Enterprise-Grade Routing OS
Powered by SONiC & VPP for Routers/Gateways

Name: Open Router OS Powered by SONiC and VPP
SKU: AsterNOS-VPP

AsterNOS-VPP combines a cloud-native SONiC control plane with a VPP data plane to deliver ultra-fast routing, secure VPN, and full network automation.

Start Now

Documentation

Our SONiC & VPP-Based Routing OS

Why AsterNOS-VPP
Software

SONiC-Based Open Routing Control Plane

Leverages SONiC’s containerized microservices architecture with Redis DB management to provide a scalable and programmable routing control plane. Supports BGP/MP-BGP, OSPFv2/v3, VRF, PBR, and modern network automation through REST API, gNMI, and NETCONF.

VPP-Accelerated High-Performance Data Plane

Integrates VPP with SONiC through libsaivpp, translating standard SAI interfaces into accelerated packet processing. By bypassing the Linux kernel and leveraging DPDK-based user-space forwarding, AsterNOS-VPP delivers wire-speed routing performance on ARM and x86 platforms.

Hardware-Accelerated Secure Networking

Leverages Marvell OCTEON 10’s integrated inline crypto engine to accelerate IPsec and WireGuard encryption, enabling high-speed secure connectivity without consuming general-purpose CPU resources.

Open Architecture with Flexible Deployment Options

AsterNOS-VPP separates networking software from proprietary hardware, enabling deployment across ARM, x86, and virtualized environments. Organizations can run the same open routing software on different platforms while benefiting from hardware flexibility.

Unified Routing and Network Services Platform

Combines routing, gateway, VPN, security, and traffic management capabilities into a programmable software-defined networking platform for enterprise, telecom, and edge environments.

Optimized for Next-Generation Edge Infrastructure

Powered by Marvell OCTEON 10 DPU and designed for high-performance edge networking, AsterNOS-VPP enables scalable deployments for enterprise WAN, carrier networks,SD-WAN, 5G edge networks, and data center interconnection.

AsterNOS-VPP Pricing Plans

Flexible Editions Designed to Grow with Your Network

Free

$0

Forever Free

VRF, BGP, OSPF v2/v3
VXLAN, IPSec VPN
SNAT, DNAT, DNAT Pool
PPPoE Client
Stateless ACL
QoS

X86 Only

Download

Commercial

$999

+10% Annual Upgrade Fee

RIP v1/v2, MPLS
L2TPv3, GRE, Wireguard
CGNAT, MAP-E/MAP-T
PPPoE Client & Server
GeoIP/GeoSite, SPI
HQoS

X86 Platform | ARM

Contact Sales

Enterprise

$1699

+10% Annual Upgrade Fee

Software Specification

Same as the previous “Commercial”

Hardware Spec & Perf.

4x 10G, 4x 2.5G and 8x 1G

Routing Capacity: 58Gbps
Firewall Capacity: 58Gbps
Enc/Dec Capacity: 58Gbps

HW+SW Bundle(ARM)

Contact Sales

Spotlight Features

Explore the detailed feature comparison across Free, Commercial, and Enterprise editions of AsterNOS VPP.

Planned SupportSupportedUnsupported

Feature	Level 1 Function	Level 2 Function
Interface	Port Speed	1G/100M/10M
Interface	PoE Features	PoE Enable/Disable
Interface	PoE Features	Power delay
Interface	PoE Features	15W/ 30W / 60W
Interface	PoE Features	Priority: Low/High / Critical
Interface	PoE Features	Legacy Detect
Interface	PoE Features	PoE Timer Control
Interface	PoE Features	LLDP PoE Negotiation
Interface	PoE Features	PoE Power Monitor
Interface	Module Info	Presence / Absence
Interface	Module Info	Vendor info
Interface	Module Info	Optical Power
Interface	Bandwidth Alert	RX / TX Thresholds
Interface	Bandwidth Alert	Both Threshold
Interface	Batch Config	H/W Interfaces
Interface		LAG
Interface	LAN IF	4×2.5G/1G + 8×1G/100M/10M RJ45
Interface	WAN IF	4×10G SFP+
Interface	Wi-Fi Interface	Optional 2.4/5GHz Module
IP Unicast Routing	PBR	-
IP Unicast Routing	RIP v1/v2	-
MPLS	Basic MPLS	Static LSP(Multi nexthop)
MPLS	Basic MPLS	MPLS LDP
MPLS	Basic MPLS	LDP Security mechanism
MPLS	Basic MPLS	MPLS QoS
MPLS	VPN	VPWS(Static & Dynamic)
MPLS	VPN	VPLS
MPLS	VPN	L3VPN
NAT	Twice NAT	-
NAT	VRF Aware	-
NAT	NAT Hairpinning	-
NAT	CGNAT(Carrier-grade NAT)	-
NAT	MAP-E	-
NAT	MAP-T	-
Tunnel	GRE	L2/L3 tunnel
Tunnel	GRE	IPv4/IPv6
Tunnel	GRE	encap/decap stats
Tunnel	VXLAN	VTEP v4/v6
Tunnel	VXLAN	Static VXLAN
Tunnel	L2TPv3 VPN	-
Tunnel	IPsec VPN	Policy-Based (bypass / discard / protect)
Tunnel	Wireguard security VPN	Netbird Support
Tunnel	Wireguard security VPN	Encryption: ChaCha20-Poly1305 (RFC7539 AEAD)
Tunnel	Wireguard security VPN	Key Exchange: Curve25519 (ECDH)
Tunnel	Wireguard security VPN	Hashing: BLAKE2s (RFC7693)
Tunnel	Wireguard security VPN	Table keys: SipHash24
Tunnel	Wireguard security VPN	KDF: HKDF (RFC5869)
Tunnel	PPPoE Client	-
Tunnel	PPPoE Server	Support CHAP authentication and MTU/MRU adjustment
Tunnel	PPPoE Server	Support binding to Physical/Sub-interfaces; Max 8 Server instances
Tunnel	PPPoE Server	Radius User Authentication
Security	User Access AuthN	Portal
Security	DHCP v4/v6 Snooping	-
Security	ND Snooping	-
Security	ND policy	-
Security	DAI (Dynamic ARP Inspection)	-
Security	IPSG v4/v6	-
Security	ACL	Support GeoIP & GeoSite library for traffic classification
Security	ACL	Stateless/Stateful
Security	*SPI(Stateful packet inspection)	-
Security	Unicast Reverse Path Forwarding (uRPF)	-
QoS	Priority Mapping	dot1p to tc
QoS	Priority Mapping	dscp to tc
QoS	Priority Mapping	tc to queue
QoS	Queue Schedule	Strict
QoS	Queue Schedule	DWRR
QoS	HQoS	Multi-level shaping (Subscriber/User/User-group)
QoS	HQoS	Service-Level:8 queues mapping
QoS	HQoS	Traffic identification based on GeoIP/GeoSite and DSCP (EF/AF/CS for VoIP/Gaming).
High Availability	SLA	-
High Availability	SLAAC	-
High Availability	Routing Track	-
High Availability	Hash	-
Monitoring & Management	Prometheus exporter	-
Monitoring & Management	RestfulAPI	-
Monitoring & Management	uCentral	-
Interface	Port Speed	2.5G
Interface	Port Speed	10G
Interface	Port Config	(no shutdown) / shut down
Interface	Port Config	start delay
Interface	Interface Stats	Packets / Octets / Errors / Drops / Speed
Interface	Loopback IF	64 x Loopback
Interface	WAN IF	PPPoE / DHCP / Static IP
IP Unicast Routing	Static Routing	-
IP Unicast Routing	VRF	L3 Port Isolation
IP Unicast Routing	VRF	VLAN IF Isolation
IP Unicast Routing	VRF	LAG IF Isolation
IP Unicast Routing	VRF	Neighbor Isolation
IP Unicast Routing	VRF	LPM Isolation
IP Unicast Routing	VRF	Inter-VRF Forwarding
IP Unicast Routing	BGP / MP-BGP	-
IP Unicast Routing	OSPF v2/v3	-
IP Unicast Routing	Routing Policy	Route Map
IP Unicast Routing	Routing Policy	Prefix List (v4/v6)
IP Unicast Routing	ECMP/UCMP	-
IP Multicast	IGMP Snooping	enable/disable IGMP Snooping
IP Multicast	IGMP Snooping	static IGMP Snooping
IP Multicast	IGMP Snooping	dynamic IGMP Snooping
IP Multicast	IGMP Snooping	IGMP v1/v2/v3 Support
IP Multicast	IGMP Snooping	entry limit based on IGMP member port
IP Multicast	IGMP Snooping	IGMP Snooping mulicast query
IP Multicast	IGMP Snooping	IGMP Snooping Porxy
IP Multicast	MLD Snooping	enable/disable MLD Snooping
IP Multicast	MLD Snooping	dynamic MLD Snooping
IP Multicast	MLD Snooping	MLD v1/v2 Support
IP Multicast	MLD Snooping	entry limit based on member port
IP Multicast	MLD Snooping	MLD Snooping multicast query
IP Multicast	MLD Snooping	MLD Snooping Porxy
IP Multicast	PIM	enable/disable PIM
IP Multicast	PIM	PIM-SM Features (ASM/SSM & SPT Switchover)
IP Multicast	PIM	PIM Interface Support (Phy/VLAN/LAG) for IPv4/IPv6
MPLS	Basic MPLS	Interface: Enable/Disable on Physical Port
NAT	1:1 NAT / Port Forward	-
NAT	TCP MSS Clamping	-
NAT	Static / Dynamic Mapping	-
NAT	Sub-Port Support	-
NAT	IF Support (Phy/VLANIF/LAG/Loopback)	-
NAT	SNAT/DNAT/DNAT POOL	-
Tunnel	VXLAN	EVPN VXLAN
Tunnel	VXLAN	VXLAN gateway
Tunnel	VXLAN	encap format(v4 over v4, v6 over v4)
Tunnel	VXLAN	VXLAN Stats encap/decap
Tunnel	IPsec VPN	Route Based VPN
Tunnel	IPsec VPN	IKEv2
Tunnel	IPsec VPN	Diffie-Hellman (DH)
Tunnel	IPsec VPN	Message Authentication Code (MAC) algorithm support:
Tunnel	IPsec VPN	Encryption: AES (CBC/GCM/CTR), 3DES, ChaCha20/Poly1305
Tunnel	IPsec VPN	Encryption/Decryption support hardware offload
Service	ARP/NDP	-
Service	DHCPv4/v6 Server and Relay	-
Service	DNS	-
Security	BUM Ctl	-
Security	User Access AuthN	Dot1x
Security	ACL	Ingress/Egress
Security	ACL	Match: MAC/IP/L3/L4 Fields
Security	ACL	Permit/Deny
Security	ACL	Hit Statistics
Security	ACL	Port/LAG/VLAN/SubIF Bind
Security	ACL	CtrlPlane (NTP/SNMP/SSH/Telnet)
QoS	Rate Limit (RFC2697/2698/4115)	per port
QoS	Rate Limit (RFC2697/2698/4115)	per queue
QoS	Shaping	per interface
QoS	Flow Classify	IACL + CAR Binding
QoS	Flow Classify	EACL
QoS	Flow Classify	CAR (Committed Access Rate)
QoS	Qos Status	show IF qos stats
High Availability	MC-LAG	-
High Availability	VRRP	Backup group (HW/VLAN IF)
High Availability	VRRP	VRRPv3 (RFC5798)
High Availability	VRRP	Advertise interval / priority config
High Availability	VRRP	Master auto send ARP/ND
High Availability	BFD	-
High Availability	Monitor Link	-
Monitoring & Management	SPAN/ ERSPAN	-
Monitoring & Management	SNMP	-
Monitoring & Management	NetFlow/IPFIX	-
Monitoring & Management	ZTP (Zero Touch Provisioning)	-
Monitoring & Management	SSH	-
Monitoring & Management	Telnet	-

Supported Hardware Platforms

Enterprrise SONiC AsterNOS-VPP can be preloaded on ET series hardware platforms.

SKU	Port Configuration	Optional Port	DPU	Routing Capacity	Crypto Capacity	Dimensions (W x H x D mm)
ET2508- 4S4M8	4 x 10GE SFP+ 2 x 2.5GE RJ45 8 x 1GE RJ45	2.5GE (PoE++) 1GE (PoE+)	Marvell OCTEON 10 CN102	50Gbps	50Gbps	220 x 44 x 310
RT2508- 4S4M8	4 x 10GE SFP+ 2 x 2.5GE RJ45 8 x 1GE RJ45	2.5GE (PoE++) 1GE (PoE+)	Marvell OCTEON 10 CN102	50Gbps	50Gbps	220 x 44 x 310
ET2700- 2P2S	2 x 100GE QSFP28 2 x 10GE SFP+	2 x 2.5GE RJ45	Marvell OCTEON 10 CN103	100Gbps	80Gbps	215 x 44 x 310
RT2700- 2P2S	2 x 100GE QSFP28 2 x 10GE SFP+	2 x 2.5GE RJ45	Marvell OCTEON 10 CN103	100Gbps	80Gbps	215 x 44 x 310
ET3608- 2P2S	2 x 100GE QSFP28 2 x 10GE SFP+	2 x 2.5GE RJ45	Marvell OCTEON 10 CN103	100Gbps	80Gbps	440 x 44 x 470
RT3608- 2P2S	2 x 100GE QSFP28 2 x 10GE SFP+	2 x 2.5GE RJ45	Marvell OCTEON 10 CN103	100Gbps	80Gbps	440 x 44 x 470
ET3616- 4P4S	4 x 100GE QSFP28 4 x 10GE SFP+	4 x 2.5GE RJ45	2 x Marvell OCTEON 10 CN103	2 x 100Gbps	2 x 80Gbps	440 x 44 x 470
RT3616- 4P4S	4 x 100GE QSFP28 4 x 10GE SFP+	4 x 2.5GE RJ45	2 x Marvell OCTEON 10 CN103	2 x 100Gbps	2 x 80Gbps	440 x 44 x 470

Reliable Updates & Support

Lifetime license, quarterly releases, and expert assistance for hassle-free operations.

Lifetime License

One-time purchase with a perpetual license; first-year updates included.

Quarterly Releases

Major updates every three months, plus frequent minor patches for stability.

Full Support

Access manuals, guides, and responsive assistance for smooth deployment.

Frequently Asked Questions

Your Guide to Software Versions, Deployment & Support

Why combine SONiC control plane with a VPP data plane instead of using standard Linux kernel routing?

Standard Linux kernel networking hits severe performance bottlenecks at high throughput due to interrupt overhead and context switching. AsterNOS-VPP pairs SONiC’s robust control plane (FRR-based BGP/OSPF, EVPN, and containerized management) with VPP’s user-space vector packet processing.

By bypassing the kernel with DPDK, it processes packets in batches, delivering tens of Mpps and up to 50Gbps–200Gbps line-rate forwarding per appliance with sub-microsecond latency.

How does AsterNOS-VPP achieve high-performance IPsec/WireGuard VPN encryption on compact edge devices?

Traditional software VPNs saturate CPU cores quickly. On x86, AsterNOS-VPP utilizes multi-core VPP vector acceleration. On ARM platforms (like Marvell OCTEON 10 on our ET Series hardware), IPsec encryption/decryption is offloaded directly to integrated hardware crypto engines.

This provides up to 50Gbps/80Gbps of IPsec throughput while leaving CPU resources completely free for dynamic routing and NAT processing.

Can AsterNOS-VPP replace expensive legacy CGNAT and Border Routers for ISPs/WISPs?

Yes. AsterNOS-VPP (Commercial/Enterprise editions) features high-density NAT capabilities including CGNAT, MAP-E, MAP-T, Twice NAT, and GeoIP/GeoSite-based traffic steering.

Combined with high-density 10G/100G optical interfaces on our ET Series DPU platforms or x86 servers, it serves as a high-capacity, low-cost alternative to proprietary Carrier-Grade NAT appliances.

Is AsterNOS-VPP suitable for Multi-Cloud Interconnects?

Absolutely. With native support for VRF multi-tenancy, dynamic routing (BGP-EVPN, OSPF), modern VPN tunnels (WireGuard, L2TPv3, GRE, IPsec), and stateful firewall (SPI / Geo-filtering), AsterNOS-VPP can be deployed as an edge gateway connecting remote branches, multi-cloud VPCs, and data centers securely.

When should I choose the x86 Pure Software License vs. the ET Series ARM Hardware-Software Bundle?

Choose x86 Pure Software License if you want to deploy on existing generic x86 COTS servers or KVM/ESXi hypervisors for software-defined edge routing and testing.

Choose ET Series Hardware-Software Bundle (ARM) if you need compact (1RU/desktop), low-power, high-density hardware (10G/100G ports) with hardware-offloaded crypto acceleration (Marvell OCTEON 10) for maximum cost performance and turnkey reliability.

How is AsterNOS-VPP managed, and does it support Zero Touch Provisioning (ZTP) and automated deployment?

AsterNOS-VPP supports standardized management interfaces including standard CLI, RESTful APIs, Prometheus Exporters for real-time observability, and uCentral. It natively supports ZTP (Zero Touch Provisioning), allowing broad edge router fleet rollouts without on-site manual configuration.

Is the Free Version available for download?

Yes. You can download the free version and install it on x86-based devices to enjoy the benefits of open networking. A step-by-step installation guide is available here. Click here to view it. Please note that no additional technical support is provided for the free version.

What’s the difference between the Free Version and the Paid Version?

The free version is limited to x86 platforms. The Paid Edition offers significant improvements in two aspects:

First, in terms of services, it provides exclusive technical support and consulting services;
Second, in terms of functionality, it adds multiple extended capabilities. For example, the tunneling technology supports MPLS, L2TPv3, GRE, and Wireguard VPN, and the address translation function supports CGNAT, MAP-E/MAP-T, etc.
For more extended functions of the paid version, you can learn about them in detail through the comparison table at the top of this page.

I want to deploy on ARM platforms. What are my options?

We don’t offer a standalone software license for ARM. For ARM deployments, Asterfusion provides hardware-software bundles that include AsterNOS VPP with the ET2508 product. Additionally, we offer the ET3608 and ET3616 series to meet your needs across different scenarios. All these solutions are available at competitive prices and come pre-integrated with AsterNOS VPP, delivering excellent performance and value.

What kind of technical support does Asterfusion provide?

With the paid edition, you’ll receive:

A perpetual software license
Comprehensive technical documentation
Online service response and remote support via email or meetings
Real-time remote assistance
Regular software updates following a structured release policy

AsterNOS follows a predictable update schedule that applies to all editions, including:

Quarterly major releases (at least 4 per year) that synchronize with Community SONiC
More frequent minor releases containing enhancements, fixes, and patches for the current version, which can be released at any point during the major version support cycle.

Can I upgrade from the Free Version later?

Absolutely. You’re welcome to start with the free version and upgrade to a paid plan at any time for additional features and support.

What happens when my subscription expires? Will I still receive technical support?

After your subscription expires, you can continue to receive full technical support services by simply paying an annual renewal fee equal to 10% of the original license cost.

Can I cancel my subscription at any time?

Yes. Subscriptions are valid for one year (with no automatic renewal). At the end of your subscription term, you may choose not to renew, and your subscription will conclude naturally without further charges.

AI Fabric & Data Center Switch

Campus Access & Aggregation

Open Edge Router

DPU & Edge Bare Metel Platform

Open Packet Broker

Network Packet Broker

High-Performance PTP Switch

Asteria Network Controller

P4-Programmable Switch

Wireless Access Point

Optical Transceiver & Cable

COM Express Module

AI Networking

Data Center

Enterprise

Carrier Network

AsterNOS for AI Fabric & Data Center

AsterNOS for Campus Networks

AsterNOS-VPP Routing OS

PB-APP for Packet Broker

Blogs

Whitepaper

NOS Updates

Implementation

RMA Policy

Events

About Us

Enterprise-Grade Routing OSPowered by SONiC & VPP for Routers/Gateways

Why AsterNOS-VPPSoftware

SONiC-Based Open Routing Control Plane

VPP-Accelerated High-Performance Data Plane

Hardware-Accelerated Secure Networking

Open Architecture with Flexible Deployment Options

Unified Routing and Network Services Platform

Optimized for Next-Generation Edge Infrastructure

AsterNOS-VPP Pricing Plans

Free

Commercial

Enterprise

Spotlight Features

Supported Hardware Platforms

Reliable Updates & Support

Lifetime License

Quarterly Releases

Full Support

Frequently Asked Questions

Enterprise-Grade Routing OS
Powered by SONiC & VPP for Routers/Gateways

Why AsterNOS-VPP
Software