100Gbps Throughput Enterprise Router with 2M Routes

On the data plane

the RT3608 delivers line-rate L3 routing with full BGP/MP-BGP peering and route policy, OSPF v2/v3, ECMP, VRF, and graceful restart. VXLAN with EVPN extends L2 and L3 VPN across sites over a standard IP underlay. The stateful firewall runs as a VPP plugin, processing zone-based policy and 5-tuple ACLs in the CN103's packet pipeline at up to 80 Gbps, with GeoIP filtering and deep packet inspection available in the Commercial Plus edition. Secure connectivity is built in with IPsec (IKEv1/IKEv2) and WireGuard VPN, plus L2TPv3 and GRE tunneling, all encrypted inline by the CN103's dedicated crypto engine at up to 80 Gbps with no added latency. On the hardware side, the RT3608 provides 2 x 100GE QSFP28 and 2 x 10GE SFP+ interfaces, 16GB DDR5 memory expandable to 48GB, and an M.2 NVMe slot for up to 4TB of local storage. Optional modules add PTP/SyncE timing accurate to 20ns with boundary clock support, and an AI inference engine delivering up to 160 TOPS INT8. Full configuration and workload draw under 100W, and 1+1 hot-swappable fan and power modules support continuous operation. AsterNOS-VPP is perpetually licensed with a yearly major-version upgrade subscription.

Feature Highlights

• Pre-installed AsterNOS-VPP — turnkey SONiC-based router with a high-performance VPP data plane; up to 100 Gbps intelligent routing throughput on Marvell OCTEON 10 CN103.
• Carrier-grade L3 routing — line-rate forwarding with full BGP/MP-BGP peering and route policy, OSPF v2/v3, ECMP, VRF, and VXLAN/EVPN for multi-site L2/L3 extension.
• Hardware-accelerated firewall — stateful inspection and 5-tuple ACLs processed in the VPP packet pipeline at up to 80 Gbps, with zone-based policy, GeoIP filtering, and SPI (Commercial Plus).
• Inline VPN encryption — IPsec (IKEv1/IKEv2) and WireGuard, plus L2TPv3 and GRE, encrypted inline by dedicated crypto hardware at up to 80 Gbps.
• High-density interfaces — 2 x 100GE QSFP28, 2 x 10GE SFP+, 16GB DDR5 (expandable to 48GB), optional M.2 NVMe up to 4TB.
• Optional precision & AI modules — PTP/SyncE at 20ns accuracy with BC support; AI inference engine up to 160 TOPS INT8.
• Low-power, high-availability design — under 100W at full configuration and workload, with 1+1 hot-swappable fan and power modules.

Hardware-based VPP accelerator

CN103XX’s hardware VPP accelerator delivers up to 5× higher packet-processing rates, the foundation for the platform’s up to 100 Gbps forwarding and AsterNOS-VPP’s 100 Gbps routing.

True inline crypto

IPsec/SSL encryption and decryption handled in-line at up to 80 Gbps, with no separate offload card.

Highly programmable packet processors

with an integrated switch and packet parser, enabling flexible forwarding pipelines.

Secure Boot with eHSM/TrustZone

and PCIe DMA acceleration for a hardened, high-throughput data path.

CN103XX at a glance (the member powering RT3600 / RT3600)

Software & ecosystem

OCTEON 10 ships with a feature-rich SDK and standard toolchain (GCC, GDB, BinUtils) and supports KVM, Docker/CNI, OVS, and Kubernetes, plus standard DPDK, VPP, and SPDK. That open-software alignment is exactly why the ET3600 can be a bare-metal canvas for your own stack, while the RT3600 uses the same hardware-accelerated VPP path to run AsterNOS-VPP at line rate.