2 x 100Gbps Throughput Enterprise Router with 2M Routes

On the data plane

each AsterNOS-VPP instance carries a full, independently configured routing table with its own BGP policy, route maps, prefix filters, and VRF structure — one DPU can peer with upstream ISPs while the other terminates a customer-facing fabric, with no convergence event on one instance affecting the other's forwarding. Each DPU's inline crypto engine also runs independently: a combined 160 Gbps IPsec workload can be split across the two engines, or one DPU can be dedicated to encrypted tunnel termination while the other handles clear-text routing, with hardware-enforced separation between the two traffic planes. On the hardware side, the RT3616 provides 2 x 2 x 100GE QSFP28 and 2 x 2 x 10GE SFP+ interfaces (two ports of each type per DPU), 2 x 16GB DDR5 memory expandable to 2 x 48GB, and dual M.2 NVMe slots. Optional modules add PTP/SyncE timing accurate to 20ns with boundary clock support and over 8 hours of holdover, plus 5G/LTE connectivity per DPU. Full configuration and workload draw under 200W, with 2+1 hot-swappable fan modules and 1+1 hot-swappable power modules for continuous operation. AsterNOS-VPP is perpetually licensed per DPU with a yearly major-version upgrade subscription.

Feature Highlights

• • Dual independent DPUs — two Marvell OCTEON 10 CN103 processors, each running its own AsterNOS-VPP instance with separate routing table, VRF, BGP sessions, and firewall policy.
• 2 x 100 Gbps L3 routing — independently configured BGP policy, route maps, prefix filters, and VRF structure per DPU; no shared convergence state.
• 2 x 100 Gbps hardware firewall — stateful inspection and ACLs enforced per DPU in the VPP packet pipeline, with zone-based policy and SPI (Commercial Plus).
• 2 x 80 Gbps inline IPsec — dedicated crypto engine per DPU; workload can be split across both engines or isolated to one DPU with hardware-enforced traffic-plane separation.
• High-density interfaces — 2 x 2 x 100GE QSFP28, 2 x 2 x 10GE SFP+, 2 x 16GB DDR5 (expandable to 2 x 48GB), dual M.2 NVMe.
• Low-power, high-availability design — under 200W at full configuration and workload, with 2+1 hot-swappable fans and 1+1 hot-swappable power modules.

Hardware-based VPP accelerator

CN103XX’s hardware VPP accelerator delivers up to 5× higher packet-processing rates, the foundation for the platform’s up to 100 Gbps forwarding and AsterNOS-VPP’s 100 Gbps routing.

True inline crypto

IPsec/SSL encryption and decryption handled in-line at up to 80 Gbps, with no separate offload card.

Highly programmable packet processors

with an integrated switch and packet parser, enabling flexible forwarding pipelines.

Secure Boot with eHSM/TrustZone

and PCIe DMA acceleration for a hardened, high-throughput data path.

CN103XX at a glance (the member powering RT3600 / RT3600)

Software & ecosystem

OCTEON 10 ships with a feature-rich SDK and standard toolchain (GCC, GDB, BinUtils) and supports KVM, Docker/CNI, OVS, and Kubernetes, plus standard DPDK, VPP, and SPDK. That open-software alignment is exactly why the ET3600 can be a bare-metal canvas for your own stack, while the RT3600 uses the same hardware-accelerated VPP path to run AsterNOS-VPP at line rate.