Skip to main content
Marvell Octeon Open Network Platform

ET2700-2P2S

Open Intelligent Bare Metal Gateway Based on Marvell OCTEON 10 CN103 Chip 

Please login to request a quote
The above modules can be mixed and matched, custom combinations are available. Please send us emails for more detailed information!

  • 2 x 100GE QSFP28, 2 x 10GE SFP+
  • 8 x 2.5GHz ARM64 Neoverse N2 Core
  • 16GB pluggable DDR5 SO-DIMM, up to 48G
  • True inline crypto engine; Optional M.2 SSD up to 4TB
  • Optional AI hardware accelerator with 160TOPS INT8 inference performance
  • Optional modules with M.2 B Key, supporting 5G/LTE

  • Pluggable M.2 M-key modules for AI, supporting LLMs such as gpt-oss-20b-a3b, as well as computer vision tasks like detection and segmentation.

  • Optional PTP with 20ns accuracy and BC support, featuring holdover > 8 hours, with optional GNSS module support
  • 100Gbps intelligent data processing for routing, firewall, IPSec, and SSL/TLS;
  • <80 Watt with FULL configuration and workload
Marvell-OCTEON-10-CN103-ET2700-smart-gateway-2
ET2700 smart gateway 1
ET2700-smart-gateway-front-panel
ET2700-smart-gateway-rear-panel

Enterprise-Ready Intelligent Router/Gateway 8-Core ARM 64-bit Neoverse N2 | Marvell OCTEON 10 CN103

The Asterfusion ET2700-2P2S is a versatile, enterprise-ready smart gateway designed for modern networking. Combining high-performance hardware with an open architecture, it offers two deployment options to meet diverse enterprise needs.

Option 1: Preloaded AsterNOS-VPP
The ET2700-2P2S comes preloaded with Asterfusion’s enterprise SONiC routing OS, delivering an out-of-the-box, plug-and-play open router with no software adaptation required. This option is perfect for enterprises seeking a ready-to-use, enterprise-grade router with minimal setup.
Key Features:
Mainstream routing protocols (BGP, OSPF)
IPSec VPN, NAT, ACLs, QoS
RoCE, telemetry, SPAN/ERSPAN
Virtual Router support
And more

Option 2: Flexible Bare Metal Deployment
The ET2700-2P2S can be used as a bare metal gateway, allowing you to deploy your own open-source or custom software stack. This approach lets you build a fully integrated solution combining router, firewall, VPN, network analyzer, and load balancer functionalities. With this option, enterprises gain complete control over their software environment while leveraging the high-performance hardware, making it ideal for organizations that require maximum flexibility to customize their network services.

AsterNOS-VPP

AsterNOS-VPP is an open, SONiC-based routing OS that fuses SONiC’s powerful control plane with VPP’s lightning-fast data plane.
Delivering routing, firewall, VPN, and NAT at line rate across hardware and virtual platforms,
it empowers operators and enterprises with a next-generation routing solution that is open, scalable, and performance-driven.

» For More «

Application Scenarios

The Open intelligent gateway leverages an open hardware-software disaggregated architecture, combining a robust suite of open-source software for the control plane with a hardware-optimized data plane. This unique combination addresses many application scenarios and is adaptable to combined usage.

open-intelligent-gateway-router
BRAS-network

ISP BNG/BRAS Networking

  • ET2700-2P2S: High-Performance BNG/BRAS for Carrier-Grade Networks
  • Granular Session Management: Full IPoE/PPPoE access with integrated AAA & dynamic billing.
  • Multi-dimensional H-QoS: User/Service-based scheduling for IPTV, VoIP, and Data.
ET2700 as cloud edge gateway

Cloud Edge Gateway

  • Sophisticated Edge Routing: Multi-cloud/Multi-fabric interconnectivity for secure egress and cloud federation.
  • High-Performance BGP Gateway: Hardware-optimized VPP and DPDK acceleration for carrier-grade forwarding.
  • VPP-Powered Throughput: Leverages vector packet technology to deliver up to 100Gbps forwarding capacity.
ET2700 as VPN Gateway

VPN Gateway (SONiC-VPP)

  • Platform Synergy: ET2700-2P2S hardware running AsterNOS-VPP for carrier-grade VPN applications.
  • Flexible Secure Tunneling: Full IPsec/WireGuard support, enabling versatile and high-performance secure connectivity.
  • Hardware-Accelerated Throughput: Dedicated encryption/decryption engine delivering up to 80Gbps line-rate performance.

Router: Ubuntu + VPP

  • Hardware-optimized vector packet technology and DPDK accelerate data plane forwarding, delivering up to 60Gbps forwarding performance.
  • Multi-WAN load balancing across Ethernet and 5G/LTE links.
  • Comprehensive QoS policies for precise management of traffic from different users and applications.

Firewall: Ubuntu + iptables + BPFILTER

  • Flexible and efficient iptables configuration suitable for a wide range of scenarios.
  • GUFW provides a simple and user-friendly GUI.
  • BPFILTER leverages eBPF for advanced packet filtering and processing.

VPN Gateway: Ubuntu + OpenVPN/WireGuard

  • Hardware-accelerated OpenVPN with encryption/decryption engine supports up to 60Gbps throughput.
  • WireGuard benefits from an 8-core CPU for accelerated performance.
  • Installation of the latest VPN software on demand to adapt to changing network environments.

IDS/IPS: Ubuntu + Snort

  • Leading open-source IDS/IPS with continuously updated rule sets from its active open community.
  • Hardware DPDK enhances packet processing performance and reduces latency.
  • Optimized regular expression engine boosts IDS/IPS performance.

Load Balancer: Ubuntu + HAProxy + Nginx

  • Optimized regular expression engine boosts load balancing performance based on domain and URL.
  • Hardware DPDK improves processing speed and throughput.
  • Hardware SSL engine speeds up HTTPS connections.

Network Traffic Analyzer (NTA): Ubuntu + ntopng

  • Real-time traffic monitoring, protocol recognition, application analysis, historical data logging, and visual reporting capabilities.
  • Intuitive GUI for analyzing network traffic and performance metrics.
  • Hardware SSL engine accelerates HTTPS traffic analysis.

Rich Software Ecosystems

The ET2700-2P2S’s versatility is made possible by its support for a wide array of open operating systems and software ecosystems, designed to accommodate any open-source software compatible with ARM64 + Linux. It offers customers a rich and flexible selection tailored to their specific needs. Whether it’s routing, security, or any other network function, the ET2700-2P2S has you covered.

Operating System

ET2700 OS
  • Supports Ubuntu, Debian, OpenWRT and other Linux distribution, such as CentOS, OpenSUSE, Arch Linux, AlmaLinux, Rocky Linux, Linux Mint and Elementary OS.
  • Licensed support for pfSense, OPNsense
  • Install and upgrade the OS using a USB disk with Arm Trusted Firmware and UEFI
  • Embedded eBPF (extended Berkeley Packet Filter) in Linux kernel via XDP

Supported Open Source Software

software ecosystem on ET2700
    •  Any software for ARM64 + Linux
    • Optimized DPDK (Data Plane Development Kit) tied to HW Acceleration
    • Open-source routers, including VPP (Vector Packet Processing), OpenWRT, DD-WRT, VyOS, etc.
    • Open-source IDS/IPS, including Snort, Suricata, Zeek, etc.
    • Open-source load balances, including HAProxy, Nginx, Traefik, etc.
    • Open-source VPNs, including OpenVPN, WireGuard, IPSec, L2TP, Shadowsocks, Trojan, VMess, etc.
    • PyTorch/Tensorflow/TF Lite/Keras/ONNX
    • C/C++/Python/Go/Rust/Java/Lua and other programming languages
    • Applications from other Linux distributions on Ubuntu/Debian using Docker with direct access to the host network
    • Open-source firewalls, including iptables, UFW, pfSense, OPNsense, IPFire, nftables, Firewalld, Shorewall, Untangle, etc.
    • GCC, GDB, BinUtils, Buildroot, and other tool chains
    • Open-source Network Traffic Analyzers, including ntopng, Elasticsearch + Kibana + Beats, Argus, Softflowd, etc.
    • Open-source projects consuming DPDK, including DPVS, Gatekeeper, Open vSwitch, SPDK, etc.
    • Rich VPP plugins, including Marvel device plugin, QUIC, SRv6, LLDP, NAT64, LACP, SRTP, etc.

Specification

Platform Specification

Network interface
100GE (QSFP28)2 ports10GE (SFP+)2 ports
5G/LTE (Option)2 SIM cards, M.2 B keyAntenna (5G module)4
SSD(Option)M.2 M key, up to 4TBAI(Option)M.2 M key, 160TOPS INT8
Misc. interface
USB1 x USB3.0MGMT1 x MGMT RJ45
Console1 x Console RJ45
Computing
DPU Marvell OCTEON 10 CN103
8 Core ARM64 N2 @ 2.5 GHz		RAM16GB DDR5 SO-DIMM, up to 48GB
CacheL2 8MB, L3 16MBFlash64GB eMMC
NVME SSD (Option)240GB, up to 4TB
Network performance
L2/L3 Switching capacity200 GbpsRouting capacity100 Gbps
Firewall capacity80 GbpsEncryption and Decryption capacity80 Gbps
PTP/SyncE accuracy20nsPTP/SyncE holdover time> 8hours
Electrical characteristics
Fan2Power Module1 x 100W
Maximum power consumption85W (FULL configuration and workload)Input voltage100~240V AC
Mechanical
Operating temperature0 – 45℃Dimensions (W x H x D mm)215 x 44 x 310
Relative humidity5% - 95% (non-condensing)Height1U

AI Inference Engine Specification

  Model M2-AI-INFERENCE-12GB M2-AI-INFERENCE-24GB
  AI Compute Perf. • Up to 160 TOPS elastic AI computing performance;
• Up to 100 TFLOPS @ bFP16		• Up to 160 TOPS elastic AI computing performance;
• Up to 100 TFLOPS @ bFP16
  Memory • 12 GB LPDDR5 / LPDDR5X
• Memory bandwidth: 153.6 GB/s		• 24 GB LPDDR5 / LPDDR5X
• Memory bandwidth: 153.6 GB/s
  Storage 1 × 32 MB NOR Flash 1 × 32 MB NOR Flash
  Interface Type M.2 Key M M.2 Key M
  PCIe Interface • 1 × PCIe Gen4 interface
• Supports up to x4 lanes, compatible with x3 / x2 / x1
• Maximum bandwidth up to 8 GB/s per interface 		• 1 × PCIe Gen4 interface
• Supports up to x4 lanes, compatible with x3 / x2 / x1
• Maximum bandwidth up to 8 GB/s per interface
  UART • Supports 2 × UART interfaces
• Standard baud rates supported, up to 921600 bps		• Supports 2 × UART interfaces
• Standard baud rates supported, up to 921600 bps
  I2C • 1 × I²C controller
• Supports 100 kHz and 400 kHz communication rates		• 1 × I²C controller
• Supports 100 kHz and 400 kHz communication rates
  Dimensions (mm) 22 x 80 x 2.58 22 x 80 x 2.58
  Weight9 g (±10 g)9 g (±10 g)
  Operating Temperature-10°C to +60°C-10°C to +60°C
  Storage Temperature -20°C to +65°C-20°C to +65°C
  Operating Humidity10% RH – 90% RH (non-condensing)10% RH – 90% RH (non-condensing)
  Storage Humidity5% RH – 95% RH (non-condensing)5% RH – 95% RH (non-condensing)
  Supply Voltage3.3 V ± 5%3.3 V ± 5%
  Maximum Continuous Operating Current9 A 9 A

Hardware Panel

Marvell-Octeon-10-CN103-ET2700-front-panel
Marvell-Octeon-10-CN103-ET2700-rear-panel

In The Box

what is in ET2700

Resource

Data Sheet

FAQs

Is this a bare metal gateway? That is, there is no software running on it?
Yes, its appeal is that you can install the open-source software you need! While it’s not a bare metal gateway in the traditional sense, being an open intelligent gateway, it comes preloaded with an underlying operating system. Choose from Ubuntu 24.04, Debian 12, or openWRT. Flexibility is key, allowing users to install the open-source software they need. Plus, development kits like DPDK and VPP are available on our GitHub repository for further customization.
After reading the description, I noticed that this machine has a lot of optional modules. Could you explain more?
Absolutely! This machine is designed with four pluggable M.2 form factors, allowing users to customize it according to their specific needs. Here are the available modules:
  • 5G/LTE Module: Insert a 5G SIM card to enable 5G uplink routing.
  • WiFi6E/7 Module: Add a Wi-Fi module to facilitate AP wireless functions.
  • SSD Module: Expand storage capacity up to 4TB.
  • AI Acceleration Module: Implement deep learning and AI inference functions.
In addition to these M.2 form factors, we offer optional PTP functions:
  • PTP Function: An optional PTP module with 20ns accuracy and BC support is available for precise time synchronization. Customers can mix and match these modules to tailor the gateway to their requirements.
I saw an optional AI acceleration module in the product introduction, could you introduce more about it?
Yes, you are correct! One of the standout features of our product is the AI acceleration module. Specifically, we offer the M.2 AI Acceleration Module. This module significantly enhances the ET2700’s capabilities by enabling efficient and comprehensive deep-learning applications. It is particularly adept at handling low-latency and efficient AI inference tasks, making it an excellent choice for advanced AI-driven projects.
What models does this AI module support?
The AI acceleration module supports the following AI model paradigms and tasks:

Model Paradigm

  • LLM: qwen3-14b, qwen2.5-7b, gpt-oss-20b-a3b, etc
  • VLLM: qwen2.5-vl-7b, qwen3-vl-2, etc
  • Embedding model: bge, gte-gwen2-1.5, etc

AI Task

  • detection: yolov5s, yolov3, yolov8m, etc
  • segmentation: yolov8m-seg
  • OCR: : ppocrv3, ppocrv
  • estimation: yolov8m-pose
  • ASR: whisper, Whisper-large-v3-turbo-0.8B
Does ET2700 support SONiC or VPP?

Yes, ET2700 fully supports SONiC (AsterNOS-VPP) and VPP (Vector Packet Processing). It is designed with a hardware-software decoupled architecture for maximum flexibility in open networking.

What is the maximum throughput of the ET2700?

The ET2700 delivers up to 100Gbps bidirectional throughput for routing and 80Gbps for high-load tasks like hardware-accelerated IPSec and SSL/TLS encryption.

Can I run AI models on this gateway?

Absolutely. With the optional 160TOPS AI inference engine, the ET2700 supports LLMs like DeepSeek-8B and Qwen2.5-7B, making it ideal for AIOps and intelligent traffic analysis.

What CPU architecture does it use?

It uses the Marvell OCTEON 10 CN103 DPU, which integrates an 8-core ARM Neoverse N2 processor, balancing high performance with power efficiency (<85W).

What are the typical application scenarios?

ET2700 is perfect for Cloud Edge Gateways, VPN Gateways, and Broadband Network Gateways (BNG/BRAS), supporting up to 20K concurrent PPPoE sessions.

Related Blogs