Asterfusion’s Open Packet Broker Solution is built on SONiC NOS. PB-APP runs as a SONiC containerized application across Asterfusion 1G–800G switches, while FusionNOS delivers advanced capabilities on Asterfusion DPU-based platforms.
Asterfusion’s Open Packet Broker Solution is built on SONiC NOS. PB-APP runs as a SONiC containerized application across Asterfusion 1G–800G switches, while FusionNOS delivers advanced capabilities on Asterfusion DPU-based platforms.
To meet diverse deployment needs, Asterfusion offers two software tiers.
PB-APP
Designed for core network visibility and traffic processing, PB-APP provides essential functions such as packet replication, aggregation, and load balancing—ideal for standardized, large-scale deployments on Asterfusion’s full 1G–800G switch portfolio.
Running on Asterfusion platforms with Marvell Octeon DPUs, delivers deep traffic intelligence for analytics and security, including advanced matching, filtering, NetFlow, IP reassembly, and packet anonymization.
CX306P-48S-M-H unites PB-APP and FusionNOS in one. Core packet broker functions run on the CPU, while dual Marvell Octeon CN103 DPUs enable advanced traffic analysis—basic and advanced NPB in a single system.
This solution simplifies architecture, lowers total cost of ownership, and scales effortlessly, delivering a flexible and cost-effective next-generation network monitoring and visualization platform.
In Bypass Mode, the Packet Broker passively monitors network traffic without being in the direct data path.
In Inline Mode, the Packet Broker is placed directly in the data path, enabling active traffic manipulation and security enforcement. This deployment model reduces optical transceiver consumption, enables traffic security service chaining, and delivers ZR module savings in DCI/WAN ZR environments.
PB-APP Preloaded HW Platforms Support Standard Features
Standard Feature-Ready Platforms
SKU
Port Configuration
Switching Capacity
Packet Buffer
Power Supplies
Fan Modules
Dimensions(WxHxD)
CX864E-N
64x 800G OSFP, 2x 10G SFP+
51.2 Tbps
200+ MB
2 (1+1) Hot-pluggable
4 (3+1) Hot-pluggable
440x87x660 mm
CX732Q-M-H
32x 400G QSFP-DD, 2x 10G SFP+
12.8 Tbps
48 MB
2 (1+1) Hot-pluggable
6 (5+1) Hot-pluggable
440x44x515 mm
CX664D-N
64x 200G QSFP56, 2x 10G SFP+
12.8 Tbps
70 MB
2 (1+1) Hot-pluggable
4 (3+1) Hot-pluggable
440x88.8x560 mm
CX564P-N
64x 100G QSFP28, 2x 10G SFP+
6.4 Tbps
70 MB
2 (1+1) Hot-pluggable
4 (3+1) Hot-pluggable
440x88.8x560 mm
CX532P-M-H
32x 100G QSFP28, 2x 10G SFP+
3.2 Tbps
24 MB
2 (1+1) Hot-pluggable
5 (4+1) Hot-pluggable
440x44x515 mm
CX308P-48Y-M-H
48x 25G SFP28, 8x 100G QSFP28
2.0 Tbps
24 MB
2 (1+1) Hot-pluggable
4 (3+1) Hot-pluggable
440x44x515 mm
CX204P-16Y-M-E
16x 25G SFP28, 4x 100G QSFP28
1.09 Tbps
6 MB
2 (1+1) Hot-pluggable
3 Fixed Fans
440x44x470 mm
CX202P-24Y-M-H
24x 25G SFP28, 2x 100G QSFP28
800 Gbps
8 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX202P-24S-M-H
24x 10G SFP+, 2x 100G QSFP28
1.09 Tbps
6 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX204P-24S-M-E
24x 10G SFP+, 4x 100G QSFP28
1.09 Tbps
6 MB
2 (1+1) Hot-pluggable
3 Fixed Fans
440x44x470 mm
CX206P-24S-M-H
24x 10G SFP+, 6x 100G QSFP28
1.09 Tbps
6 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX206P-48S-M-H
48x 10G SFP+, 6x 100G QSFP28
1.09 Tbps
6 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX202P-16S-M-H
16x 10G SFP+, 2x 100G QSFP28
1.09 Tbps
6 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX102S-8MT-M-S
8x 2.5G RJ45, 2x 10G SFP+
72 Gbps
3 MB
1 Fixed Power
2 Fixed Fans
215x44x310 mm
CX102S-8MT-M-SWP
8x 2.5G RJ45 PoE++, 2x 10G SFP+
72 Gbps
3 MB
1 Fixed Power
2 Fixed Fans
215x44x310 mm
CX204Y-24MT-M-S
24x 2.5G RJ45, 4x 25G SFP28
-
-
1 Fixed Power
2 Fixed Fans
440x44x470 mm
CX204Y-24MT-M-SWP4
24x 2.5G RJ45 PoE++, 4x 25G SFP28
-
-
1 Fixed Power
3 Fixed Fans
440x44x470 mm
CX206Y-48MT-M-H
48x 2.5G RJ45, 6x 25G SFP28
-
-
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX206Y-48MT-M-HWP8
48x 2.5G RJ45 PoE++, 6x 25G SFP28
-
-
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX102S-8GT-M-SWP
8x 1G RJ45 PoE++, 2x 10G SFP+
72 Gbps
3 MB
1 Fixed Power
2 Fixed Fans
215x44x310 mm
CX102S-16GT-M-SWP
16x 1G RJ45 PoE+, 2x 10G SFP+
72 Gbps
3 MB
1 Fixed Power
2 Fixed Fans
215x44x310 mm
CX204Y-24GT-M-S
24x 1G RJ45, 4x 25G SFP28
180 Gbps
3 MB
1 Fixed Power
3 Fixed Fans
440x44x290 mm
CX204Y-24GT-M-SWP2
24x 1G RJ45 PoE+, 4x 25G SFP28
180 Gbps
3 MB
1 Fixed Power
3 Fixed Fans
440x44x290 mm
CX204Y-24GT-M-SWP4
24x 1G RJ45 PoE+, 4x 25G SFP28
180 Gbps
3 MB
1 Fixed Power
3 Fixed Fans
440x44x290 mm
CX204Y-48GT-M-S
48x 1G RJ45, 4x 25G SFP28
210 Gbps
3 MB
1 Fixed Power
3 Fixed Fans
440x44x290 mm
CX204Y-48GT-M-SWP4
48x 1G RJ45 PoE+, 4x 25G SFP28
210 Gbps
3 MB
1 Fixed Power
3 Fixed Fans
440x44x290 mm
CX206Y-48GT-M-H
48x 1G RJ45, 6x 25G SFP28
210 Gbps
3 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX206Y-48GT-M-HWP4
48x 1G RJ45 PoE+, 6x 25G SFP28
210 Gbps
3 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
CX206Y-48GT-M-HWP8
48x 1G RJ45 PoE++, 6x 25G SFP28
210 Gbps
3 MB
2 (1+1) Hot-pluggable
3 (2+1) Hot-pluggable
440x44x470 mm
PB-APP’s Feature Lists
Feature
Level 1
Level 2
Level 3
Inteface
Ethernet Port
1G/10G
Inteface
Ethernet Port
25G
Inteface
Ethernet Port
40G
Inteface
Ethernet Port
100G
Inteface
Ethernet Port
400G
Inteface
Ethernet Port
Breakout Mode
4*10G/1G
Inteface
Ethernet Port
Breakout Mode
4*100G
Inteface
Ethernet Port
Breakout Mode
4*25G
Inteface
Management
Startup & Shutdown
Inteface
Management
Startup delay
Inteface
Management
FEC
Inteface
Management
Loopback
Inteface
Management
Port Static
Packets & Bytes
Inteface
Management
Port Static
Multicasts packets
Inteface
Management
Port Static
Error & Drop & Over packets
Inteface
Management
Port Static
Speed & Utilization ratio
Inteface
Management
Port Static
V4/V6 Packets
Inteface
Management
Port threshold alarm
Inteface
Management
Module Information Acquisition
In-position information
Inteface
Management
Module Information Acquisition
Manufacturer information
Inteface
Management
Module Information Acquisition
Optical power information
Inteface
Management
Module Information Acquisition
Relevant threshold information
Inteface
Management
Port type
Service
Inteface
Management
Port type
Network
Inteface
Management
Port type
Tool
Inteface
Management
Port type
Hybrid
Inteface
Management
Input/Output multiplexing
Inteface
Management
Traffic statistics export
Inteface
Management
Network config
MAC
Inteface
Management
Network config
IP
Inteface
Management
Batch port configuration
Inteface
Management
Show/Hide Columns
Inteface
Hash Mode
Global hash
Src-dst-ip
Inteface
Hash Mode
Global hash
Src-dst-ip-port
Inteface
Hash Mode
Global hash
Src-dst-mac
Inteface
Hash Mode
Global hash
Src-dst-mac-ip
Inteface
Hash Mode
Global hash
Src-dst-mac-ip-port
Inteface
Hash Mode
Custom hash
Src-ip
Inteface
Hash Mode
Custom hash
Dst-ip
Inteface
Hash Mode
Custom hash
Src-port
Inteface
Hash Mode
Custom hash
Dst-port
Inteface
Hash Mode
Custom hash
Src-mac
Inteface
Hash Mode
Custom hash
Dst-mac
Inteface
Hash Mode
Custom hash
Symmetry MAC
Inteface
Hash Mode
Custom hash
Symmetry IPv4
Inteface
Hash Mode
Custom hash
Symmetry IPv6
Inteface
Hash Mode
Custom hash
Symmetry L4
Inteface
Hash Mode
Custom hash
Custom Symmetry Src IPv4
Inteface
Hash Mode
Custom hash
Custom Symmetry Dst IPv4
Inteface
Hash Mode
Custom hash
Custom Symmetry Src IPv6
Inteface
Hash Mode
Custom hash
Custom Symmetry Dst IPv6
Inteface
Tunnel Stripping
CFP
Inteface
Tunnel Stripping
ERSPAN
Inteface
Tunnel Stripping
GRE
Inteface
Tunnel Stripping
GTP
Inteface
Tunnel Stripping
IPinIP
Inteface
Tunnel Stripping
PPPoe
Inteface
Tunnel Stripping
MPLS
Inteface
Tunnel Stripping
VXLAN
Inteface
Rule Type
L2 rule filtering
Adjust priority based on a specific policy
Inteface
Rule Type
L3 rule filtering
Source MAC
Inteface
Rule Type
L4 rule filtering
Outer VLAN
Inteface
Rule Type
L5 rule filtering
EtherType
Inteface
Rule Type
L6 rule filtering
Any combination of the above fields
Inteface
Rule Type
L3/L3V6 rule filtering
IP Version
Inteface
Rule Type
L3/L3V7 rule filtering
Outer VLAN
Inteface
Rule Type
L3/L3V8 rule filtering
Source IP Support Mask
Inteface
Rule Type
L3/L3V9 rule filtering
Destination IPv6Support Mask
Inteface
Rule Type
L3/L3V10 rule filtering
Destination IPv4 Support Mask
Inteface
Rule Type
L3/L3V11 rule filtering
Source Port
Inteface
Rule Type
L3/L3V12 rule filtering
Destination Port
Inteface
Rule Type
L3/L3V13 rule filtering
IP Protocol
Inteface
Rule Type
L3/L3V14 rule filtering
IPv4 Frag
Inteface
Rule Type
L3/L3V15 rule filtering
DSCP
Inteface
Rule Type
L3/L3V16 rule filtering
ICMP-Type
Inteface
Rule Type
L3/L3V17 rule filtering
VLAN Priority
Inteface
Rule Type
L3/L3V18 rule filtering
Source MAC
Inteface
Rule Type
L3/L3V19 rule filtering
Any combination of the above fields
Inteface
Rule Type
EX rule filtering
Destination MAC
Inteface
Rule Type
EX rule filtering
Source MAC
Inteface
Rule Type
EX rule filtering
Source IPV4
Inteface
Rule Type
EX rule filtering
Outer VLAN
Inteface
Rule Type
EX rule filtering
EtherType
Inteface
Rule Type
EX rule filtering
VNI
Inteface
Rule Type
EX rule filtering
TCP Flag
Inteface
Rule Type
EX rule filtering
Any combination of the above fields
Inteface
Port Range Matching
EX rule filtering
Inteface
Match Mode
Inner layer matching after tunnel stripping
Inteface
Match Mode
Inner Layer Matching in MPLS Tunnels
Inteface
Match Mode
Filtering in the TX direction at the port
Inteface
Action
Add/Modify/Delete outer vlan in forward mode
Inteface
Action
Add timestamping
Inteface
Action
Dst MAC modification
Inteface
Rule Management
Rule search
Inteface
Rule Management
Rule hit num reflush/clean
Inteface
Rule Management
Rule hit bytes reflush/clean
Inteface
Rule Management
Show/Hide Columns
Inteface
Rule Management
Select all rules
Inteface
Rule Management
Deselect all rules
Inteface
Rule Management
Select range rules
Inteface
Rule Management
Adjust priorities
Highest Priority
Inteface
Rule Management
Adjust priorities
Lowest Priority
Inteface
Rule Management
Adjust priorities
Adjust priority based on a specific policy
Forward policy
Mirror
Ports SPAN to ports
Forward policy
Mirror
Ports RSPAN to port
Forward policy
Mirror
Ports ERSPAN to L3 port
Forward policy
Mirror
Ports/LAG SPAN to ports with ACL
Forward policy
Mirror
Ports/LAG RSPAN to port with ACL
Forward policy
Mirror
Truncation of 128 bytes
Forward policy
Replication
Ports/LAG Copy to LAG with ACL
Forward policy
Replication
Ports/LAG Copy to ports witch ACL
Forward policy
Replication
Ports/LAG Copy to ports +LAG with ACL
Forward policy
Forward
Ports/LAG forward to LAG with ACL
Forward policy
Forward
Ports/LAG forward to port with ACL
Forward policy
Forward
Ports/LAG forward to drop with ACL
Forward policy
Management
Enable/Disable policy
Forward policy
Management
Set color for policy
Forward policy
Management
Copy a set of forwarding policies for re-editing
Forward policy
Management
Policy hit num reflush/clean
Forward policy
Management
Policy hit bytes reflush/clean
Load balancing
Mode
flex mode
Load balancing
Mode
static mode
Load balancing
Mode
weight mode
Load balancing
Mode
standby mode
Port priority
Load balancing
Mode
standby mode
LACP port preemption
Load balancing
Mode
standby mode
Rate-first
Load balancing
Mode
standby mode
priority-first
Load balancing
Mode
standby mode
Port preemption delay configuration
Load balancing
Management
Fixed load balancing members
Load balancing
Management
hash seed
Management
& Monitoring
Device Management
User interface
Console
Management
& Monitoring
Device Management
User interface
SSH
Management
& Monitoring
Device Management
User interface
Telnet
Management
& Monitoring
Device Management
User interface
CLI
Management
& Monitoring
Device Management
User interface
RESTful API
Management
& Monitoring
Device Management
User interface
WEB UI
Management
& Monitoring
Online Pdate
User interface
Management
& Monitoring
Time Synchronization
PTP
Management
& Monitoring
Time Synchronization
NTP
Management
& Monitoring
License
NTP
Management
& Monitoring
Devops
Ansible
Management
& Monitoring
LLDP
Ansible
Management
& Monitoring
File Transfer
FTP
Management
& Monitoring
File Transfer
TFTP
Management
& Monitoring
Condition Monitoring
Temperature information
Management
& Monitoring
Alarms
Fan information
Management
& Monitoring
Alarms
Power supply information
Management
& Monitoring
Alarms
Version information
Management
& Monitoring
Alarms
System time
Management
& Monitoring
Alarms
Displaying Management Port Information
Management
& Monitoring
Alarms
Display CPU/Memory usage status
Management
& Monitoring
Alarms
Temperature alarms
Management
& Monitoring
Alarms
Power out of position alarms
Management
& Monitoring
Alarms
Fan out of position alarms
Management
& Monitoring
Alarms
Traffic overflow alarms
Management
& Monitoring
Alarms
SNMP
Management
& Monitoring
Alarms
Syslog
Management
& Monitoring
Alarms
Exporter to Prometheus
FusionNOS Preloaded HW Platforms Support Advanced Features
Support port multiplexing; support automatic monitoring of port link status and security protection
Basic Management Features
Support serial port, SSH, RestAPI, CLI management methods
Basic Management Features
Supports online security upgrades
Basic Management Features
Support configuration file import and export
Basic Management Features
Supports NTP clock synchronization
Basic Management Features
Supports SYSLOG log management
Basic Management Features
Supports LLDP sending
Basic Management Features
SNMP support
Statistical Properties
Support device status statistics, including system memory and CPU usage
Statistical Properties
Supports interface information statistics, including interface configuration and status, interface packet type statistics, interface packet count and rate statistics.
Statistical Properties
Supports rule hit statistics, reorganization function statistics, de-duplication function statistics, NetFlow statistics
Unified Core & Advanced Features on the CX306P Platform
Dual-Engine Power for Unified Traffic Intelligence The CX306P combines the wire-speed efficiency of Marvell ASIC with the deep processing power of dual Marvell Octeon10 DPUs in a single-machine solution.
Core (ASIC): Handles wire-speed filtering, replication, and packet modification.
Advanced (DPU): Preloaded with FusionNOS for SSL decryption, deduplication, and signature matching.
Key Value: Run PB-APP and FusionNOS simultaneously via a Unified Web UI to deliver comprehensive visibility while significantly reducing TCO.
Asterfusion Open Packet Broker is an open, SONiC-based traffic visibility and packet brokering solution. Instead of relying on proprietary hardware and closed operating systems, it delivers packet broker functionality as software running on standard SONiC switches—offering greater openness, flexibility, and scalability.
The solution utilizes the native hardware encryption capabilities of the switch ASICs and supports MACsec (Media Access Control Security) technology. This enables the NPB to implement line-rate encryption at the data link layer without additional hardware costs, effectively preventing traffic eavesdropping risks in long-distance transmission (e.g., ISP dark fiber).
Automated Deployment: Provides Ansible templates that support one-click operation of thousands of policies through Ansible Playbooks, solving the inefficiency of traditional Web UI configuration.
Visualization Monitoring: Integrated with Prometheus and Grafana templates, enabling real-time monitoring of critical metrics such as CPU, traffic rate, and packet loss, addressing the lack of a unified monitoring view in traditional NPBs.
PB-APP is a containerized packet broker application running on SONiC. It provides essential packet broker functions—such as traffic replication, aggregation, filtering, and load balancing—by leveraging the switch ASIC for line-rate forwarding, while keeping the application logic independent from the hardware.
PB-APP is hardware-agnostic and decoupled from port speeds. Since it runs as a SONiC containerized application, the same PB-APP software can be deployed consistently across switches ranging from 1G to 800G, delivering identical packet broker behavior regardless of bandwidth.
The DPU (Data Processing Unit) offloads compute-intensive packet processing tasks from the switch ASIC and CPU. By integrating DPU acceleration, Asterfusion enables advanced packet inspection and traffic processing without compromising line-rate forwarding performance.