Marvell OCTEON 10 CN103XX DPU Powered Open Router/Gateway with SONiC & VPP OS

What is Asterfusion ET3600 Open Router/Gateway?

Designed for large-scale enterprise edge, carrier, and data center environments, the Asterfusion ET3600 is a next-generation open router/gateway. It supports up to two Marvell OCTEON 10 CN103XX DPUs, each powered by an 8-core ARM Neoverse N2 processor, delivering 100 Gbps bidirectional throughput and 80 Gbps encryption acceleration—bringing exceptional power and efficiency to your network.

At its core, the ET3600 runs SONiC-VPP routing operating system, Asterfusion’s self-developed open routing OS built on SONiC. By combining SONiC’s robust control plane with VPP’s high-performance data plane, it delivers a fully functional, high-speed routing solution. It supports dynamic routing protocols (BGP, OSPF), IPSec VPN, NAT, and QoS, and is versatile enough to run on x86, ARM, or virtualized environments supporting VPP.

The ET3600 takes openness to the next level with support for Ubuntu, Debian, SONiC, and an ecosystem that includes VPP, KVM, Kubernetes, iptables, and O-RAN SC. Whether for enterprise edge, carriers, or data centers, it redefines flexibility, offering a powerful, open, and intelligent networking solution.

Why Choose the Marvell OCTEON 10 CN103XX-based Asterfusion ET3600?

Marvell OCTEON 10 + SONiC & VPP: Powering Next-Gen Networking

Powered by the Marvell OCTEON 10 DPU, the ET3600 unites the SONiC control plane with the VPP data plane, delivering 100G/200G line-rate forwarding with exceptional routing and security. As both an enterprise routing powerhouse and a carrier-grade egress solution, it boasts a high-efficiency architecture and an open, scalable ecosystem, ready to meet the demands of cloud computing, data centers, and backbone networks.

Marvell OCTEON 10 CN103: Compute & Network Convergence Redefined

Designed for seamless compute-network integration, the Marvell OCTEON 10 CN103 merges general-purpose computing with high-performance hardware forwarding in a single SoC. Compared to x86, it delivers superior efficiency and performance in unified environments. With dedicated acceleration engines, it maximizes data processing while minimizing power consumption—offering an ideal solution for deep compute-network fusion.

Asterfusion ET3600: Secure, High-Speed Networking at Scale

Featuring a high-performance Embedded Encryption and Decryption Engine, the Marvell OCTEON 10 CN103 efficiently processes L4-L7 traffic, accelerating firewalls, IPSec VPNs, and SSL/TLS encryption. With up to 80Gbps throughput, it ensures low-latency, high-security forwarding and deep packet inspection (DPI) in high-speed networks. Its advanced architecture makes it a perfect fit for cloud computing, data centers, carrier networks, and enterprise security, providing a high-performance, low-power foundation for modern networking.

ARM SoC: Energy-Efficient, Cost-Effective, and High-Performance

Compared to x86, ARM SoC architecture offers superior energy efficiency and cost savings. By integrating CPU, GPU, DSP, AI accelerators, and storage controllers into a single chip, it reduces manufacturing costs while maximizing performance-per-watt. With a RISC-based design and advanced power management, ARM SoCs deliver unmatched efficiency for targeted applications.

Open Networking, Your Way: Flexible, Vendor-Neutral, Scalable

Beyond our pre-installed SONiC-VPP routing system, our platform supports a vast open-source ecosystem, including security, routing, and SD-WAN solutions. Users can install the software that best fits their needs, eliminating vendor lock-in and unlocking the full potential of open networking.

ET3600 Device Highlights

Marvell OCTEON 10 CN103XX Chip:

• 8 x 64-bit ARM Neoverse N2 core，2.7 GHz
• 8 MB L2 and 16 MB L3 cache
• 2 at 5600MTS DDR5
• 100 Gbps bidirectional throughput
• Embedded encryption and decryption engine
• A computing and switching Fusion Processor

Hardware features:

Prestalled Operating System-SONiC-VPP

The ET3600 comes preloaded with Asterfusion’s SONiC-VPP operating system, built on SONiC and paired with VPP (Vector Packet Processing) to deliver exceptional data forwarding performance. Compared to traditional routing OSes, AsterNOS-VPP offers superior scalability and flexibility across both control and data planes. Even better, it can run independently on third-party routing platforms as a gateway or router, tackling diverse challenges with ease.

Core Features at a Glance:

• Dynamic routing protocols (BGP, OSPF)—the smart backbone of network navigation
• IPSec VPN, NAT, QoS mechanisms—security and efficiency in one package
• Runs on x86, ARM, and virtualized environments (VM)—adaptability without limits

For commercial hardware, we’ve put a lot of care into adapting SONiC-VPP under the hood. It’s designed to work smoothly with platforms like Marvell, Broadcom, and Intel—nothing flashy, just solid compatibility we’re proud of. We’ve done our best to make it seamless, and we hope it serves your network well!

We’re quietly excited to share that this software is set to launch by the end of Q2 2025. We won’t dive into the details just yet—partly because we’re still putting the finishing touches on it. By the close of Q2, we’ll have everything ready for you, and we hope you’ll find it worth the wait.

Other Operating Systems

• Supports Ubuntu, Debian, plus a lineup of Linux distributions including CentOS, OpenSUSE, Arch Linux, AlmaLinux, Rocky Linux, Linux Mint, and Elementary OS—options galore!
• Licensed support for pfSense and OPNsense—firewall fans rejoice
• Install or upgrade the OS via USB with ARM Trusted Firmware and UEFI—simple and efficient
• Embedded eBPF (Extended Berkeley Packet Filter) integrated into the Linux kernel via XDP—network performance, elevated

Software Ecosystem

• Optimized DPDK (Data Plane Development Kit) tied to hardware acceleration—speed that soars
• Open-source routers: VPP, OpenWRT, DD-WRT, and more—a stellar lineup for routing
• Open-source firewalls: iptables, UFW, pfSense, OPNsense, IPFire, nftables, Firewalld, Shorewall, Untangle, and beyond—comprehensive security coverage
• Open-source VPNs: OpenVPN, WireGuard, IPSec, L2TP, Shadowsocks, Trojan, VMess, and others—privacy and connectivity, sorted
• Open-source IDS/IPS: Snort, Suricata, Zeek, and more—top-tier threat detection
• Open-source load balancers: HAProxy, Nginx, Traefik, and others—traffic management masters
• Open-source network traffic analyzers: ntopng, Elasticsearch + Kibana + Beats, Argus, Softflowd, and more—data insights at a glance
• DPDK-powered open-source projects: DPVS, Gatekeeper, IMTL, Open vSwitch, SPDK, and beyond—innovation unleashed
• Rich VPP plugins: Marvell device plugin, QUIC, SRv6, LLDP, NAT64, LACP, SRTP, and more—features for every need
• Toolchains like GCC, GDB, BinUtils, Buildroot—developers’ best friends
• Support for C/C++, Python, Go, Rust, Java, Lua, and other languages—code your way
• PyTorch, TensorFlow, TF Lite, Keras, ONNX—AI development, simplified
• Run apps from other Linux distros on Ubuntu/Debian via Docker with direct host network access—flexibility redefined
• Any ARM64 + Linux software—endless possibilities

Application Scenarios

The Asterfusion ET3600, preloaded with SONiC-VPP, is ready to handle enterprise routing and carrier egress duties straight out of the box—but it’s got bigger ambitions! Leveraging an open hardware-software disaggregated architecture, it marries a powerful suite of open-source software on the control plane with a hardware-optimized data plane, unlocking a world of application scenarios and versatile combinations. Here’s where the ET3600 truly shines.

Cloud Edge Gateway: Preloaded with SONiC-VPP—Enterprise Routing Powerhouse and Carrier Egress Star

• The Cloud Edge Gateway facilitates deployment in sophisticated edge routing scenarios, including Cloud-to-Public Internet Interconnectivity for efficient egress traffic management, Multi-Cloud Interconnectivity Routing for secure and scalable cloud federation
• A hardware-agnostic control plane, supporting protocols such as BGP and VXLAN, to manage complex traffic for edge gateways
• Hardware-optimized vector packet technology and DPDK accelerate data plane forwarding, delivering up to 2 x 100Gbps forwarding performance
• Comprehensive QoS policies for precise management of traffic from different applications

SD-WAN: SONiC-VPP + FlexiWAN

• Enables traffic forwarding and optimization for Enterprise branch-to-branch connectivity and Cloud connectivity
• SONiC-VPP delivers a high-performance control plane and data plane, enabling robust routing and network acceleration
• FlexiWAN provides an SD-WAN management platform, enhancing centralized control, policy enforcement, and user experience

Intelligent Security Gateway: SONiC-VPP + Wireguard

• SONiC-VPP with WireGuard, along with NAT (Network Address Translation) and ACL (Access Control List) functionalities, can serve as a flexible and high-performance security gateway
• Hardware-accelerated VPN with encryption/decryption engine supports up to 2 x 80Gbps throughput
• WireGuard benefits from an 8-core CPU for accelerated performance.

Edge Computing: Ubuntu + Kubernetes + VPP (DPDK)

• Oriented to Edge computing scenarios that meet low-power and real-time requirements, such as local real-time processing and analysis of data generated by numerous IoT devices
• Kubernetes manages edge applications (e.g., IoT data processing, AI inference), supporting dynamic scheduling
• AI inference benefits from an AI Acceleration module that delivers 40 Tera-Operations Per Second (TOPS) of performance with a power consumption of just 3.5 watts

ARM Server: NFV Acceleration Offload in Cloud Networks

• Replaces x86 servers, offloading NFV tasks to the ET3600—efficiency doubled
• Combines Ubuntu + Kubernetes + KVM (DPDK) to scale with growing cloud traffic (e.g., virtual firewalls), ensuring high availability—growth, no limits
• Hardware-accelerated Kubernetes scheduling and VNF QoS—performance, maximized

O-RAN xHaul

• Adopting a combination of open-source software, such as Ubuntu +O-RAN SC O-DU, augmented with PTP and GNSS modules, it can be deployed in O-RAN Network scenarios as Distributed Unit
• O-DU handles the physical layer (PHY) and certain functionalities of Layer 2 (L2) protocols
• The PTP/SyncE module achieves a time synchronization accuracy of 20ns, supports Boundary Clock mode, and maintains high precision for over 8 hours in holdover conditions.

NFV Acceleration Offload in Cloud Network

• Adopting a combination of open-source software, such as Ubuntu + Kubernetes + KVM (DPDK), it supports scalability with growing cloud traffic (e.g., adding vFirewalls), ensuring high availability
• Hardware-accelerated optimization for Kubernetes scheduling and VNF QoS
• Kubernetes: Containerized deployment of VNFs (e.g., vIPS, vLoadBalancer), supporting a microservices architecture

Plus, users can install new software or craft custom solutions with the built-in toolchain, unlocking even more use cases. The ET3600 isn’t just a device—it’s your master key to the network world!

Pluggable Modules with M.2 Form Factor: Customization at Your Fingertips

The ET3600 is designed with four flexible, pluggable modules in the M.2 form factor, allowing enterprises to tailor the device to their unique requirements. These modules can support a variety of functionalities including:

• 5G/LTE: Insert a 5G SIM card to enable 5G uplink routing.
• SSD: Expand storage capacity.
• AI hardware accelerator : Implement advanced functionalities like face recognition and temperature detection.

This modularity ensures that the ET3600 can evolve alongside your enterprise’s needs.

Ready to Revolutionize Your Network? Choose the Marvell OCTEON 10 CN103XX based ET3600 Today!

Why go with the usual when you can ignite the exceptional? The Asterfusion ET3600 isn’t just a gateway—it’s your launchpad to a next-level network, preloaded with our cutting-edge SONiC-VPP system based on SONiC. This powerhouse fuses SONiC’s rock-solid control with VPP’s lightning-fast data plane, delivering blistering 100/200Gbps speeds, boundless flexibility across open-source ecosystems, and efficiency that leaves x86 servers in the rearview—all tailored for large enterprises, carriers, and data centers. Whether it’s cloud edge gateway and interconnectivity, SD-WAN, or security, edge computing ,the ET3600 makes it happen, your way. Don’t just follow the future—define it. Grab your ET3600 now and supercharge your network with ET3600!

Q&A about Asterfusion ET3600 Open Router/Gateway:

Q1: Wait, I spotted two hardware options in the picture—does that mean there are two ET3600 models?A: You’ve got a sharp eye! Yep, the ET3600 series comes in two models, each tailored to power up your network in its own way:

• Model 1: A single Marvell OCTEON 10 CN103XX chip flexing 4 × 100GE (QSFP28), 4 × 10GE (SFP+), and 4 × 2.5GE (RJ45)—perfect for high-speed action.
• Model 2: Dual Marvell OCTEON 10 CN103XX chips bringing 2 × 100GE (QSFP28), 2 × 10GE (SFP+), and 2 × 2.5GE (RJ45)—built for extra muscle and reliability.

Here’s the juicy core config for the single DPU version:

• 8-core ARM 64-bit Neoverse N2 processor—pure processing power.
• 100 Gbps programmable Ethernet switching ports—speed that sizzles.
• 80 Gbps hardware-level encryption/decryption engine—security on lockdown.

And the dual DPU version cranks it up:

• Same 8-core ARM 64-bit Neoverse N2 processor—times two!
• 200 Gbps programmable Ethernet switch ports—bandwidth that roars.
• 160 Gbps hardware encryption/decryption engine—fortress-level protection.
• Plus dual-node high availability (HA) or active-standby mode—your business keeps humming, no matter what.

You can choose between the two models according to your network needs.

---

Q2: It’s an open router and gateway—does it come with a pre-installed OS, or are we starting from scratch?

A: Great question! The ET3600 arrives ready to roll with our homegrown SONiC-VPP, an open routing OS built on SONiC. Picture this: we’ve fused SONiC’s rock-steady control plane with VPP’s turbocharged data plane to create a routing beast that’s as smart as it is fast. What’s on the menu? Dynamic routing protocols like BGP and OSPF, IPSec VPN, NAT, QoS—all the good stuff, ready to tackle your network needs. It’s so versatile, it can run on any x86, ARM hardware, or VM that supports VPP—adapting like a champ.

---

Q3: So, it’s preloaded with your SONiC + VPP system, but can customers still swap in other open OSes or software?

A3: If you do not install our built-in SONiC+VPP routing operating system, you can also install other open source operating systems you want. The supported operating systems and open source software are clearly stated in the article. it comes preloaded with an underlying operating system. Customers can choose from Ubuntu 24.04 or Debian 12. The appeal lies in its flexibility, allowing users to install the open-source software they need. Additionally, development kits like DPDK and VPP are available on our GitHub repository for further customization.