Network Packet Broker 32x 100G QSFP28 with 2x 25G SFP28 Ports
PX532P-T
GTP extension header packet inner layer filter support in 5G networks;
Support L2 to L4 Traffic Aggregation, Filtering, Replication, Load Balancing, Correlation;
Support packet preprocessing, stripping multi-layer VLAN tags, tagging source port, packet slicing, and MAC address modification;
Support Net flow traffic statistics, Header output, Packet deduplication, IP fragment reassembly, Time stamping, ns-level, Masking;
Support SSL encryption and decryption (optional function);
Flow sampling (sampling can be performed according to the 5-tuple of the hit rule, etc., and the sampling rate can be set);
Network Packet Broker 32x 100G QSFP28 with 2x 25G SFP28 Ports, 3.3Tbps Switching Capacity
The PX532P-T Asterfusion Network Packet Broker is designed with a 3.3Tbps switching capacity and Barefoot Tofino chip with scalability. the NPB has 2x 25G SFP28 ports , 32x 100G QSFP28(or 40G QSFP+) ports high-density connectivity for demanding networks. Gain deep, secure visibility into all traffic (including encrypted streams) with traffic aggregation, decryption, and re-encryption, filtering, correlation, while simplifying operations with a centralized platform, multi-tool support, and an intuitive interface. Built for 1+1 hot-pluggable redundant power and 1U height form factor, 415W low power consumption, the Network Packet Broker empowers you to see everything, secure everything, and simplify everything.
Specifications
|
Quality Certifications
Features
Basic feature
- N-tuple rules with mask (IPv4/IPv6 5-tuple, MAC, Ether Type, VLAN tags, VNI, TCP Flag, DSCP, Fragment message, etc.)
- Exact IPv4/IPv6 5-tuple rules
- Based on MAC information rules, source MAC, destination MAC
- Inner 5-tuple rules with mask
- Inner exact 5-tuple rules
- Supports multi-level concurrency strategies, can execute different traffic strategies on the inbound, intermediate, and outbound interfaces of the pipeline, and supports L2/L3/L4/L7 layer combination policy rules
- Signature rules, payload partial match depth 40 bytes
- Forwarding by flow classification
- Forwarding by the specified output port
- Load-balancing output by specified output link group
- Supports normal forwarding of error packets
- Load balancing for policies such as IP 5-tuple, source/destination IP, source/destination IP, source IP/source port, destination IP/ destination port, source IP/destination IP/ source port/destination port, source/destination MAC, etc.
- Load balancing based on inner IP 5-tuple hashing in case of tunnel encapsulation.
- Fault-tolerant load balancing protection mechanism, supporting static load balancing, dynamic load balancing, and elastic load balancing mechanisms.
- Load balancing strategy with weights.
- Multi-level load with flexible and configurable hash seeds.
- Load balanced output within a group after traffic replication.
- Supports fragmentation following function, ensuring that the first piece and non-first piece of the same IP packet are output from the same port.
- Load balanced output from the same source and same destination.
- VLAN tag adding, modifying, deleting
- ns timestamp
- Tagging source port
- Packet slicing, you can set the reserved byte length which based on ACL rules
- BPDU packets are forwarded by default, and BPDU packets can also be discarded
- Source/destination MAC address modification
- GRE encapsulation (supporting configuration with IP and MAC address)
- Tunnel encapsulation stripping for GTP, GRE, VXLAN, VXLAN, ERSPAN, CFP, IP over IP, SRv6, MPLS, MPLS in UDP, MPLS in GRE, etc.
- GRE termination (Each port can be configured with IP address)
- Support interface master and link group master and backup: when the main port fails, the traffic will be automatically switched to the backup port for output, meanwhile, it supports an automatic recovery mechanism.
- Supports interface linkage and link group linkage: when an interface fails, all the interfaces linked to it will be synchronized down, and supports an automatic recovery mechanism.
- Supports the protection mechanism of single link or link group as backup link between devices, and supports an automatic recovery mechanism.
- When networking across data centers, it supports device self-test, device mutual test, link detection between devices, and cross-device link detection.