asternos-vpp-sonic-routing-os-lightning-fast-secure-vpn-network-automation

AsterNOS-VPP- Open Router OS High-Performance Networking Powered by SONiC & VPP

Price range: $0.00 through $1,799.00

SONiC’s modular control plane, VPP’s high-performance data plane.
Ultra-fast routing, firewall processing, and encryption/decryption.
Built-in IPSec, WireGuard, ACLs, GeoIP filtering protection.
Free image or pre-integrated with Asterfusion ARM-based hardware.
Support NetFlow, Prometheus, and SNMP for full-stack, real-time visibility.

Edition

Clear

Note: Prices are exclusive of customs duties, import taxes, and VAT. Any additional charges imposed by your country are the buyer's responsibility.

GUARANTEED SAFE CHECKOUT

SKU: AsterNOS-VPP Categories: Best Selling, Software

Open Router OS powered by SONiC & VPP brings next-level performance and security to your network infrastructure. Designed for high-speed routing, it combines SONiC’s modular control plane with VPP’s ultra-fast data plane to deliver lightning-fast performance with low latency. Whether you’re managing a small business or a large enterprise, this solution offers flexible deployment options, including a free image for DIY users or a bundled hardware option for enterprise needs.

With robust security features like IPSec VPN, WireGuard, ACLs, and GeoIP filtering, your network stays protected against external threats. Real-time monitoring tools such as NetFlow, Prometheus, and SNMP ensure you can continuously track network performance and health. Plus, with seamless integration and high scalability, Open Router OS ensures that your network can grow and evolve as needed.

Whether you need software-only deployment flexibility or complete hardware-software bundles, AsterNOS-VPP delivers enterprise-grade routing, advanced VPN, deep packet inspection, and real-time monitoring—all on open, vendor-neutral architecture.

Hardware-Accelerated Performance
Maximum Performance with Asterfusion Hardware
When deployed on Asterfusion ET2508 or ET3600 hardware, AsterNOS-VPP unlocks full hardware acceleration through optimized engine bindings to Marvell OCTEON CN102/CN103 processors. This delivers guaranteed performance:

ET2508: 50Gbps routing capacity, 50Gbps firewall capacity, 50Gbps encryption and decryption capacity
ET3608: 100Gbps routing capacity, 80Gbps firewall capacity, 80Gbps encryption and decryption capacity
ET3616: 2 x 100Gbps routing capacity, 2 x 80Gbps firewall capacity, 2 x 80Gbps encryption and decryption capacity

Flexible Performance on x86 Platforms
For software-only deployments on x86 platforms, AsterNOS-VPP performance scales with your hardware capabilities. Actual throughput depends on the CPU specifications, memory bandwidth, NIC capabilities, and the characteristics of the workload. This provides deployment flexibility—run it on virtual machines for testing or bare-metal servers for production workloads tailored to your requirements.

AsterNOS-VPP – Next-Generation Router OS for Modern Networks

AsterNOS-VPP combines SONiC’s open control plane with VPP’s hardware-accelerated data plane, delivering carrier-grade performance from the edge to the core. Deploy as software-only on x86, or choose integrated hardware bundles with Marvell OCTEON CN102/CN103 platforms for turnkey solutions. Scale from 0 to 200Gbps across three editions designed for every network scenario—from branch offices to backbone infrastructure. Built-in IPSec/WireGuard VPN, advanced ACLs, GeoIP filtering, and comprehensive monitoring ensure your network stays fast, secure, and observable.

FREE EDITION

Forever Free

Software Specification

• VRF, BGP, OSPF v2/v3
• VXLAN, IPSec VPN
• SNAT, DNAT, DNAT Pool
• PPPoE Client
• Stateless ACL
• QoS

x86 VM Only

For learning & testing

Start now!

Commercial Edition

$999

+10% Annual Upgrade Fee

Software Specification

• RIP v1/v2, MPLS
• L2TPv3, GRE, Wireguard
• CGNAT, MAP-E/MAP-T
• PPPoE Client & Server
• GeoIP/GeoSite, SPI
• HQoS
• HW-Accelerated (ARM)

x86 VM Platform | ARM ET2508

For enterprise & campus

commercial Plus edition

$1799

+10% Annual Upgrade Fee

Software Specification

• RIP v1/v2, MPLS
• L2TPv3, GRE, Wireguard
• CGNAT, MAP-E/MAP-T
• PPPoE Client & Server
• GeoIP/GeoSite, SPI
• HQoS
• HW-Accelerated (ARM)

ARM ET3600

For data centers & ISPs

AsterNOS-VPP Features

Feature	Level 1 Function	Level 2 Function
Interface	Port Speed	1G/100M/10M
Interface	Port Speed	2.5G
Interface	Port Speed	10G/100G
Interface	Port Config	(no shutdown) / shut down
Interface	Port Config	start delay
Interface	PoE Features	PoE Enable/Disable
Interface	PoE Features	Power delay
Interface	PoE Features	30W / 60W
Interface	PoE Features	Priority: Low/High / Critical
Interface	PoE Features	Legacy Detect
Interface	PoE Features	PoE Timer Control
Interface	PoE Features	LLDP PoE Negotiation
Interface	PoE Features	PoE Power Monitor
Interface	Interface Stats	Packets / Octets / Errors / Drops / Speed
Interface	Module Info	Presence / Absence
Interface	Module Info	Vendor info
Interface	Module Info	Optical Power
Interface	Bandwidth Alert	RX / TX Thresholds
Interface	Bandwidth Alert	Both Threshold
Interface	Batch Config	H/W Interfaces
Interface	Loopback Interface	64 x Loopback
Interface	LAN Interface	4×2.5G/1G + 8×1G/100M/10M RJ45
Interface	WAN Interface	10G SFP+
Interface	WAN Interface	PPPoE / DHCP / Static IP
Layer 2 Forwarding	MAC	Static MAC
Layer 2 Forwarding	MAC	MAC Learning
Layer 2 Forwarding	MAC	MAC Migration
Layer 2 Forwarding	MAC	MAC Flush
Layer 2 Forwarding	MAC	MAC Learning Enable/Disable
Layer 2 Forwarding	MAC	Black Hole MAC
Layer 2 Forwarding	MAC	MAC Flapping
Layer 2 Forwarding	MAC	MAC Limit
Layer 2 Forwarding	MAC	MAC Show
Layer 2 Forwarding	VLAN	VLAN Create/Delete
Layer 2 Forwarding	VLAN	VLAN Member
Layer 2 Forwarding	VLAN	BUM Forward Configuration Flood/Drop
Layer 2 Forwarding	VLAN	Batch Configure VLAN
Layer 2 Forwarding	VLAN	Show VLAN and VLAN Member
Layer 2 Forwarding	QinQ	802.1aq VLAN tag
Layer 2 Forwarding	LAG	Create/Delete LAG
Layer 2 Forwarding	LAG	LAG Mode Support Static or Dynamic(LACP)
Layer 2 Forwarding	LAG	LAG Member
Layer 2 Forwarding	STP/MSTP	Enable/Disable
Layer 2 Forwarding	STP/MSTP	MSTP Instance Create, Support Priority Setting
Layer 2 Forwarding	STP/MSTP	Interface Status Transfer Time
Layer 2 Forwarding	STP/MSTP	BPDU Send Interval
Layer 2 Forwarding	STP/MSTP	Max BPDU Aging Time
Layer 2 Forwarding	STP/MSTP	Set STP Area Name
Layer 2 Forwarding	STP/MSTP	Security, Support BPDU Filter/Guard
Layer 2 Forwarding	STP/MSTP	Show MSTP Tree
Layer 2 Forwarding	LLDP	Disable/Enable
Layer 2 Forwarding	LLDP	LLDP Neighbor Information
Layer 2 Forwarding	LLDP	MgmtIP Configuration
Layer 2 Forwarding	LLDP	PortId Subtype
Layer 2 Forwarding	MVRP	-
Layer 2 Forwarding	Port Isolation	-
IP Unicast Routing	Static Routing	-
IP Unicast Routing	VRF	L3 Port Isolation
IP Unicast Routing	VRF	VLAN IF Isolation
IP Unicast Routing	VRF	LAG IF Isolation
IP Unicast Routing	VRF	Neighbor Isolation
IP Unicast Routing	VRF	LPM Isolation
IP Unicast Routing	VRF	Inter-VRF Forwarding
IP Unicast Routing	PBR	-
IP Unicast Routing	BGP / MP-BGP	IBGP / EBGP
IP Unicast Routing	BGP / MP-BGP	BGP Neighbor configration
IP Unicast Routing	BGP / MP-BGP	Peer Group
IP Unicast Routing	BGP / MP-BGP	BGP Listen
IP Unicast Routing	BGP / MP-BGP	Distance setting
IP Unicast Routing	BGP / MP-BGP	Routing redistribute
IP Unicast Routing	BGP / MP-BGP	BGP best-path select
IP Unicast Routing	BGP / MP-BGP	BGP Route Reflector
IP Unicast Routing	BGP / MP-BGP	Graceful restart
IP Unicast Routing	BGP / MP-BGP	Linkage BGP with BFD
IP Unicast Routing	BGP / MP-BGP	BGP routing policy
IP Unicast Routing	OSPF v2/v3	-
IP Unicast Routing	RIP v1/v2	-
IP Unicast Routing	Routing Policy	Route Map
IP Unicast Routing	Routing Policy	Prefix List (v4/v6)
IP Unicast Routing	ECMP/UCMP	-
MPLS	Dynamic LSP	LDP
MPLS	Static LSP	Support multi nexthop
MPLS	Basic MPLS	Enable/disable on phy port
MPLS	L2VPN	Static/dynamic VPWS, VPLS
MPLS	L3VPN	-
IP Service	NAT	1:1 NAT
IP Service	L3 Interface	Create/Delete L3 Interface
IP Service	L3 Interface	IPv4/v6 Address
IP Service	L3 Interface	Alloc IPv4/IPv6 Address by DHCP Client
IP Service	L3 Interface	Configure MAC Address
IP Service	L3 Interface	Configure MTU
IP Service	L3 Interface	L3 Sub Interface
IP Service	ARP/NDP	Static ARP/NDP Configuration
IP Service	ARP/NDP	Dynamic ARP/NDP
IP Service	ARP/NDP	Dynamic ARP/NDP Migration
IP Service	ARP/NDP	Dynamic ARP/NDP Aging Interval
IP Service	ARP/NDP	ARP/NDP Detection
IP Service	ARP/ND to Host	-
IP Service	DHCPv4 Server	Bind address pool to VLAN IF or phy port
IP Service	DHCPv4 Server	Configure the address lease period
IP Service	DHCPv4 Server	Information carried by server
IP Service	DHCPv4 Server	Allocate Address Policy
IP Service	DHCPv4 Server	DHCP Option Group
IP Service	DHCPv4 Server	Option93/82
IP Service	DHCPv4 Server	Show Address Pool Policy
IP Service	DHCPv4 Server	DNS Server Configuration
IP Service	DHCPv4 Server	DHCP Failover
IP Service	DHCPv4 Relay	DHCP Server Address
IP Service	DHCPv4 Relay	Uplink Port
IP Service	DHCPv4 Relay	Downlink Port
IP Service	DHCPv4 Relay	Agent IP
IP Service	DHCPv4 Relay	Option82
IP Service	DHCPv6 Server	Bind address pool to VLAN IF or phy port
IP Service	DHCPv6 Server	Configure the address lease period
IP Service	DHCPv6 Server	DNS Server
IP Service	DHCPv6 Relay	DHCP Server Address
IP Service	DHCPv6 Relay	Uplink Port
IP Service	DHCPv6 Relay	Downlink Port
IP Service	DHCPv6 Relay	Agent IP
IP Service	DNS	DNS Proxy
IP Service	DNS	DNS cache name resolver,cache( A/AAAA)
IP Service	NAT	1:1 NAT
IP Service	NAT	Port Forwards
IP Service	NAT	TCP MSS Clamping
IP Service	NAT	Static / Dynamic Mapping
IP Service	NAT	Sub-Port Support
IP Service	NAT	Support phy port/VLAN IF/LAG/Loopback
IP Service	NAT	SNAT/DNAT/DNAT POOL
IP Service	MAP-E	-
IP Service	MAP-T	-
IP Multicast	IGMP Snooping	Enable/Disable IGMP Snooping
IP Multicast	IGMP Snooping	Static IGMP Snooping
IP Multicast	IGMP Snooping	Dynamic IGMP Snooping
IP Multicast	IGMP Snooping	Support IGMP Protocol Version(v1/v2/v3)
IP Multicast	IGMP Snooping	Entry Limit Based on IGMP Member Port
IP Multicast	IGMP Snooping	IGMP Snooping Mulicast Query
IP Multicast	IGMP Snooping	IGMP Snooping Proxy
IP Multicast	MLD Snooping	Enable/Disable MLD Snooping
IP Multicast	MLD Snooping	Static MLD Snooping
IP Multicast	MLD Snooping	Dynamic MLD Snooping
IP Multicast	MLD Snooping	Support MLD Protocol Version(v1/v2)
IP Multicast	MLD Snooping	Entry Limit Based on Member Port
IP Multicast	MLD Snooping	MLD Snooping Multicast Query
IP Multicast	MLD Snooping	MLD Snooping Proxy
IP Multicast	PIM	PIM Version Support v4 and v6
IP Multicast	PIM	PIM Sparse Mode
IP Multicast	PIM	SPT Mode
IP Multicast	PIM	Enable/Disable PIM
IP Multicast	PIM	Support phy port/VLAN IF/LAG
Tunnel	VXLAN	VTEP Address Support IPv4
Tunnel	VXLAN	Dynamic VXLAN Tunnel Configuration
Tunnel	VXLAN	VXLAN Gateway
Tunnel	VXLAN	EVPN VXLAN
Tunnel	VXLAN	encap format(v4 over v4, v6 over v4)
Tunnel	VXLAN	VXLAN Stats encap/decap
Tunnel	L2TPv3 VPN	-
Tunnel	IPsec VPN	Route Based VPN
Tunnel	IPsec VPN	Policy-Based (bypass / discard / protect)
Tunnel	IPsec VPN	IKEv2
Tunnel	IPsec VPN	Diffie-Hellman (DH)
Security	BUM Packet Policy Based on Interface	-
Security	Storm Suppression Based on Interface	-
Security	System User Access Control Policy	-
Security	DHCP v4/v6 Snooping	-
Security	ND Snooping	-
Security	ND Policy	-
Security	DAI (Dynamic ARP Inspection)	-
Security	IPSG v4/v6	-
Security	ACL	Ingress/Egress
Security	ACL	Match: MAC/IP/L3/L4 Fields
Security	ACL	Permit/Deny
Security	ACL	Hit Statistics
Security	ACL	Port/LAG/VLAN/SubIF Bind
Security	ACL	CtrlPlane (NTP/SNMP/SSH/Telnet)
Security	ACL	DNS/GeoIP/Geosite
Security	ACL	Stateless/Stateful
Security	*SPI(Stateful packet inspection)	-
Security	Unicast Reverse Path Forwarding (uRPF)	-
Security	PPPoE Client	-
Security	PPPoE Server	-
Security	Ipsec VPN	-
Security	Wireguard Security VPN	-
QoS	Priority Mapping	dot1p to tc
QoS	Priority Mapping	dscp to tc
QoS	Priority Mapping	tc to queue
QoS	Queue Schedule	Strict
QoS	Queue Schedule	DWRR
QoS	Rate Limit (RFC2697/2698/4115)	per port
QoS	Rate Limit (RFC2697/2698/4115)	per queue
QoS	Shaping	per interface
QoS	Flow Classify	IACL + CAR Binding
QoS	Flow Classify	EACL
QoS	Flow Classify	CAR (Committed Access Rate)
QoS	QoS Status	Show Interface QoS Statistics
QoS	HQoS	Sub/User-Level
QoS	HQoS	Service-Level(VOIP/Video/Internet)
QoS	HQoS	App-Level (DSCP: EF/AF41/CS3/AF21)
High Availability	MC-LAG	-
High Availability	VRRP	Backup group (HW/VLAN IF)
High Availability	VRRP	VRRPv3 (RFC5798)
High Availability	VRRP	Advertise interval / priority config
High Availability	VRRP	Master auto send ARP/ND
High Availability	BFD	-
High Availability	Monitor Link	-
High Availability	SLA	-
High Availability	Routing Track	-
High Availability	Hash	-
Reporting and Monitoring	SPAN/ ERSPAN	-
Reporting and Monitoring	SNMP	-
Reporting and Monitoring	NetFlow/IPFIX	-
Reporting and Monitoring	Prometheus exporter	-
User Access and Authentication	Dot1x	-
Device Management	System User/Privilege Management	Local User Authentication
Device Management	System User/Privilege Management	Radius User Authentication
Device Management	System User/Privilege Management	TACACS+User Authentication
Device Management	System User/Privilege Management	Add/Change User ID/Password
Device Management	Login Method	out-of-band serial console
Device Management	Login Method	SSH
Device Management	Login Method	Telnet
Device Management	Login Method	in-band management
Device Management	Management	MGMT IP Address
Device Management	Management	MGMT Gateway
Device Management	Management	MGMT VRF
Device Management	Troubleshooting Information	SONiC Bash Show Tech Support
Device Management	ZTP (Zero Touch Provisioning)	-
Device Management	Configure Host Name	-
Device Management	System Time Management	-
Device Management	License Management	-
Device Management	FTP/TFTP	-
Device Management	Device Status Summary	-
Device Management	Critical Resource Monitoring (CRM)	-
Device Management	NTP Client	-
Device Management	Log management	-
Device Management	Diagnostic Tools	Ping
Device Management	Diagnostic Tools	Traceroute

Edition	Free Edition — x86 VM Platform ($0), Commercial Edition — x86 VM Platform ($999), Commercial Edition — ARM ET2508 ($999), Commercial Plus Edition — ARM ET3600 ($1799)

asternos-vpp

AsterNOS VPP Quick Start Documentation

Explore the official AsterNOS VPP quick start guide — a comprehensive resource covering setup objectives, supported platforms, key features, sample configurations, and performance validation for fast and efficient deployment.

learn more

Frequently Asked Questions

Yes. You can download the free version and install it on x86-based devices to enjoy the benefits of open networking. A step-by-step installation guide is available here. Click here to view it. Please note that no additional technical support is provided for the free version.

The free version is limited to x86 platforms. The Commercial Edition offers significant improvements in two aspects:
· First, in terms of services, it provides exclusive technical support and consulting services;
· Second, in terms of functionality, it adds multiple extended capabilities. For example, the tunneling technology supports MPLS, L2TPv3, GRE, and Wireguard VPN, and the address translation function supports CGNAT, MAP-E/MAP-T, etc.
· For more extended functions of the paid version, you can learn about them in detail through the comparison table at the top of this page.

Performance depends on your deployment platform:
Asterfusion ET2500: Guaranteed 60Gbps routing/firewall/encryption with hardware-accelerated packet processing.
Asterfusion ET3600: Guaranteed up to 2 x 100Gbps routing, 2 x 80Gbps firewall/encryption with dual-DPU hardware acceleration.
x86 Platform (Software Only): Performance varies based on your hardware—CPU cores, clock speed, memory bandwidth, and NIC capabilities all affect throughput.

With the commercial edition, you’ll receive:
· A perpetual software license
· Comprehensive technical documentation
· Online service response and remote support via email or meetings
· Real-time remote assistance
· Regular software updates following a structured release policy
AsterNOS follows a predictable update schedule that applies to all editions, including:
· Quarterly major releases (at least 4 per year) that synchronize with Community SONiC
· More frequent minor releases containing enhancements, fixes, and patches for the current version, which can be released at any point during the major version support cycle.

Absolutely. You’re welcome to start with the free version and upgrade to a commercial plan at any time for additional features and support.

After your subscription expires, you can continue to receive full technical support services by simply paying an annual renewal fee equal to 10% of the original license cost.

Reviews

There are no reviews yet.

Be the first to review “AsterNOS-VPP- Open Router OS High-Performance Networking Powered by SONiC & VPP”

AsterNOS-VPP- Open Router OS High-Performance Networking Powered by SONiC & VPP

AsterNOS-VPP – Next-Generation Router OS for Modern Networks

FREE EDITION

Software Specification

x86 VM Only

Commercial Edition

+10% Annual Upgrade Fee

Software Specification

x86 VM Platform | ARM ET2508

commercial Plus edition

$1799

+10% Annual Upgrade Fee

Software Specification

ARM ET3600

AsterNOS-VPP Features

AsterNOS VPP Quick Start Documentation

Frequently Asked Questions

Reviews

Related Products

ET3616-4P4S Open Intelligent Gateway/Router

ET3608-2P2S Open Intelligent Gateway/Router

ET2508-4S4M8 Open Intelligent Gateway/Router

Products

Discover

Help

Your cart (items: 0)