Asterfusion’s Open Packet Broker Solution is built on SONiC NOS. PB-APP runs as a SONiC containerized application across Asterfusion 1G–800G switches, while FusionNOS delivers advanced capabilities on Asterfusion DPU-based platforms.
Backed by 15+ years of NPB innovation and deployment experience, our solution—now in its third generation,has been widely adopted by global telecom operators, leading banks, national power grids, as well as leading enterprises across automotive, finance, academia, and aviation industries.
01
Trace Every Packet with Nanosecond-Precision Hardware Timestamping
IEEE 1588v2 PTP-powered high-precision header timestamping. Ideal for performance profiling, security auditing, and fault demarcation.
02
Full-tunnel parsing for total traffic visibility
Decapsulates GRE, VXLAN, GTP-U, MPLS, ERSPAN, and PPPoE.
Matches inner-layer 5-tuple for carrier- and cloud-level traffic visibility.
03
L2–L4 Full-dimension, Precision Traffic Capture
Multiple ACL types are supported: L2, L3, L3V6, EX, EM, and EMV6.
Rich criteria matching: 5-tuple, VLAN, MAC, port range, TCP flags, VNI, DSCP, and inner/outer IP.
04
Traffic Replication to LAGs, Load Balancing and Redundancy in One
Replicates traffic to ports, LAGs, or mixed groups for flexible multi-system analysis.
Supports Static, Elastic, Weighted, and Standby LAG with hash tuning for load balancing and high availability.
05
Open APIs for Seamless Integration with Prometheus and Grafana
Open standard APIs for seamless third-party system integration.
Supports SNMP, Syslog, and Prometheus/Grafana integration.
06
DPI Failure Auto-Bypass, Ensuring Zero Traffic Disruption
Dual normal/bypass paths with automatic failover to bypass mode and predefined forwarding templates.
Multi-layer fault detection (physical, protocol, LAG) with millisecond-level switchover.
PB-APP vs. FusionNOS
Choosing the Right Software for Your Needs
To meet diverse deployment needs, Asterfusion offers two software tiers.
PB-APP
Designed for core network visibility and traffic processing, PB-APP provides essential functions such as packet replication, aggregation, and load balancing—ideal for standardized, large-scale deployments on Asterfusion’s full 1G–800G switch portfolio.
Running on Asterfusion platforms with Marvell Octeon DPUs, delivers deep traffic intelligence for analytics and security, including advanced matching, filtering, NetFlow, IP reassembly, and packet anonymization.
CX306P-48S-M-H unites PB-APP and FusionNOS in one. Core packet broker functions run on the CPU, while dual Marvell Octeon CN103 DPUs enable advanced traffic analysis—basic and advanced NPB in a single system.
Support port multiplexing; support automatic monitoring of port link status and security protection
Basic Management Features
Support serial port, SSH, RestAPI, CLI management methods
Basic Management Features
Supports online security upgrades
Basic Management Features
Support configuration file import and export
Basic Management Features
Supports NTP clock synchronization
Basic Management Features
Supports SYSLOG log management
Basic Management Features
Supports LLDP sending
Basic Management Features
SNMP support
Statistical Properties
Support device status statistics, including system memory and CPU usage
Statistical Properties
Supports interface information statistics, including interface configuration and status, interface packet type statistics, interface packet count and rate statistics.
Statistical Properties
Supports rule hit statistics, reorganization function statistics, de-duplication function statistics, NetFlow statistics
Software License & Upgrade Policy
With PB-APP preloaded as software on the packet broker platform, the product delivers comprehensive licensing services and full lifecycle maintenance support for reliable network operations.
Hardware Warranty
2 Years
Standard hardware components are fully covered by a two-year warranty.
Free License
Year 1
All software feature updates are entirely complimentary during the first annual periods.
10% Upgrade Fee
From Year 2
Subsequent annual upgrades carry a fee equivalent to ten percent of the original cost.
Bug Fixes
Lifetime Service
Critical bug fixes and security patches are available free of charge throughout the product lifecycle.
Asterfusion Open Packet Broker is an open, SONiC-based traffic visibility and packet brokering solution. Instead of relying on proprietary hardware and closed operating systems, it delivers packet broker functionality as software running on standard SONiC switches—offering greater openness, flexibility, and scalability.
The solution utilizes the native hardware encryption capabilities of the switch ASICs and supports MACsec (Media Access Control Security) technology. This enables the NPB to implement line-rate encryption at the data link layer without additional hardware costs, effectively preventing traffic eavesdropping risks in long-distance transmission (e.g., ISP dark fiber).
Automated Deployment: Provides Ansible templates that support one-click operation of thousands of policies through Ansible Playbooks, solving the inefficiency of traditional Web UI configuration.
Visualization Monitoring: Integrated with Prometheus and Grafana templates, enabling real-time monitoring of critical metrics such as CPU, traffic rate, and packet loss, addressing the lack of a unified monitoring view in traditional NPBs.
PB-APP is a containerized packet broker application running on SONiC. It provides essential packet broker functions—such as traffic replication, aggregation, filtering, and load balancing—by leveraging the switch ASIC for line-rate forwarding, while keeping the application logic independent from the hardware.
PB-APP is hardware-agnostic and decoupled from port speeds. Since it runs as a SONiC containerized application, the same PB-APP software can be deployed consistently across switches ranging from 1G to 800G, delivering identical packet broker behavior regardless of bandwidth.
The DPU (Data Processing Unit) offloads compute-intensive packet processing tasks from the switch ASIC and CPU. By integrating DPU acceleration, Asterfusion enables advanced packet inspection and traffic processing without compromising line-rate forwarding performance.
