Table of Contents
Introduction
We are excited to announce that the AsterNOS Router version(SONiC-VPP) for Asterfusion SONiC Router and Gateway is now available! This version not only supports Asterfusion ET2508, ET3608-2P2S, ET3616-4P4S, but also other white-box platforms.
The key advantage of this version is that AsterNOS, based on community SONiC, works together with DPDK and VPP to accelerate hardware forwarding and extend features for routing- and security-oriented applications.
With this product line, your device can function as an edge router, firewall, IDS/IPS, or other network function. Next, we will take a look at how to implement these capabilities.
Ⅰ. Asterfusion SONiC Router/Gateway Hardware
Asterfusion’s router product lineup includes ET2508, ET3608-2P2S, and ET3616-4P4S.
To begin with, Asterfusion routers can be deployed as bare-metal gateways, allowing you to install and run your own open-source or customized software stack. They support popular operating systems such as Ubuntu, Debian, and OpenWRT, and are fully compatible with a wide range of software ecosystems, including DPDK, VPP, WireGuard, Snort, HAProxy/Nginx, and ntopng.
Alternatively, customers can choose the pre-installed AsterNOS-VPP option, which is ready to use out of the box. This version already supports essential networking features such as IPSec VPN, NAT, ACLs, and QoS, while also offering advanced capabilities like RoCE, Telemetry, and SPAN/ERSPAN.
From a hardware perspective, the three router models are powered by Marvell OCTEON 10 processors:
- ET2508: Marvell OCTEON 10 CN102
- ET3608-2P2S and ET3616-4P4S: Marvell OCTEON 10 CN103
This enables our routers to meet the demands of cloud computing, 5G wireless, enterprise networks, service providers, and data centers, where high performance and reliability are critical.
On the hardware side, Asterfusion routers are equipped with comprehensive hardware accelerators, including:
Hardware ML/AI Acceleration Engine;
Hardware-based VPP Accelerator;
Integrated 1Tb Switch;
True Inline Crypto;
Highly Programmable Packet Processors;
Secure Boot;
PCIe DMA Acceleration;
High-Speed I/O;
And more…
At the software and ecosystem level, the platform provides the following capabilities:
- Feature-rich SDK with standard toolchain: GCC, GDB, BinUtils
- Virtualization and container support: KVM, Docker/CNI, OVS, Kubernetes
- Standard frameworks: DPDK, VPP, SPDK
Based on the underlying processor differences, we will next compare Asterfusion’s two SONiC-based routers to highlight their distinctions in performance and feature sets.
| Specification | ET2508 | ET3608-2P2S | ET3616-4P4S |
| CPU / DPU | 1 x Marvell OCTEON 10 CN102 8-core ARM64 2.5GHz | 1 × Marvell OCTEON 10 CN103 8-core ARM64 2.5GHz | 2 × Marvell OCTEON 10 CN103 8-core ARM64 2.5GHz |
| Cache | L2 8MB, L3 16MB | L2 8MB, L3 16MB | L2 8MB, L3 16MB |
| RAM / Memory | 16GB DDR5 SODIMM, up to 48GB | 16GB DDR5, max 48GB | 16GB DDR5, max 48GB |
| Flash / Local Storage | 64GB eMMC 5.1 | 1 × 64GB TF | 2 × 64GB TF |
| SSD (Option) | NVMe SSD up to 4TB (M.2 M key, share slot with AI accelerator)SATA SSD up to 4TB (M.2 M key, dedicated slot) | 1 × M.2 NVMe | 2 × M.2 NVMe |
| Network Interfaces | 10GE (SFP+) ×4 2.5GE (RJ45) ×4 1GE (RJ45) ×8 (Option) WiFi6E/7, M.2 E key 5G/LTE (Option) 2 SIM, M.2 B key Antenna 6 | 100GE (QSFP28) ×2 10GE (SFP+) ×2 2.5GE (RJ45) ×2 5G/LTE Option: 2 SIM, M.2 B key Antenna 4 | 100GE (QSFP28) ×4 10GE (SFP+) ×4 2.5GE (RJ45) ×4 5G/LTE Option: 4 SIM, M.2 B key Antenna 8 |
| Network Performance | L2/L3 Switching 58Gbps Routing 58Gbps Firewall 58Gbps Encryption/Decryption 58Gbps | L2/L3 Switching 200Gbps Routing 100Gbps Firewall 80Gbps Encryption/Decryption 80Gbps | L2/L3 Switching 2 × 200Gbps Routing 2 × 100Gbps Firewall 2 × 80Gbps Encryption/Decryption 2 × 80Gbps |
| PTP / SyncE | Accuracy 20ns, Holdover >8h | Accuracy 20ns, Holdover >8h | Accuracy 20ns, Holdover >8h |
| Management Interface | USB 1 × USB3.0 OOB 1 × RS232 RJ45 | USB 1 × USB3.0 Console 1 × RJ45 MGMT 1 × GE RJ45 | USB 2 × USB3.0 Console 2 × RJ45 MGMT 2 × GE RJ45 |
| Dimensions | Height 1U 220 × 44 × 310 mm | Height 1U 440 × 44 × 470 mm | Height 1U 440 × 44 × 470 mm |
You may be impressed by the ET3616-4P4S, which offers double the capacity of the ET3608-2P2S, making it ideal for high-demand data center and enterprise core deployments.
For more details, refer to Marvell OCTEON 10 CN102 and CN103.
Ⅱ. Asterfusion SONiC Router on AsterNOS-VPP
When choosing Asterfusion ET series products with bare-metal deployment,
you have the flexibility to combine open-source components and run any software that supports an ARM64 + Linux platform.
For example, you can use Ubuntu with Kubernetes and VPP (DPDK) to enable edge computing, deploy Ubuntu with O-RAN SC O-DU for O-RAN (Open Radio Access Network) solutions, configure Ubuntu with iptables and BPFILTER to function as a firewall, or run Ubuntu with Snort to implement an Intrusion Detection/Prevention System (IDS/IPS).
For more deployment options and inspiration, please visit our product page.
When choosing Asterfusion SONiC Router products with pre-installed AsterNOS-VPP as an edge router, the software runs in Docker containers.
In this architecture, AsterNOS-VPP handles policy decisions and orchestrates VPP to perform packet processing. VPP leverages DPDK along with various VPP plugins—such as QUIC, PPPoE, and Marvell device plugins—to accelerate data-plane operations.
In other words, this architecture enables layered collaboration, where AsterNOS-VPP centralizes control-plane management while VPP/DPDK delivers high-speed data-plane forwarding, achieving a balance between policy flexibility and performance acceleration.
In addition to providing core routing functionalities such as BGP/MP-BGP, PBR, and routing policies for IP unicast, AsterNOS-VPP also delivers the following capabilities:
From interfaces, an optional Wi-Fi module (2.4/5 GHz) enables the device to transmit and receive Wi-Fi signals, adding wireless access functionality to the router.
In terms of security, it supports multiple encryption and tunneling technologies, including IPSec VPN, ChaCha20/Poly1305, and WireGuard, ensuring secure and integrity-protected data transmission.
For traffic monitoring, AsterNOS-VPP supports SPAN, ERSPAN, and RSPAN, facilitating network analysis and diagnostics.
It also provides advanced networking features such as VXLAN Type 2/3/5 EVPN, dynamic tunnel configuration, VTEP address support for IPv4/IPv6, forwarding table statistics, and QoS with traffic scheduling, guaranteeing high network performance and service quality.
Based on these capabilities, you can gain a comprehensive and in-depth understanding of the SONiC-VPP-based SONiC router product line.
Ⅲ. AsterNOS Router Version with AsterNOS Campus Version
After reviewing the comparison below, it becomes clear why Asterfusion continues to actively develop AsterNOS. Different software versions exhibit functional differences; for instance, the Campus Edition and Router Edition do not offer identical capabilities. The table below highlights the key distinctions between them:
Comparison Between AsterNOS Campus Edition and Edge Edition
| Feature Category | Campus Edition | Router Edition | Key Difference |
| Wi-Fi Interface | Not supported | Optional Wi-Fi module (2.4/5 GHz) | Only Router Edition provides wireless access. |
| PoE Functionality | Basic PoE power and status diagnostics | Advanced PoE+/- modes with parameter negotiation and priority control | Router Edition offers finer-grained PoE management. |
| Interfaces & Speeds | Common data center speeds (1G/10G/25G) | Detailed interface types (RJ45 multi-rate, SFP+ WAN, etc.) | Router Edition supports more interface types and speeds. |
| Management | Console, SSH/Telnet (In/Out-of-band) | Adds Web GUI, RESTful API, remote logging, ZTP, firmware upgrades | Router Edition provides comprehensive management and unified APIs/UI. |
| VPN & Security | Not listed | IPSec VPN, ChaCha20/Poly1305, WireGuard | Router Edition provides richer security and encryption capabilities. |
| Traffic Mirroring | Not listed | SPAN, ERSPAN, RSPAN | Only Router Edition supports traffic mirroring. |
| Monitoring & Performance | CPU/memory/disk monitoring | Adds detailed platform info (fan, power, historical usage, threshold alerts) | Router Edition offers more granular monitoring with historical trends. |
| High Availability | MC-LAG status | MC-LAG domain configuration, VRRPv3, BFD | Router Edition supports advanced HA protocols. |
| Tunneling & VXLAN | Basic VXLAN/EVPN, static tunnels | VXLAN Type 2/3/5 EVPN, dynamic tunnels, IPv4/IPv6 VTEP, forwarding stats | Router Edition supports more complete and dynamic VXLAN features. |
| ACL & Flow Control | Basic ACL, 802.1X, security isolation | Fine-grained ACLs (L3/L4 fields, actions, stats, interface binding) | Router Edition provides more powerful and flexible ACL control. |
| QoS & Traffic Scheduling | Not listed | Policies, rate limiting, DiffServ, queue scheduling, CAR, flow classification, mirroring | Router Edition offers detailed QoS support. |
The comparison above demonstrates that the Router Version delivers superior performance in routing, policy enforcement, and security.
The continuous evolution from the Campus Version to the Router Version reflects Asterfusion’s ongoing software optimization and long-term maintenance, including quarterly updates. This progress not only provides customers with enhanced functional capabilities but also ensures a more seamless, unified, and sustainable ecosystem.
For more details, you can refer to the official feature lists for each version: the Campus Version and the Router Version.
Ⅳ. The Ultimate Advantage of SONiC Router with AsterNOS-VPP
Choosing the pre-installed AsterNOS-VPP solution provides not only high-performance hardware but also an integrated intelligent platform for future-ready networks. Its key advantages include:
Hardware-Software Co-Optimization
The Marvell OCTEON 10 CN102/CN103 DPUs, combined with hardware accelerators for ML/AI, VPP, inline crypto, and PCIe DMA, deliver ultra-low latency and high-throughput routing, firewall, and encryption/decryption operations.
Support for VPP and DPDK ensures highly efficient packet processing, maximizing line-rate performance while significantly reducing CPU usage.
Flexible Deployment Options
The platform can serve as an edge router, firewall, IDS/IPS, or other custom network device, allowing users to deploy according to their chosen software stack. In bare-metal mode, it can run Ubuntu, Debian, OpenWRT, Kubernetes, O-RAN SC, or other custom ARM64 Linux applications, adapting to multiple deployment scenarios.
Advanced Security and Networking Features
Native support for IPSec VPN, WireGuard, ChaCha20/Poly1305 encryption, ACLs, and QoS policies ensures enterprise-grade security. Additionally, it supports traffic mirroring (SPAN/ERSPAN/RSPAN), VXLAN Types 2/3/5, EVPN, dynamic tunnel configuration, and VTEP addressing, providing comprehensive network visibility and control.
High Availability and Observability
Redundant interfaces, modular fans and power supplies, and telemetry capabilities ensure reliable operation in enterprise, cloud, and 5G environments.
Integrated monitoring tools such as ntopng, Snort, or custom telemetry pipelines allow real-time tracking of network traffic and device status, facilitating rapid issue detection and operational optimization.
Continuous Innovation and Upgradability
AsterNOS-VPP provides quarterly updates, introducing new features, security patches, and performance enhancements to keep both software and hardware evolving. A rich SDK and standard toolchain (GCC, GDB, BinUtils) enable developers to extend functionality, integrate third-party applications, or customize routing and security behaviors, avoiding vendor lock-in.
In summary, SONiC routers equipped with AsterNOS-VPP combine industry-leading hardware with flexible, high-performance software, offering a future-proof platform for edge, enterprise, service provider, and data center deployments.
Ⅴ. Conclusion
The Asterfusion SONiC router platform represents a seamless integration of bare-metal flexibility, advanced hardware acceleration, and comprehensive software capabilities. By offering both bare-metal open-source deployment and pre-installed AsterNOS-VPP modes, users can choose the solution that best fits their network requirements:
Users can deploy highly efficient and secure routing, firewall, and IDS/IPS solutions, achieving comprehensive network protection. Alternatively, for edge computing, O-RAN, or cloud-native scenarios, users can customize their network software stack to implement a highly flexible network architecture. Additionally, with continuous software updates and ecosystem support, users can maintain operational continuity while driving ongoing technological innovation.
Ultimately, the Asterfusion SONiC router product line ensures that users can confidently build next-generation, programmable, secure, and high-performance network infrastructure, fully leveraging the capabilities of Marvell OCTEON 10 DPUs and the Enterprise SONiC ecosystem.
Related Products:
