictable update schedule that applies to all editions, including:

Quarterly major releases (at least 4 per year) that synchronize with Community SONiC
More frequent minor releases containing enhancements, fixes, and patches for the current version, which can be released at any point during the major version support cycle.

Can I upgrade from the Free Version later?

Absolutely. You’re welcome to start with the free version and upgrade to a paid plan at any time for additional features and support.

What happens when my subscription expires? Will I still receive technical support?

After your subscription expires, you can continue to receive full technical support services by simply paying an annual renewal fee equal to 10% of the original license cost.

Can I cancel my subscription at any time?

Yes. Subscriptions are valid for one year (with no automatic renewal). At the end of your subscription term, you may choose not to renew, and your subscription will conclude naturally without further charges.

Low Latency Data Center Switch

Campus Access & Aggregation

Wireless Access Point

OpenWiFi Network Controller

Marvell OCTEON Platform

Optical Transceiver

Open Packet Broker

Network Packet Broker

P4-Programmable Switch

AI Networking

Enterprise-Grade Routing OS
Powered by SONiC & VPP for Routers/Gateways

Pricing Plans

Need Guidance on
Choosing

Spotlight Features