AsterNOS Powered by SONiC & VPP

SKU: AsterNOS-VPP

Price range: $0.00 through $1,799.00 VAT excl.

  • SONiC’s modular control plane, VPP’s high-performance data plane.
  • Ultra-fast routing, firewall processing, and encryption/decryption.
  • Built-in IPSec, WireGuard, ACLs, GeoIP filtering protection.
  • Free image or pre-integrated with Asterfusion ARM-based hardware.
  • Support NetFlow, Prometheus, and SNMP for full-stack, real-time visibility.
    SKU: AsterNOS-VPP Category: Brand:

    Open Router OS powered by SONiC & VPP brings next-level performance and security to your network infrastructure. Designed for high-speed routing, it combines SONiC’s modular control plane with VPP’s ultra-fast data plane to deliver lightning-fast performance with low latency. Whether you’re managing a small business or a large enterprise, this solution offers flexible deployment options, including a free image for DIY users or a bundled hardware option for enterprise needs.

    With robust security features like IPSec VPN, WireGuard, ACLs, and GeoIP filtering, your network stays protected against external threats. Real-time monitoring tools such as NetFlow, Prometheus, and SNMP ensure you can continuously track network performance and health. Plus, with seamless integration and high scalability, Open Router OS ensures that your network can grow and evolve as needed.

    Whether you need software-only deployment flexibility or complete hardware-software bundles, AsterNOS-VPP delivers enterprise-grade routing, advanced VPN, deep packet inspection, and real-time monitoring—all on open, vendor-neutral architecture.

    sonic-vpp-asternos-vpp-architecture-control-plane-vpp-data-plane-open-network-system

    Hardware-Accelerated Performance
    Maximum Performance with Asteraix Hardware
    When deployed on RT2508 or RT3600 hardware, AsterNOS-VPP unlocks full hardware acceleration through optimized engine bindings to Marvell OCTEON CN102/CN103 processors. This delivers guaranteed performance:

    RT2508: 50Gbps routing capacity, 50Gbps firewall capacity, 50Gbps encryption and decryption capacity
    RT3608: 100Gbps routing capacity, 80Gbps firewall capacity, 80Gbps encryption and decryption capacity
    RT3616: 2 x 100Gbps routing capacity, 2 x 80Gbps firewall capacity, 2 x 80Gbps encryption and decryption capacity

    Flexible Performance on x86 Platforms
    For software-only deployments on x86 platforms, AsterNOS-VPP performance scales with your hardware capabilities. Actual throughput depends on the CPU specifications, memory bandwidth, NIC capabilities, and the characteristics of the workload. This provides deployment flexibility—run it on virtual machines for testing or bare-metal servers for production workloads tailored to your requirements.

    Feature Level 1 FunctionLevel 2 FunctionFreeCommercial (X86 VM)Commercial (ARM)
    InterfacePort Speed1G/100M/10Mright2
    InterfacePort Speed2.5Gright2
    InterfacePort Speed10G/100Gright2
    InterfacePort Config(no shutdown) / shut downright2right2right2
    InterfacePort Configstart delayright2right2right2
    InterfacePoE FeaturesPoE Enable/Disableright2
    InterfacePoE FeaturesPower delayright2
    InterfacePoE Features30W / 60Wright2
    InterfacePoE FeaturesPriority: Low/High / Criticalright2
    InterfacePoE FeaturesLegacy Detectright2
    InterfacePoE FeaturesPoE Timer Controlright2
    InterfacePoE FeaturesLLDP PoE Negotiationright2
    InterfacePoE FeaturesPoE Power Monitorright2
    InterfaceInterface StatsPackets / Octets / Errors / Drops / Speedright2right2right2
    InterfaceModule InfoPresence / Absenceright2
    InterfaceModule InfoVendor inforight2
    InterfaceModule InfoOptical Powerright2
    InterfaceBandwidth AlertRX / TX Thresholdsright2right2
    InterfaceBandwidth AlertBoth Thresholdright2right2
    InterfaceBatch ConfigH/W Interfacesright2right2
    InterfaceLoopback Interface64 x Loopbackright2right2right2
    InterfaceLAN Interface4×2.5G/1G + 8×1G/100M/10M RJ45right2
    InterfaceWAN Interface10G SFP+right2
    InterfaceWAN InterfacePPPoE / DHCP / Static IPright2right2right2
    Layer 2 ForwardingMACStatic MACright-iconright-iconright2
    Layer 2 ForwardingMACMAC Learningright-iconright-iconright2
    Layer 2 ForwardingMACMAC Migrationright-iconright-iconright2
    Layer 2 ForwardingMACMAC Flushright-iconright-iconright2
    Layer 2 ForwardingMACMAC Learning Enable/Disableright-iconright-iconright2
    Layer 2 ForwardingMACBlack Hole MACright-iconright-iconright2
    Layer 2 ForwardingMACMAC Flappingright-iconright-iconright2
    Layer 2 ForwardingMACMAC Limitright-iconright-iconright2
    Layer 2 ForwardingMACMAC Showright-iconright-iconright2
    Layer 2 ForwardingVLANVLAN Create/Deleteright-iconright-iconright2
    Layer 2 ForwardingVLANVLAN Memberright-iconright-iconright2
    Layer 2 ForwardingVLANBUM Forward Configuration Flood/Dropright-iconright-iconright2
    Layer 2 ForwardingVLANBatch Configure VLANright-iconright-iconright2
    Layer 2 ForwardingVLANShow VLAN and VLAN Memberright-iconright-iconright2
    Layer 2 ForwardingQinQ802.1aq VLAN tagright-iconright-iconright2
    Layer 2 ForwardingLAGCreate/Delete LAGright-iconright-iconright2
    Layer 2 ForwardingLAGLAG Mode Support Static or Dynamic(LACP)right-iconright-iconright2
    Layer 2 ForwardingLAGLAG Memberright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPEnable/Disableright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPMSTP Instance Create, Support Priority Settingright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPInterface Status Transfer Timeright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPBPDU Send Intervalright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPMax BPDU Aging Timeright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPSet STP Area Nameright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPSecurity, Support BPDU Filter/Guardright-iconright-iconright2
    Layer 2 ForwardingSTP/MSTPShow MSTP Treeright-iconright-iconright2
    Layer 2 ForwardingLLDPDisable/Enableright-iconright-iconright2
    Layer 2 ForwardingLLDPLLDP Neighbor Informationright-iconright-iconright2
    Layer 2 ForwardingLLDPMgmtIP Configurationright-iconright-iconright2
    Layer 2 ForwardingLLDPPortId Subtyperight-iconright-iconright2
    Layer 2 ForwardingMVRP-right-iconright-iconright2
    Layer 2 ForwardingPort Isolation-right-iconright-iconright2
    IP Unicast RoutingStatic Routing-right2right2right2
    IP Unicast RoutingVRFL3 Port Isolationright2right2right2
    IP Unicast RoutingVRFVLAN IF Isolationright2right2right2
    IP Unicast RoutingVRFLAG IF Isolationright2right2right2
    IP Unicast RoutingVRFNeighbor Isolationright2right2right2
    IP Unicast RoutingVRFLPM Isolationright2right2right2
    IP Unicast RoutingVRFInter-VRF Forwardingright2right2right2
    IP Unicast RoutingPBR-right-iconright-iconright-icon
    IP Unicast RoutingBGP / MP-BGPIBGP / EBGPright2right2right2
    IP Unicast RoutingBGP / MP-BGPBGP Neighbor configrationright2right2right2
    IP Unicast RoutingBGP / MP-BGPPeer Groupright2right2right2
    IP Unicast RoutingBGP / MP-BGPBGP Listenright2right2right2
    IP Unicast RoutingBGP / MP-BGPDistance settingright2right2right2
    IP Unicast RoutingBGP / MP-BGPRouting redistributeright2right2right2
    IP Unicast RoutingBGP / MP-BGPBGP best-path selectright2right2right2
    IP Unicast RoutingBGP / MP-BGPBGP Route Reflectorright2right2right2
    IP Unicast RoutingBGP / MP-BGPGraceful restartright2right2right2
    IP Unicast RoutingBGP / MP-BGPLinkage BGP with BFDright2right2right2
    IP Unicast RoutingBGP / MP-BGPBGP routing policyright2right2right2
    IP Unicast RoutingOSPF v2/v3-right2right2right2
    IP Unicast RoutingRIP v1/v2-right2right2
    IP Unicast RoutingRouting PolicyRoute Mapright2right2right2
    IP Unicast RoutingRouting PolicyPrefix List (v4/v6)right2right2right2
    IP Unicast RoutingECMP/UCMP-right2right2right2
    MPLSDynamic LSPLDPright-iconright-iconright-icon
    MPLSStatic LSPSupport multi nexthopright-iconright-iconright-icon
    MPLSBasic MPLSEnable/disable on phy portright-iconright-iconright-icon
    MPLSL2VPNStatic/dynamic VPWS, VPLSright-iconright-iconright-icon
    MPLSL3VPN-right-iconright-iconright-icon
    IP ServiceNAT1:1 NATright2right2right2
    IP ServiceL3 InterfaceCreate/Delete L3 Interfaceright2right2right2
    IP ServiceL3 InterfaceIPv4/v6 Addressright2right2right2
    IP ServiceL3 InterfaceAlloc IPv4/IPv6 Address by DHCP Clientright2right2right2
    IP ServiceL3 InterfaceConfigure MAC Addressright2right2right2
    IP ServiceL3 InterfaceConfigure MTUright2right2right2
    IP ServiceL3 InterfaceL3 Sub Interfaceright2right2right2
    IP ServiceARP/NDPStatic ARP/NDP Configurationright2right2right2
    IP ServiceARP/NDPDynamic ARP/NDP right2right2right2
    IP ServiceARP/NDPDynamic ARP/NDP Migrationright2right2right2
    IP ServiceARP/NDPDynamic ARP/NDP Aging Intervalright2right2right2
    IP ServiceARP/NDPARP/NDP Detectionright2right2right2
    IP ServiceARP/ND to Host-right2right2right2
    IP ServiceDHCPv4 ServerBind address pool to VLAN IF or phy portright2right2right2
    IP ServiceDHCPv4 ServerConfigure the address lease periodright2right2right2
    IP ServiceDHCPv4 ServerInformation carried by serverright2right2right2
    IP ServiceDHCPv4 ServerAllocate Address Policyright2right2right2
    IP ServiceDHCPv4 ServerDHCP Option Groupright2right2right2
    IP ServiceDHCPv4 ServerOption93/82right2right2right2
    IP ServiceDHCPv4 ServerShow Address Pool Policyright2right2right2
    IP ServiceDHCPv4 ServerDNS Server Configurationright2right2right2
    IP ServiceDHCPv4 ServerDHCP Failoverright2right2right2
    IP ServiceDHCPv4 RelayDHCP Server Addressright2right2right2
    IP ServiceDHCPv4 RelayUplink Portright2right2right2
    IP ServiceDHCPv4 RelayDownlink Portright2right2right2
    IP ServiceDHCPv4 RelayAgent IPright2right2right2
    IP ServiceDHCPv4 RelayOption82right2right2right2
    IP ServiceDHCPv6 ServerBind address pool to VLAN IF or phy portright2right2right2
    IP ServiceDHCPv6 ServerConfigure the address lease periodright2right2right2
    IP ServiceDHCPv6 ServerDNS Serverright2right2right2
    IP ServiceDHCPv6 RelayDHCP Server Addressright2right2right2
    IP ServiceDHCPv6 RelayUplink Portright2right2right2
    IP ServiceDHCPv6 RelayDownlink Portright2right2right2
    IP ServiceDHCPv6 RelayAgent IPright2right2right2
    IP ServiceDNSDNS Proxyright2right2right2
    IP ServiceDNSDNS cache name resolver,cache( A/AAAA)right2right2right2
    IP ServiceNAT1:1 NATright2right2right2
    IP ServiceNATPort Forwardsright-iconsupportedsupported
    IP ServiceNATTCP MSS Clampingright-iconsupportedsupported
    IP ServiceNATStatic / Dynamic Mappingsupportedsupportedsupported
    IP ServiceNATSub-Port Supportsupportedsupportedsupported
    IP ServiceNATSupport phy port/VLAN IF/LAG/Loopbacksupportedsupportedsupported
    IP ServiceNATSNAT/DNAT/DNAT POOLsupportedsupportedsupported
    IP ServiceMAP-E-right-iconsupportedsupported
    IP ServiceMAP-T-right-iconsupportedsupported
    IP MulticastIGMP SnoopingEnable/Disable IGMP Snoopingright-iconsupportedsupported
    IP MulticastIGMP SnoopingStatic IGMP Snoopingright-iconsupportedsupported
    IP MulticastIGMP SnoopingDynamic IGMP Snoopingright-iconsupportedsupported
    IP MulticastIGMP SnoopingSupport IGMP Protocol Version(v1/v2/v3)right-iconsupportedsupported
    IP MulticastIGMP SnoopingEntry Limit Based on IGMP Member Portright-iconsupportedsupported
    IP MulticastIGMP SnoopingIGMP Snooping Mulicast Queryright-iconsupportedsupported
    IP MulticastIGMP SnoopingIGMP Snooping Proxyright-iconsupportedsupported
    IP MulticastMLD SnoopingEnable/Disable MLD Snoopingright-iconsupportedsupported
    IP MulticastMLD SnoopingStatic MLD Snoopingright-iconsupportedsupported
    IP MulticastMLD SnoopingDynamic MLD Snoopingright-iconsupportedsupported
    IP MulticastMLD SnoopingSupport MLD Protocol Version(v1/v2)right-iconsupportedsupported
    IP MulticastMLD SnoopingEntry Limit Based on Member Portright-iconsupportedsupported
    IP MulticastMLD SnoopingMLD Snooping Multicast Queryright-iconsupportedsupported
    IP MulticastMLD SnoopingMLD Snooping Proxyright-iconsupportedsupported
    IP MulticastPIMPIM Version Support v4 and v6right-iconsupportedsupported
    IP MulticastPIMPIM Sparse Moderight-iconsupportedsupported
    IP MulticastPIMSPT Moderight-iconsupportedsupported
    IP MulticastPIMEnable/Disable PIMright-iconsupportedsupported
    IP MulticastPIMSupport phy port/VLAN IF/LAGright-iconsupportedsupported
    TunnelVXLANVTEP Address Support IPv4right-iconsupportedsupported
    TunnelVXLANDynamic VXLAN Tunnel Configurationright-iconsupportedsupported
    TunnelVXLANVXLAN Gatewayright-iconsupportedsupported
    Tunnel VXLANEVPN VXLANsupportedsupportedsupported
    Tunnel VXLANencap format(v4 over v4, v6 over v4)supportedsupportedsupported
    Tunnel VXLANVXLAN Stats encap/decapsupportedsupportedsupported
    TunnelL2TPv3 VPN-supportedsupported
    TunnelIPsec VPNRoute Based VPNsupportedsupportedsupported
    TunnelIPsec VPNPolicy-Based (bypass / discard / protect)supportedsupported
    TunnelIPsec VPNIKEv2supportedsupportedsupported
    TunnelIPsec VPNDiffie-Hellman (DH)supportedsupportedsupported
    SecurityBUM Packet Policy Based on Interface-supportedsupportedsupported
    SecurityStorm Suppression Based on Interface-supportedsupportedsupported
    SecuritySystem User Access Control Policy-right-iconright-iconright-icon
    SecurityDHCP v4/v6 Snooping-right-iconsupportedsupported
    SecurityND Snooping-right-iconsupportedsupported
    SecurityND Policy-right-iconsupportedsupported
    SecurityDAI (Dynamic ARP Inspection)-right-iconsupportedsupported
    SecurityIPSG v4/v6-right-iconsupportedsupported
    SecurityACLIngress/Egresssupportedsupportedsupported
    SecurityACLMatch: MAC/IP/L3/L4 Fieldssupportedsupportedsupported
    SecurityACLPermit/Denysupportedsupportedsupported
    SecurityACLHit Statisticssupportedsupportedsupported
    SecurityACLPort/LAG/VLAN/SubIF Bindsupportedsupportedsupported
    SecurityACLCtrlPlane (NTP/SNMP/SSH/Telnet)supportedsupportedsupported
    SecurityACLDNS/GeoIP/Geositeright-iconsupportedsupported
    SecurityACLStateless/Statefulright-iconsupportedsupported
    Security*SPI(Stateful packet inspection)-supportedsupported
    SecurityUnicast Reverse Path Forwarding (uRPF)-right-iconsupportedsupported
    SecurityPPPoE Client-right-iconsupportedsupported
    SecurityPPPoE Server-right-iconsupportedsupported
    SecurityIpsec VPN-right-iconsupportedsupported
    SecurityWireguard Security VPN-right-iconsupportedsupported
    QoSPriority Mappingdot1p to tcplanned-supportsupported
    QoSPriority Mappingdscp to tcplanned-supportsupported
    QoSPriority Mappingtc to queueplanned-supportsupported
    QoSQueue ScheduleStrictplanned-supportsupported
    QoSQueue ScheduleDWRRplanned-supportsupported
    QoSRate Limit (RFC2697/2698/4115)per portsupportedsupportedsupported
    QoSRate Limit (RFC2697/2698/4115)per queuesupportedsupportedsupported
    QoSShapingper interfacesupportedsupportedsupported
    QoSFlow ClassifyIACL + CAR Bindingsupportedsupportedsupported
    QoSFlow ClassifyEACLsupportedsupportedsupported
    QoSFlow ClassifyCAR (Committed Access Rate)supportedsupportedsupported
    QoSQoS StatusShow Interface QoS Statisticssupportedsupportedsupported
    QoSHQoSSub/User-Levelright-iconright-iconright-icon
    QoSHQoSService-Level(VOIP/Video/Internet)right-iconright-iconright-icon
    QoSHQoSApp-Level (DSCP: EF/AF41/CS3/AF21)right-iconright-iconright-icon
    High AvailabilityMC-LAG-supportedsupportedsupported
    High AvailabilityVRRPBackup group (HW/VLAN IF)supportedsupportedsupported
    High AvailabilityVRRPVRRPv3 (RFC5798)supportedsupportedsupported
    High AvailabilityVRRPAdvertise interval / priority configsupportedsupportedsupported
    High AvailabilityVRRPMaster auto send ARP/NDsupportedsupportedsupported
    High AvailabilityBFD-supportedsupportedsupported
    High AvailabilityMonitor Link-supportedsupportedsupported
    High AvailabilitySLA-right-iconsupportedsupported
    High AvailabilityRouting Track-right-iconsupportedsupported
    High AvailabilityHash-right-iconsupportedsupported
    Reporting and MonitoringSPAN/ ERSPAN-supportedsupportedsupported
    Reporting and MonitoringSNMP-supportedsupportedsupported
    Reporting and MonitoringNetFlow/IPFIX-supportedsupportedsupported
    Reporting and MonitoringPrometheus exporter-right-iconsupportedsupported
    User Access and AuthenticationDot1x-supportedsupportedsupported
    Device ManagementSystem User/Privilege ManagementLocal User Authenticationsupportedsupportedsupported
    Device ManagementSystem User/Privilege ManagementRadius User Authenticationsupportedsupportedsupported
    Device ManagementSystem User/Privilege ManagementTACACS+User Authenticationsupportedsupportedsupported
    Device ManagementSystem User/Privilege ManagementAdd/Change User ID/Passwordsupportedsupportedsupported
    Device ManagementLogin Methodout-of-band serial consolesupportedsupportedsupported
    Device ManagementLogin MethodSSHsupportedsupportedsupported
    Device ManagementLogin MethodTelnetsupportedsupportedsupported
    Device ManagementLogin Methodin-band managementsupportedsupportedsupported
    Device ManagementManagementMGMT IP Addresssupportedsupportedsupported
    Device ManagementManagementMGMT Gatewaysupportedsupportedsupported
    Device ManagementManagementMGMT VRFsupportedsupportedsupported
    Device ManagementTroubleshooting InformationSONiC Bash Show Tech Supportsupportedsupportedsupported
    Device ManagementZTP (Zero Touch Provisioning)-supportedsupportedsupported
    Device ManagementConfigure Host Name-supportedsupportedsupported
    Device ManagementSystem Time Management-supportedsupportedsupported
    Device ManagementLicense Management-supportedsupportedsupported
    Device ManagementFTP/TFTP-supportedsupportedsupported
    Device ManagementDevice Status Summary-supportedsupportedsupported
    Device ManagementCritical Resource Monitoring (CRM)-supportedsupportedsupported
    Device ManagementNTP Client-supportedsupportedsupported
    Device ManagementLog management-supportedsupportedsupported
    Device ManagementDiagnostic ToolsPingsupportedsupportedsupported
    Device ManagementDiagnostic ToolsTraceroutesupportedsupportedsupported
    Edition

    Free Edition — x86 VM Platform ($0), Commercial Edition — x86 VM Platform ($999), Commercial Edition — ARM ET2508 ($999), Commercial Plus Edition — ARM ET3600 ($1799)

    Related Products

    • RT3616 Enterprise Router

    • RT3608 Enterprise Router

    • RT2508 Enterprise Router

    SONiC

    SONiC decouples the network operating system from switch hardware. Built on Linux with a containerized architecture, it programs switching ASICs through SAI (the Switch Abstraction Interface), so the…

    Read full definition →
    VPP

    User-space framework that forwards packets in cache-friendly vectors (batches) on commodity CPUs; used to build software routers and dataplanes.

    Read full definition →