/
Bare-Metal Edge Network Appliance —Dual Marvell OCTEON 10 CN103 Platform
Bring your own OS
No locked-in NOS. Install any Linux distro and build your own router, firewall, or edge server.
2 x 100 Gbps, accelerated
2 x 8-core Marvell OCTEON 10 with a true inline crypto engine for up to 2 x 80 Gbps IPsec/SSL.
Optional AI module
Add 160 TOPS of on-device inference and run LLMs up to the 30B class at the edge.
Under 200 watts
With DDR5 to 2 x 48 GB, NVMe to 2 x 4 TB, optional 5G/LTE module.
ET3616-4P4S — Two Independent Hardware Units in One 1U Box
The Asteraix ET3616-4P4S is a 1U open-edge intelligent platform/appliance engineered for large-scale carrier, ISP, and data center deployments. Powered by dual Marvell OCTEON 10 CN103 DPUs with 16 ARM Neoverse N2 cores, each is a fully self-contained processing engine with its own ARM cores, memory, crypto accelerator, and network ports. Run two completely separate workloads on the same physical box — isolated at the hardware level, not just in software. it delivers exceptional performance, including 2 × 100Gbps routing, 2 × 80Gbps firewall throughput, and 2 × 80Gbps hardware-accelerated encryption. With 2 × 2 ×100GE QSFP28, 2 × 2 × 10GE SFP+, and 2 × 2 × 2.5GE RJ45 ports, optional 5G/LTE modules (4 SIM cards), the ET3616 provides the flexibility and power needed for demanding edge and backbone applications. The ET3608 has one CN103. The ET3616 has two. This is not a bonded or load-balanced configuration — each DPU has its own CPU cores, DDR5 memory bus, crypto engine, and network ports. The two engines do not share forwarding state or memory. They are two separate computers that happen to share a chassis, a power supply, and a management network. That separation matters when you want to run two fundamentally different functions. Each DPU can run a different OS, a different VPP config, or an entirely different workload — without one affecting the other's latency, memory, or forwarding performance. The ET3616 delivers comprehensive security with hardware-accelerated IPSec, SSL, and TLS processing. Its true inline encryption engine handles up to 2x80Gbps of encrypted traffic without performance degradation. Advanced stateful packet inspection (SPI) monitors traffic flows in real-time, while built-in VPN support includes IPSec, WireGuard, and L2TPv3 protocols for flexible secure connectivity options. Built on open standards, the ET3616 supports multiple Linux distributions, including Ubuntu, Debian, and SONiC for maximum deployment flexibility. The platform is ready for high-performance networking with VPP and DPDK acceleration, while Kubernetes integration enables modern containerized applications. Additional support for O-RAN SC, KVM virtualization, and OpenVPN provides the foundation for flexible SDN and NFV deployment options across diverse use cases. Achieve carrier-grade synchronization with the optional PTP module offering 20ns timing accuracy. Full Boundary Clock (BC) support ensures precise time distribution across your network, while exceptional holdover capability maintains accuracy for over 8 hours during signal loss. These features make the ET3616 ideal for demanding 5G fronthaul and O-RAN deployments where microsecond-level timing precision is critical.
The Silicon: Marvell OCTEON 10 (CN103XX)
Both the ET3600 and RT3600 are built on the Marvell OCTEON 10 DPU platform — the industry’s first DPU family on a 5 nm process with 64-bit ARM Neoverse N2 cores. According to Marvell, this generation delivers roughly a 3× jump in per-core compute (SPECint/core/GHz) and a 50% reduction in power versus the previous OCTEON generation.
CN103XX advances CN102XX with 56G SerDes, PCIe 5.0, and 4 × 50G/25G/10G high-speed Ethernet lanes — enabling line-rate routing, security, and compute workloads up to 100G in the same compact, low-power form factor.
What sets OCTEON 10 apart at the edge is its set of integrated hardware acceleration engines, so packet, crypto, and AI work doesn’t fall back to software:
Hardware-based VPP accelerator
CN103XX’s hardware VPP accelerator delivers up to 5× higher packet-processing rates, the foundation for the platform’s up to 100 Gbps forwarding and AsterNOS-VPP’s 100 Gbps routing.
True inline crypto
IPsec/SSL encryption and decryption handled in-line at up to 80 Gbps, with no separate offload card.
Highly programmable packet processors
with an integrated switch and packet parser, enabling flexible forwarding pipelines.
Secure Boot with eHSM/TrustZone
and PCIe DMA acceleration for a hardened, high-throughput data path.
CN103XX at a glance (the member powering RT3600 / RT3600)
| Attribute | CN102XX | CN103XX |
|---|---|---|
| ARM Neoverse N2 cores | Up to 8 | Up to 8 |
| Max frequency | 2.7 GHz | 2.7 GHz (2.5 GHz in ET3600 / RT3600) |
| SPECint (2017) | 37 | 37 |
| Cache (L2 / L3) | 8 MB / 16 MB | 8 MB / 16 MB |
| DDR5 memory controllers | 2 × DDR5 @ 5600 MT/s | 2 × DDR5 @ 5600 MT/s |
| Crypto | True inline (IPsec / SSL) | True inline (IPsec / SSL) |
| Ethernet | 4×10G + 2×10G or 16×1G | 4×50G/25G/10G + 2×10G or 16×1G |
| PCIe | PCIe 3.0, up to 6 | PCIe 5.0, up to 6 |
| SerDes | 10G | 56G |
| Typical power | 10–20 W | 10–25 W |
Software & ecosystem
OCTEON 10 ships with a feature-rich SDK and standard toolchain (GCC, GDB, BinUtils) and supports KVM, Docker/CNI, OVS, and Kubernetes, plus standard DPDK, VPP, and SPDK. That open-software alignment is exactly why the ET3600 can be a bare-metal canvas for your own stack, while the RT3600 uses the same hardware-accelerated VPP path to run AsterNOS-VPP at line rate.
| Bare-metal edge network appliance datasheet | Edge network appliance ET3600 (PDF) |
| CERTIFICATE | ||||||
| SCOPE | Quality management system | Environmental management | Occupational health and safety | Information security management | US radio frequency compliance | EU health, safety and environmental compliance |