Bare-Metal Edge Network Appliance — Marvell OCTEON 10 CN102 Platform

SKU:

  • Open bare-metal half-width 1U edge appliance — bring your own OS and software stack
  • Marvell OCTEON 10 (8-core ARM Neoverse N2 @ 2.5 GHz), up to 58 Gbps throughput
  • 50 Gbps true inline IPsec/SSL crypto engine
  • 4× 10GE SFP+ · 4× 2.5GE · 8× 1GE, optional PoE++/PoE+ (150 W budget)
  • Optional 160 TOPS AI module for on-device LLM inference (up to 30B class)
  • AsterNOS-VPP available separately; < 60 W full-load, optional 5G/WiFi 6E/7 and PTP
Request Discount

Bring your own OS

No locked-in NOS. Install any Linux distro and build your own router, firewall, or edge server.

58 Gbps, accelerated

8-core Marvell OCTEON 10 with a true inline crypto engine for up to 50 Gbps IPsec/SSL.

Optional AI module

Add 160 TOPS of on-device inference and run LLMs up to the 30B class at the edge.

Under 60 watts

Compact half-width 1U with DDR5 to 48 GB, NVMe to 4 TB, optional 5G & WiFi 6E/7.

The ET2508 is an open, bare-metal edge network appliance

built for routing, security, MEC, and edge-compute deployments in a compact half-width 1U chassis. It ships as a clean hardware platform with no locked-in network OS — customers are free to install, develop, and deploy their own software stack, from standard Linux distributions to containerized edge applications. Powered by the Marvell OCTEON 10 CN102XX processor with 8 ARM64 Neoverse N2 cores at 2.5 GHz, the ET2508 pairs general-purpose compute with hardware-accelerated packet processing for up to 58 Gbps networking throughput, a true inline crypto engine reaching 50 Gbps, and an optional on-device AI inference module — all under 60 watts at full workload (excluding PoE).

Because the hardware and software are fully decoupled

the ET2508 runs major Linux distributions including Ubuntu, Debian, CentOS, OpenWRT, and SONiC, with access to a complete ARM64 toolchain (GCC, GDB, Buildroot) and open-source ecosystems such as DPDK, VPP, Nginx, iptables, UFW, Docker, and Kubernetes. This makes the ET2508 an ideal foundation for teams that want to build their own router, firewall, VPN gateway, SD-WAN edge, or edge server on open silicon. For customers who prefer a turnkey routing solution, Asterfusion's AsterNOS-VPP software is available separately — or pre-installed on the RT2508 router variant of this platform.

Flexible I/O combines

4× 10GE SFP+, 4× 2.5GE, and 8× 1GE ports, with optional PoE++ (2.5GE) / PoE+ (1GE) on a 150 W budget. An optional AI accelerator module adds up to 160 TOPS of INT8 compute and 24 GB of memory, enabling on-device inference with frameworks such as PyTorch, Ollama, and vLLM and quantized LLMs up to the 30B-parameter class. With expandable DDR5 memory up to 48 GB, NVMe SSD up to 4 TB, and optional 5G/LTE, WiFi 6E/7, and 20 ns PTP/SyncE modules, the ET2508 consolidates networking, security, edge compute, and optional AI into one low-power, fully programmable appliance.

Feature Highlights

  • Open bare-metal platform — no locked-in NOS; install any Linux distribution (Ubuntu, Debian, CentOS, OpenWRT, SONiC) and build your own router, firewall, VPN, or edge server with a full ARM64 toolchain.

  • Marvell OCTEON 10 performance — 8-core ARM64 Neoverse N2 @ 2.5 GHz delivering up to 58 Gbps hardware-accelerated networking throughput in a compact half-width 1U form factor.

  • True inline crypto engine — up to 50 Gbps line-rate IPsec and SSL/TLS encryption/decryption with no separate offload card.

  • Flexible high-density I/O — 4× 10GE SFP+, 4× 2.5GE, and 8× 1GE, with optional PoE++ (2.5GE) and PoE+ (1GE) on a 150 W budget.

  • Optional AI acceleration — add-in module with 160 TOPS INT8 compute and 24 GB LPDDR5, ready for PyTorch, Ollama, vLLM, and on-device LLM inference up to the 30B-parameter class.

  • Software your way — pair it with open-source VPP/DPDK/Nginx, run Docker and Kubernetes, or add Asterfusion AsterNOS-VPP separately for a turnkey router stack.

  • Energy-efficient, expandable edge design — under 60 W at full load (excl. PoE), 100–240 VAC, DDR5 up to 48 GB, NVMe SSD up to 4 TB, plus optional 5G/LTE, WiFi 6E/7, and 20 ns PTP/SyncE.

Computing
CPU8 Core ARM64 N2 @ 2.5 GHz
CacheL2 8MB, L3 16MB
RAM16GB DDR5 SODIMM, up to 48GB
Flash 64GB eMMC 5.1
NVME SSD (Option)up to 4TB, M.2 M key, share slot with AI accelerator
AI accelerator (Option)
Compute performanceup to 160 TOPS up to 100 TFLOPS @bFP16
Memory24GB LPDDR5/LPDDR5X Memory bandwidth: 153.6GB/b
Network interface
10GE (SFP+)4
PoE2.5GE ports POE++, 1GE ports POE+
2.5GE (RJ45)4
WiFi (Option)WiFi6E/7, M.2 E key
1GE (RJ45)8
5G/LTE (Option)2 SIM cards, M.2 B key
Antenna6
Network performance
L3 Switching capacity58Gbps
Firewall capacity58Gbps
Routing capacity58Gbps
Encryption and Decryption capacity50Gbps
PTP/SyncE accuracy20ns
PTP/SyncE holdover time> 8hours
 Misc interface 
USB1 x USB 3.0
Console1 x Console RJ45
Electrical characteristics
Fan Module2
Power Module1 x 150W (w/o PoE); 1 x 270W (PoE)
Maximum power consumption60W (FULL configuration and workload)
Input voltage100~240VAC
PoE budget150W
Mechanical
Operating temperature0 – 45℃
Dimensions (H x W x D mm)44 x220 x 310
Relative humidity5% - 95% (non-condensing)
Height1U

SONiC-VPP Routing OS

AsterNOS-VPP is a production-hardened SONiC routing OS with VPP as the data-plane engine. The full feature set ships pre-activated on RT2500 series routers — no per-feature license keys, no add-on modules to purchase separately.

Interface
1G/2.5G/10G/40G/100G
PoE Enable/Disable
Interface Statistics
Module Info
Batch Config
LAN / WAN Interface
WiFi Interface
Routing Protocols
BGP, MP-BGP
OSPF v2/v3
ISIS
RIP v1/v2
Policy Based Routing (PBR)
Static Routing
VRF
IGMP
MLD
PIM
Equal Cost Multipath Routing (ECMP)
MPLS
Static LSP
MPLS LDP
MPLS QoS
VPWS
VPLS
L3VPN
IP Service
ARP/NDP
DHCPv4/v6
DNS
Source and Destination NAT
CGNAT
MAP-E
MAP-T
Tunnel
GRE
VXLAN
IPsec VPN (Hardware offload)
Wireguard VPN
PPPoE (Client & Server)
Security
Interface-based BUM Control
User Access Authentication (Dot1x, Portal)
DHCP v4/v6 Snooping
ND Snooping
ND Policy
Dynamic ARP Inspection (DAI)
Stateless/Stateful ACL
GeoIP/GeoSite ACL
Stateful Packet Inspection (SPI)
IPSG v4/v6
Unicast Reverse Path Forwarding (uRPF)
Quality of Service (QoS)
Priority Mapping
Strict Queue Schedule
DWRR Schedule
Rate Limit
Flow Classify
HQoS (Subscriber/User/User-group/Service-Level)
High Availability
MC-LAG
VRRP
Bidirectional Forwarding Detection (BFD)
Monitor Link
SLA
Routing Track
Management & Monitoring
Console, SSH, Telnet
RestAPI, uCentral
Industry Standard CLI (Klish)
Syslog
Zero Touch Provisioning (ZTP)
SPAN/ERSPAN
SNMP v2/v3
Netflow/IPFIX
AsterNOS Exporter (Prometheus)

The Silicon: Marvell OCTEON 10 (CN102XX)

Both the ET2508 and RT2508 are built on the Marvell OCTEON 10 DPU platform — the industry’s first DPU family on a 5 nm process with 64-bit ARM Neoverse N2 cores. According to Marvell, this generation delivers roughly a 3× jump in per-core compute (SPECint/core/GHz) and a 50% reduction in power versus the previous OCTEON generation, which is what lets a compact, fan-light edge appliance sustain real routing, security, and compute workloads under ~60 W.

What sets OCTEON 10 apart at the edge is its set of integrated hardware acceleration engines, so packet, crypto, and AI work doesn’t fall back to software:

Hardware-based VPP accelerator

Marvell cites up to 5× higher packet-processing rates, the foundation for the platform’s up to 58 Gbps forwarding and AsterNOS-VPP’s 50 Gbps routing.

True inline crypto

IPsec/SSL encryption and decryption handled in-line at up to 50 Gbps, with no separate offload card.

Highly programmable packet processors

with an integrated switch and packet parser, enabling flexible forwarding pipelines.

Secure Boot with eHSM/TrustZone

and PCIe DMA acceleration for a hardened, high-throughput data path.

CN102XX at a glance (the member powering ET2508 / RT2508)

AttributeCN102XXCN103XX
ARM Neoverse N2 coresUp to 8Up to 8
Max frequency2.7 GHz (2.5 GHz in ET2508 / RT2508)2.7 GHz
SPECint (2017)3737
Cache (L2 / L3)8 MB / 16 MB8 MB / 16 MB
DDR5 memory controllers2 × DDR5 @ 5600 MT/s2 × DDR5 @ 5600 MT/s
CryptoTrue inline (IPsec / SSL)True inline (IPsec / SSL)
Ethernet4×10G + 2×10G or 16×1G4×50G/25G/10G + 2×10G or 16×1G
PCIePCIe 3.0, up to 6PCIe 5.0, up to 6
SerDes10G56G
Typical power10–20 W10–25 W

Software & ecosystem

OCTEON 10 ships with a feature-rich SDK and standard toolchain (GCC, GDB, BinUtils) and supports KVM, Docker/CNI, OVS, and Kubernetes, plus standard DPDK, VPP, and SPDK. That open-software alignment is exactly why the ET2508 can be a bare-metal canvas for your own stack, while the RT2508 uses the same hardware-accelerated VPP path to run AsterNOS-VPP at line rate.

Bare-metal edge network appliance datasheet Edge network appliance ET2508 (PDF)
Bare-metal edge network appliance user manual ET2500 edge network appliance user manual (PDF)
CERTIFICATEISO 9001ISO 9001ISO 14001ISO 14001ISO 45001ISO 45001ISO 27001ISO 27001FCCFCCCECE
SCOPEQuality management systemEnvironmental managementOccupational health and safetyInformation security managementUS radio frequency complianceEU health, safety and environmental compliance