Enterprise Edge Router with SONiC and VPP on Marvell OCTEON 10, 100Gbps Throughput with 2M Routes

SKU: RT3608-2P2S

Price range: $4,278.00 through $6,328.00 VAT excl.

  • Turnkey edge router with AsterNOS-VPP pre-installed (SONiC control plane + VPP data plane)
  • Up to 100 Gbps intelligent routing on Marvell OCTEON 10 CN103 (8-core ARM Neoverse N2)
  • Line-rate L3 routing, 2M RIBs, full BGP/MP-BGP, OSPF, ECMP/UCMP, VRF
  • IPsec & WireGuard VPN, NAT/CGNAT/MAP-T, N-tuple ACL firewall, PPPoE
  • NetDevOps-ready: ZTP, Klish, RESTful API, gNMI, NetConf, uCentral
  • Telemetry via NetFlow/IPFIX, Prometheus & SNMP; MC-LAG/VRRP/BFD HA

    Ready to deploy

    AsterNOS-VPP pre-installed: SONiC control plane + VPP data plane, no integration needed.

    100 Gbps routing

    Line-rate L3 routing with up to 2M RIB entries and full BGP/MP-BGP tables.

    Secure by default

    IPsec & WireGuard VPN, NAT/CGNAT/MAP-T, and an N-tuple ACL firewall built in.

    Automate & observe

    ZTP, gNMI, and REST API, plus NetFlow/IPFIX, Prometheus, and SNMP telemetry.

    The RT3608 is a turnkey enterprise edge router

    that pre-installs Asterfusion's AsterNOS-VPP network operating system on the same compact 1U OCTEON 10 hardware as the ET3608. AsterNOS-VPP is a SONiC-based distribution that pairs SONiC's mature control plane with a high-performance VPP software data plane, delivering up to 100 Gbps of intelligent routing throughput on the Marvell OCTEON 10 CN103 (8-core ARM64 Neoverse N2 @ 2.5 GHz). It arrives ready to deploy as an enterprise router, secure VPN gateway, or edge firewall — no integration required.

    On the data plane

    the RT3608 delivers line-rate L3 routing with full BGP/MP-BGP peering and route policy, OSPF v2/v3, ECMP, VRF, and graceful restart. VXLAN with EVPN extends L2 and L3 VPN across sites over a standard IP underlay. The stateful firewall runs as a VPP plugin, processing zone-based policy and 5-tuple ACLs in the CN103's packet pipeline at up to 80 Gbps, with GeoIP filtering and deep packet inspection available in the Commercial Plus edition. Secure connectivity is built in with IPsec (IKEv1/IKEv2) and WireGuard VPN, plus L2TPv3 and GRE tunneling, all encrypted inline by the CN103's dedicated crypto engine at up to 80 Gbps with no added latency.

    On the hardware side, the RT3608 provides 2 x 100GE QSFP28 and 2 x 10GE SFP+ interfaces, 16GB DDR5 memory expandable to 48GB, and an M.2 NVMe slot for up to 4TB of local storage. Optional modules add PTP/SyncE timing accurate to 20ns with boundary clock support, and an AI inference engine delivering up to 160 TOPS INT8. Full configuration and workload draw under 100W, and 1+1 hot-swappable fan and power modules support continuous operation. AsterNOS-VPP is perpetually licensed with a yearly major-version upgrade subscription.

    Feature Highlights

    • Pre-installed AsterNOS-VPP — turnkey SONiC-based router with a high-performance VPP data plane; up to 100 Gbps intelligent routing throughput on Marvell OCTEON 10 CN103.
    • Carrier-grade L3 routing — line-rate forwarding with full BGP/MP-BGP peering and route policy, OSPF v2/v3, ECMP, VRF, and VXLAN/EVPN for multi-site L2/L3 extension.
    • Hardware-accelerated firewall — stateful inspection and 5-tuple ACLs processed in the VPP packet pipeline at up to 80 Gbps, with zone-based policy, GeoIP filtering, and SPI (Commercial Plus).
    • Inline VPN encryption — IPsec (IKEv1/IKEv2) and WireGuard, plus L2TPv3 and GRE, encrypted inline by dedicated crypto hardware at up to 80 Gbps.
    • High-density interfaces — 2 x 100GE QSFP28, 2 x 10GE SFP+, 16GB DDR5 (expandable to 48GB), optional M.2 NVMe up to 4TB.
    • Optional precision & AI modules — PTP/SyncE at 20ns accuracy with BC support; AI inference engine up to 160 TOPS INT8.
    • Low-power, high-availability design — under 100W at full configuration and workload, with 1+1 hot-swappable fan and power modules.
    Computing
    DPU1 x Marvell CN103 8 Core ARM64 N2 @ 2.5 GHzCacheL2 8MB, L3 16MB
    Memory16GB DDR5, up to 48GBSSD1 x M.2 NVME 256G
    AI accelerator (Option)
    Compute performanceup to 160 TOPS up to 100 TFLOPS @bFP16Memory24GB LPDDR5/LPDDR5X Memory bandwidth: 153.6GB/b
    Network interface
    10GE (SFP+)2100GE(QSFP28)2
    5G/LTE (Option)2 SIM cards, M.2 B key
    Network performance
    L3 Switching capacity200GbpsFirewall capacity100Gbps
    Routing capacity100GbpsEncryption and Decryption capacity80Gbps
    PTP/SyncE accuracy20nsPTP/SyncE holdover time> 8hours
     Misc interface 
    USB1 x USB 3.0Console1 x Console RJ45
    MGMT1 x MGMT GE RJ45
    Electrical characteristics
    Fan Module1+1 Hot-swappablePower Module1+1 Hot-swappable
    Maximum power consumption100W (FULL configuration and workload)Input voltage100~240VAC
    Mechanical
    Operating temperature0 – 45℃Dimensions (H x W x D mm)44 x440 x 470
    Relative humidity5% - 95% (non-condensing)Height1U

    Loading…

    Loading…

    Loading…

    Memory

    16GB, 32GB, 48GB

    Role

    Router

    Silicon

    OCTEON 10 CN103

    Speed

    100G

    Throughput

    100Gbps

    NVME SSD Module

    0T

    5G/LTE Module

    None, Included

    AI Module

    None, Included

    Software

    Pro CN103

    VPP

    User-space framework that forwards packets in cache-friendly vectors (batches) on commodity CPUs; used to build software routers and dataplanes.

    Read full definition →
    SONiC

    SONiC decouples the network operating system from switch hardware. Built on Linux with a containerized architecture, it programs switching ASICs through SAI (the Switch Abstraction Interface), so the…

    Read full definition →