AsterNOS-VPP- Open Router OS High-Performance Networking Powered by SONiC & VPP

Price range: $0.00 through $1,799.00

  • SONiC’s modular control plane, VPP’s high-performance data plane.
  • Ultra-fast routing, firewall processing, and encryption/decryption.
  • Built-in IPSec, WireGuard, ACLs, GeoIP filtering protection.
  • Free image or pre-integrated with Asterfusion ARM-based hardware.
  • Support NetFlow, Prometheus, and SNMP for full-stack, real-time visibility.

Note: Prices are exclusive of customs duties, import taxes, and VAT. Any additional charges imposed by your country are the buyer's responsibility.

    GUARANTEED SAFE CHECKOUT
    • Visa Card
    • MasterCard
    • American Express
    • Discover Card
    • PayPal
    SKU: AsterNOS-VPP Categories: ,

    Open Router OS powered by SONiC & VPP brings next-level performance and security to your network infrastructure. Designed for high-speed routing, it combines SONiC’s modular control plane with VPP’s ultra-fast data plane to deliver lightning-fast performance with low latency. Whether you’re managing a small business or a large enterprise, this solution offers flexible deployment options, including a free image for DIY users or a bundled hardware option for enterprise needs.

    With robust security features like IPSec VPN, WireGuard, ACLs, and GeoIP filtering, your network stays protected against external threats. Real-time monitoring tools such as NetFlow, Prometheus, and SNMP ensure you can continuously track network performance and health. Plus, with seamless integration and high scalability, Open Router OS ensures that your network can grow and evolve as needed.

    Whether you need software-only deployment flexibility or complete hardware-software bundles, AsterNOS-VPP delivers enterprise-grade routing, advanced VPN, deep packet inspection, and real-time monitoring—all on open, vendor-neutral architecture.

    Hardware-Accelerated Performance
    Maximum Performance with Asterfusion Hardware
    When deployed on Asterfusion ET2508 or ET3600 hardware, AsterNOS-VPP unlocks full hardware acceleration through optimized engine bindings to Marvell OCTEON CN102/CN103 processors. This delivers guaranteed performance:

    ET2508: 50Gbps routing capacity, 50Gbps firewall capacity, 50Gbps encryption and decryption capacity
    ET3608: 100Gbps routing capacity, 80Gbps firewall capacity, 80Gbps encryption and decryption capacity
    ET3616: 2 x 100Gbps routing capacity, 2 x 80Gbps firewall capacity, 2 x 80Gbps encryption and decryption capacity

    Flexible Performance on x86 Platforms
    For software-only deployments on x86 platforms, AsterNOS-VPP performance scales with your hardware capabilities. Actual throughput depends on the CPU specifications, memory bandwidth, NIC capabilities, and the characteristics of the workload. This provides deployment flexibility—run it on virtual machines for testing or bare-metal servers for production workloads tailored to your requirements.

    AsterNOS-VPP – Next-Generation Router OS for Modern Networks

    AsterNOS-VPP combines SONiC’s open control plane with VPP’s hardware-accelerated data plane, delivering carrier-grade performance from the edge to the core. Deploy as software-only on x86, or choose integrated hardware bundles with Marvell OCTEON CN102/CN103 platforms for turnkey solutions. Scale from 0 to 200Gbps across three editions designed for every network scenario—from branch offices to backbone infrastructure. Built-in IPSec/WireGuard VPN, advanced ACLs, GeoIP filtering, and comprehensive monitoring ensure your network stays fast, secure, and observable.

    FREE EDITION

    $0​

    Forever Free

    Software Specification

    • VRF, BGP, OSPF v2/v3
    • VXLAN, IPSec VPN
    • SNAT, DNAT, DNAT Pool
    • PPPoE Client
    • Stateless ACL
    • QoS

    x86 VM Only

    For learning & testing

    Start now!

    Commercial Edition

    $999

    +10% Annual Upgrade Fee

    Software Specification

    • RIP v1/v2, MPLS
    • L2TPv3, GRE, Wireguard
    • CGNAT, MAP-E/MAP-T
    • PPPoE Client & Server
    • GeoIP/GeoSite, SPI
    • HQoS
    • HW-Accelerated (ARM)

    x86 VM Platform | ARM ET2508

    For enterprise & campus

    commercial Plus edition

    $1799

    +10% Annual Upgrade Fee

    Software Specification

    • RIP v1/v2, MPLS
    • L2TPv3, GRE, Wireguard
    • CGNAT, MAP-E/MAP-T
    • PPPoE Client & Server
    • GeoIP/GeoSite, SPI
    • HQoS
    • HW-Accelerated (ARM)

    ARM ET3600

    For data centers & ISPs

    AsterNOS-VPP Features

    Feature Level 1 FunctionLevel 2 FunctionFreeCommercial (X86 VM)Commercial (ARM)
    InterfacePort Speed1G/100M/10Mright2
    InterfacePort Speed2.5Gright2
    InterfacePort Speed10G/100Gright2
    InterfacePort Config(no shutdown) / shut downright2right2right2
    InterfacePort Configstart delayright2right2right2
    InterfacePoE FeaturesPoE Enable/Disableright2
    InterfacePoE FeaturesPower delayright2
    InterfacePoE Features15W/ 30W / 60Wright2
    InterfacePoE FeaturesPriority: Low/High / Criticalright2
    InterfacePoE FeaturesLegacy Detectright2
    InterfacePoE FeaturesPoE Timer Controlright2
    InterfacePoE FeaturesLLDP PoE Negotiationright2
    InterfacePoE FeaturesPoE Power Monitorright2
    InterfaceInterface StatsPackets / Octets / Errors / Drops / Speedright2right2right2
    InterfaceModule InfoPresence / Absenceright2
    InterfaceModule InfoVendor inforight2
    InterfaceModule InfoOptical Powerright2
    InterfaceBandwidth AlertRX / TX Thresholdsright2right2
    InterfaceBandwidth AlertBoth Thresholdright2right2
    InterfaceBatch ConfigH/W Interfacesright2right2
    InterfaceLAGright2right2
    InterfaceLoopback IF64 x Loopbackright2right2right2
    InterfaceLAN IF4×2.5G/1G + 8×1G/100M/10M RJ45right2
    InterfaceWAN IF4×10G SFP+right2
    InterfaceWAN IFPPPoE / DHCP / Static IPright2right2right2
    InterfaceWi-Fi InterfaceOptional 2.4/5GHz Moduleright2
    IP Unicast RoutingStatic Routing-right2right2right2
    IP Unicast RoutingVRFL3 Port Isolationright2right2right2
    IP Unicast RoutingVRFVLAN IF Isolationright2right2right2
    IP Unicast RoutingVRFLAG IF Isolationright2right2right2
    IP Unicast RoutingVRFNeighbor Isolationright2right2right2
    IP Unicast RoutingVRFLPM Isolationright2right2right2
    IP Unicast RoutingVRFInter-VRF Forwardingright2right2right2
    IP Unicast RoutingPBR-right2right2
    IP Unicast RoutingBGP / MP-BGP-right2right2right2
    IP Unicast RoutingOSPF v2/v3-right2right2right2
    IP Unicast RoutingRIP v1/v2-right2right2
    IP Unicast RoutingRouting PolicyRoute Mapright2right2right2
    IP Unicast RoutingRouting PolicyPrefix List (v4/v6)right2right2right2
    IP Unicast RoutingECMP/UCMP-right2right2right2
    MPLSBasic MPLSGlobal / Per-Interfaceplanned-supportplanned-support
    MPLSBasic MPLSStatic LSPplanned-supportplanned-support
    MPLSBasic MPLSMPLS LDPplanned-supportplanned-support
    MPLSBasic MPLSLDP Security mechanismplanned-supportplanned-support
    MPLSBasic MPLSMPLS QoSplanned-supportplanned-support
    MPLSVPNVPWSplanned-supportplanned-support
    MPLSVPNVPLSplanned-supportplanned-support
    MPLSVPNL3VPNplanned-supportplanned-support
    NAT1:1 NAT / Port Forward-right2right2right2
    NATTwice NAT-supportedsupported
    NATVRF Aware-supportedsupported
    NATNAT Hairpinning-supportedsupported
    NATTCP MSS Clamping-supportedsupportedsupported
    NATStatic / Dynamic Mapping-supportedsupportedsupported
    NATSub-Port Support-supportedsupportedsupported
    NATIF Support (Phy/VLANIF/LAG/Loopback)-supportedsupportedsupported
    NATSNAT/DNAT/DNAT POOL-supportedsupportedsupported
    NATCGNAT(Carrier-grade NAT)-planned-supportplanned-support
    NATMAP-E-supportedsupported
    NATMAP-T-supportedsupported
    TunnelGREL2/L3 tunnelsupportedsupported
    TunnelGREIPv4/IPv6supportedsupported
    TunnelGREencap/decap statssupportedsupported
    TunnelVXLANVTEP v4/v6supportedsupported
    Tunnel VXLANStatic VXLANsupportedsupported
    Tunnel VXLANEVPN VXLANsupportedsupportedsupported
    Tunnel VXLANVXLAN gatewaysupportedsupportedsupported
    Tunnel VXLANencap format(v4 over v4, v6 over v4)supportedsupportedsupported
    Tunnel VXLANVXLAN Stats encap/decapsupportedsupportedsupported
    TunnelL2TPv3 VPN-supportedsupported
    TunnelIPsec VPNRoute Based VPNsupportedsupportedsupported
    TunnelIPsec VPNPolicy-Based (bypass / discard / protect)supportedsupported
    TunnelIPsec VPNIKEv2supportedsupportedsupported
    TunnelIPsec VPNDiffie-Hellman (DH)supportedsupportedsupported
    TunnelIPsec VPNMessage Authentication Code (MAC) algorithm support:supportedsupportedsupported
    TunnelIPsec VPNEncryption: AES (CBC/GCM/CTR), 3DES, ChaCha20/Poly1305supportedsupportedsupported
    TunnelWireguard security VPNNetbird Supportsupportedsupported
    TunnelWireguard security VPNEncryption: ChaCha20-Poly1305 (RFC7539 AEAD)supportedsupported
    TunnelWireguard security VPNKey Exchange: Curve25519 (ECDH)supportedsupported
    TunnelWireguard security VPNHashing: BLAKE2s (RFC7693)supportedsupported
    TunnelWireguard security VPNTable keys: SipHash24supportedsupported
    TunnelWireguard security VPNKDF: HKDF (RFC5869)supportedsupported
    TunnelPPPoEPPPoE Clientsupportedsupportedsupported
    TunnelPPPoEPPPoE Serverplanned-supportplanned-support
    ServiceARP/NDP-supportedsupportedsupported
    ServiceDHCPv4/v6 Server and Relay-supportedsupportedsupported
    ServiceDNS-supportedsupportedsupported
    SecurityBUM Ctl-supportedsupportedsupported
    SecurityUser Access AuthNDot1xsupportedsupportedsupported
    SecurityUser Access AuthNPortalsupportedsupported
    SecurityDHCP v4/v6 Snooping-supportedsupported
    SecurityND Snooping-supportedsupported
    SecurityND policy-supportedsupported
    SecurityDAI (Dynamic ARP Inspection)-supportedsupported
    SecurityIPSG v4/v6-supportedsupported
    SecurityACLIngress/Egresssupportedsupportedsupported
    SecurityACLMatch: MAC/IP/L3/L4 Fieldssupportedsupportedsupported
    SecurityACLPermit/Denysupportedsupportedsupported
    SecurityACLHit Statisticssupportedsupportedsupported
    SecurityACLPort/LAG/VLAN/SubIF Bindsupportedsupportedsupported
    SecurityACLCtrlPlane (NTP/SNMP/SSH/Telnet)supportedsupportedsupported
    SecurityACLDNS/GeoIP/Geositesupportedsupported
    SecurityACLStateless/Statefulsupportedsupported
    Security*SPI(Stateful packet inspection)-supportedsupported
    SecurityUnicast Reverse Path Forwarding (uRPF)-supportedsupported
    QoSPriority Mappingdot1p to tcplanned-supportsupported
    QoSPriority Mappingdscp to tcplanned-supportsupported
    QoSPriority Mappingtc to queueplanned-supportsupported
    QoSQueue ScheduleStrictplanned-supportsupported
    QoSQueue ScheduleDWRRplanned-supportsupported
    QoSRate Limit (RFC2697/2698/4115)per portsupportedsupportedsupported
    QoSRate Limit (RFC2697/2698/4115)per queuesupportedsupportedsupported
    QoSShapingper interfacesupportedsupportedsupported
    QoSFlow ClassifyIACL + CAR Bindingsupportedsupportedsupported
    QoSFlow ClassifyEACLsupportedsupportedsupported
    QoSFlow ClassifyCAR (Committed Access Rate)supportedsupportedsupported
    QoSQos Statusshow IF qos statssupportedsupportedsupported
    QoSHQoSSub/User-Levelplanned-supportplanned-support
    QoSHQoSService-Level(VOIP/Video/Internet)planned-supportplanned-support
    QoSHQoSApp-Level (DSCP: EF/AF41/CS3/AF21)planned-supportplanned-support
    High AvailabilityMC-LAG-supportedsupportedsupported
    High AvailabilityVRRPBackup group (HW/VLAN IF)supportedsupportedsupported
    High AvailabilityVRRPVRRPv3 (RFC5798)supportedsupportedsupported
    High AvailabilityVRRPAdvertise interval / priority configsupportedsupportedsupported
    High AvailabilityVRRPMaster auto send ARP/NDsupportedsupportedsupported
    High AvailabilityBFD-supportedsupportedsupported
    High AvailabilityMonitor Link-supportedsupportedsupported
    High AvailabilitySLA-supportedsupported
    High AvailabilitySLAAC-supportedsupported
    High AvailabilityRouting Track-supportedsupported
    High AvailabilityHash-supportedsupported
    Monitoring & ManagementSPAN/ ERSPAN-supportedsupportedsupported
    Monitoring & ManagementSNMP-supportedsupportedsupported
    Monitoring & ManagementNetFlow/IPFIX-supportedsupportedsupported
    Monitoring & ManagementPrometheus exporter-supportedsupported
    Monitoring & ManagementZTP (Zero Touch Provisioning)-supportedsupportedsupported
    Monitoring & ManagementSSH-supportedsupportedsupported
    Monitoring & ManagementTelnet-supportedsupportedsupported
    Monitoring & ManagementRestfulAPI-supportedsupported
    Monitoring & ManagementuCentral-planned-supportsupported

    Edition

    Free Edition — x86 VM Platform ($0), Commercial Edition — x86 VM Platform ($999), Commercial Edition — ARM ET2508 ($999), Commercial Plus Edition — ARM ET3600 ($1799)

    asternos-vpp

    AsterNOS VPP Quick Start Documentation

    Explore the official AsterNOS VPP quick start guide — a comprehensive resource covering setup objectives, supported platforms, key features, sample configurations, and performance validation for fast and efficient deployment.

    learn more

    Frequently Asked Questions

    Yes. You can download the free version and install it on x86-based devices to enjoy the benefits of open networking. A step-by-step installation guide is available here. Click here to view it. Please note that no additional technical support is provided for the free version.

    The free version is limited to x86 platforms. The Commercial Edition offers significant improvements in two aspects:
    · First, in terms of services, it provides exclusive technical support and consulting services;
    · Second, in terms of functionality, it adds multiple extended capabilities. For example, the tunneling technology supports MPLS, L2TPv3, GRE, and Wireguard VPN, and the address translation function supports CGNAT, MAP-E/MAP-T, etc.
    · For more extended functions of the paid version, you can learn about them in detail through the comparison table at the top of this page.

    Performance depends on your deployment platform:
    Asterfusion ET2500: Guaranteed 60Gbps routing/firewall/encryption with hardware-accelerated packet processing.
    Asterfusion ET3600: Guaranteed up to 2 x 100Gbps routing, 2 x 80Gbps firewall/encryption with dual-DPU hardware acceleration.
    x86 Platform (Software Only): Performance varies based on your hardware—CPU cores, clock speed, memory bandwidth, and NIC capabilities all affect throughput.

    With the commercial edition, you’ll receive:
    · A perpetual software license
    · Comprehensive technical documentation
    · Online service response and remote support via email or meetings
    · Real-time remote assistance
    · Regular software updates following a structured release policy
    AsterNOS follows a predictable update schedule that applies to all editions, including:
    · Quarterly major releases (at least 4 per year) that synchronize with Community SONiC
    · More frequent minor releases containing enhancements, fixes, and patches for the current version, which can be released at any point during the major version support cycle.

    Absolutely. You’re welcome to start with the free version and upgrade to a commercial plan at any time for additional features and support.

    After your subscription expires, you can continue to receive full technical support services by simply paying an annual renewal fee equal to 10% of the original license cost.

    Reviews

    There are no reviews yet.

    Be the first to review “AsterNOS-VPP- Open Router OS High-Performance Networking Powered by SONiC & VPP”

    Your email address will not be published. Required fields are marked *

    Related Products

    • ET3616-4P4S Open Intelligent Gateway/Router

    • ET3608-2P2S Open Intelligent Gateway/Router

    • ET2508-4S4M8 Open Intelligent Gateway/Router

    Not Sure What You Need?

    Tell us your setup. We’ll recommend the right fit.
    Watch a live demo tailored to your needs.

    asternos-vpp-1AsterNOS-VPP- Open Router OS High-Performance Networking Powered by SONiC & VPP
    Price range: $0.00 through $1,799.00Select options