Skip to main content

Open Edge Router Platform
Powered by SONiC & VPP

Asterfusion Open Edge Router Platform combines SONiC networking software,
VPP accelerated packet processing, and Marvell Octeon 10 DPU processors to deliver a high-performance,
programmable routing platform for enterprise, telecom, and edge computing networks.

Next-Gen Open Edge Platforms
Powered by
Marvell OCTEON 10

Built on CN102/CN103 DPUs to deliver wire-speed packet processing and hardware acceleration.

⚡ Intelligent Networking

🔒 Advanced IT Security

🌐 Edge Computing

🖥️ Enterprise Servers

Up to 2x 100 Gbps
L3 Forwarding Throughput
Marvell OCTEON 10
8-Core ARM64 DPU Engine
SONiC + VPP
Open Architecture AsterNOS-VPP
Learn More

Marvell OCTEON 10 CN102 Series

Marvell OCTEON 10 CN103 Series

Why Choose AsterNOS-VPP Open Routing Platform?

icon-SONiC-based

SONiC-Based Open Routing Control Plane

Leverages SONiC’s containerized microservices architecture with Redis DB management to provide a scalable and programmable routing control plane. Supports BGP/MP-BGP, OSPFv2/v3, VRF, PBR, and modern network automation through REST API, gNMI, and NETCONF.
ICON FOR VPP

VPP-Accelerated High-Performance Data Plane

Integrates VPP with SONiC through libsaivpp, translating standard SAI interfaces into accelerated packet processing. By bypassing the Linux kernel and leveraging DPDK-based user-space forwarding, AsterNOS-VPP delivers wire-speed routing performance on ARM and x86 platforms.
Icon for Hardware Accelerated Secure Networking

Hardware-Accelerated Secure Networking

Leverages Marvell OCTEON 10’s integrated inline crypto engine to accelerate IPsec and WireGuard encryption, enabling high-speed secure connectivity without consuming general-purpose CPU resources.
Icon for Open Architecture

Open Architecture with Flexible Deployment Options

AsterNOS-VPP separates networking software from proprietary hardware, enabling deployment across ARM, x86, and virtualized environments. Organizations can run the same open routing software on different platforms while benefiting from hardware flexibility.
Icon for Router & Network Platform

Unified Routing and Network Services Platform

Combines routing, gateway, VPN, security, and traffic management capabilities into a programmable software-defined networking platform for enterprise, telecom, and edge environments.
Icon for Edge Infrastructure

Optimized for Next-Generation Edge Infrastructure

Powered by Marvell OCTEON 10 DPU and designed for high-performance edge networking, AsterNOS-VPP enables scalable deployments for enterprise WAN, carrier networks,SD-WAN, 5G edge networks, and data center interconnection.

Versatile Deployment Scenarios

Designed to serve enterprise WAN edge, broadband access, and multi-tenant security requirements.

Enterprise WAN Edge & Secure VPN

Provide secure, encrypted inter-site networking across enterprise branches with wire-speed IPsec and WireGuard offloading.

supported-iconGeoSite / GeoIP based Policy Routing
supported-iconEVPN-VXLAN for overlay networks
supported-iconMulti-WAN load balancing & failover

Broadband Access Gateway (BNG)

Function as a high-density subscriber management termination router for ISPs and campus networks.

supported-iconPPPoE Server subscriber termination
supported-iconHQoS traffic control
supported-iconRADIUS AAA integration

Related Blogs

asterfusion-sonic-router-why-choose-marvell-octeon-10-chip-with-sonic-vpp-layout

Asterfusion SONiC Router -Why choose Marvell OCTEON 10 Chip with SONiC-VPP

September 12, 2025
marvell octeon gateway

Application Scenarios of the ET3600 Gateway Powered by Marvell Octeon 10 CN103 DPU

April 22, 2025
marvell-octeon-experts

Asterfusion’s Marvell OCTEON DPU Platforms-Supercharge Your Edge Computing

September 29, 2024

Marvell OCTEON 10 CN102 Powered The Ultimate Open Intelligent Bare Metal Gateway

August 7, 2024

    Frequently Asked
    Questions

    Most routing systems on the market run on x86 architecture. Why does the RT Routing Platform insist on using ARM (Marvell OCTEON) + VPP?

    When handling high-throughput packet processing (such as 100G/200G), x86 architecture incurs extremely high power consumption and heavily relies on CPU polling (Poll Mode Driver), resulting in high energy costs and OpEx.

    • Hardware Advantage: The Marvell OCTEON DPU features dedicated hardware crypto engines (Crypto Offload) and packet processing accelerators. For IPsec, NAT, or DPI workloads, its performance far exceeds x86 solutions at the same power envelope.

    • Software Synergy: VPP (Vector Packet Processing) is exceptionally optimized for the ARM microarchitecture. Combined with the SONiC control plane, it squeezes out 50 Gbps to 2×100 Gbps line-rate routing and firewall capacity on energy-efficient hardware.

    SONiC was originally designed for data center switches. Is it really suitable for enterprise edge routers and gateways?

    Traditional SONiC driving switch ASICs lacks strong L4–L7 stateful processing and complex routing, NAT, or VPN capabilities. The breakthrough of the RT Series lies in deep convergence: we seamlessly integrate SONiC’s control plane with VPP’s user-space data plane.

    • The Control Plane (standard BGP/OSPF, FRR protocol stack, uCentral unified automated O&M) leverages open-source community ecosystems and automation tools.

    • The Data Plane, powered by VPP, delivers flexible, robust, and feature-rich network services—including dynamic routing, HQoS, IPsec VPN, Stateful ACLs, and CGNAT.

    Encryption (IPsec VPN) and NAT are often performance bottlenecks for software routers. How does the RT Platform perform?

    Traditional x86 software routers often experience CPU overload and packet drops under heavy IPsec encryption or CGNAT workloads. The RT Series comes pre-loaded with Marvell OCTEON 10 (CN102/CN103) DPUs:

    • Hardware Offloading: Encryption, decryption, and complex packet processing are directly offloaded to chip-level hardware engines, freeing up general-purpose ARM CPU cores.

    • Line-Rate Throughput: For example, the RT2508 delivers up to 50 Gbps of routing, firewall, and crypto throughput, while the higher-end RT3608/RT3616 models provide 100G to 200 Gbps routing throughput and 80G+ crypto performance.

    What breakthroughs has the RT Platform achieved in fine-grained enterprise traffic management (QoS)?

    The RT Platform supports HQoS (Hierarchical Quality of Service). Unlike traditional port-based rate limiting which is coarse and unmanaged, the RT Platform enables multi-level queue scheduling (8 Queue Mapping) across Subscriber / User / User-Group tiers. By leveraging GeoIP / GeoSite databases, application recognition, or DSCP markings (e.g., prioritizing VoIP/Gaming while capping P2P/large file downloads), it guarantees zero jitter for core mission-critical applications.

    Which deployment scenarios are best suited for the RT Routing Platform?

    It is ideal for replacing expensive, proprietary, and closed chassis or box routers in the following scenarios:

    1. Enterprise & Carrier SD-WAN Edge Gateways: High-security tunnels requiring massive IPsec/WireGuard capacity alongside strict HQoS bandwidth management.

    2. Data Center & Edge Cloud Border Routers: Requiring 2x100G / 4x100G high-density uplinks running BGP, MPLS, SRv6, and VXLAN protocols.

    3. CGNAT & Campus / Enterprise Outlet Gateways: Requiring high-concurrency session handling, Stateful ACL firewalls, and large-scale Network Address Translation.

    Compared to traditional vendors like Cisco/Juniper or proprietary SD-WAN providers, what are the core advantages of the RT Routing Platform?

    The core advantages lie in disruption in performance, software-hardware disaggregation, and ultimate TCO (Total Cost of Ownership).

    • High Performance (Chip-Level Hardware Acceleration): Unlike generic soft routers, the RT Platform leverages Marvell OCTEON dedicated acceleration engines to offload IPsec crypto and CGNAT workloads directly to hardware. It maintains ultra-low latency at 100G/200G throughput while consuming only 1/3 the power of equivalent x86 servers or proprietary hardware.

    • Low Cost (No Subscription Traps): Operating on a Lifetime License (perpetual buy-out) model, software updates and technical services cost only around 10% of the hardware price annually. This drastically lowers long-term O&M and expansion expenses, bringing the total hardware cost down to 1/4 of traditional vendor pricing.

    • Open & Disaggregated Architecture: Built on the open-source SONiC architecture and standard Linux kernel, it provides RESTful APIs and Prometheus Exporters for seamless integration with Ansible and ZTP automated O&M tools. It allows deep customization, and the underlying SONiC-VPP software stack can also be ported to other x86 hardware platforms, completely liberating organizations from vendor lock-in and black-box limitations.