/
50Gbps Throughput Enterprise Router with 2M Routes
Ready to deploy
AsterNOS-VPP pre-installed: SONiC control plane + VPP data plane, no integration needed.
58 Gbps routing
Line-rate L3 routing with up to 2M RIB entries and full BGP/MP-BGP tables.
Secure by default
IPsec & WireGuard VPN, NAT/CGNAT/MAP-T, and an N-tuple ACL firewall built in.
Automate & observe
ZTP, gNMI, and REST API, plus NetFlow/IPFIX, Prometheus, and SNMP telemetry.
The RT2508 is a turnkey enterprise edge router
that pre-installs Asterfusion's AsterNOS-VPP network operating system on the same compact half-width 1U OCTEON 10 hardware as the ET2508. AsterNOS-VPP is a SONiC-based distribution that pairs SONiC's mature control plane with a high-performance VPP software data plane, delivering up to 50 Gbps of intelligent routing throughput on the Marvell OCTEON 10 CN102XX (8-core ARM64 Neoverse N2). It arrives ready to deploy as an SMB/enterprise router, secure VPN gateway, or edge firewall — no integration required.
On the data plane
the RT2508 delivers line-rate L3 routing with up to 2M RIB entries, full BGP/MP-BGP tables and peering, OSPF v2/v3, ECMP/UCMP, VRF, and policy-based routing. Multi-WAN routing steers and fails over traffic across multiple ISPs or uplinks by policy, while NAT, CGNAT, and MAP-T support large-scale address sharing and stateless IPv4-to-IPv6 translation. Secure connectivity is built in with IPsec and WireGuard VPN, GRE and VXLAN tunneling, N-tuple wild-match ACLs, DHCP/DNS services, and PPPoE client/server for broadband access. High availability is covered by MC-LAG, VRRP, BFD, and Monitor Link. Operationally, the RT2508 inherits SONiC's widely adopted, automation-friendly management model — ZTP, Klish CLI, RESTful API, gNMI, NetConf, and uCentral — so it slots into existing NetDevOps pipelines. Built-in telemetry streaming via NetFlow/IPFIX, a Prometheus exporter, and SNMP, plus SPAN/RSPAN/ERSPAN mirroring, gives deep visibility into traffic and device health. Backed by the OCTEON 10's hardware-accelerated VPP data plane and true inline crypto, the RT2508 brings carrier-grade routing, security, and observability to the network edge in a low-power, fully managed package. AsterNOS-VPP is perpetually licensed with a yearly major-version upgrade subscription.
Feature Highlights
- Pre-installed AsterNOS-VPP — turnkey SONiC-based router with a high-performance VPP data plane; up to 50 Gbps intelligent routing throughput on Marvell OCTEON 10.
- Carrier-grade L3 routing — line-rate forwarding with up to 2M RIB entries, full BGP/MP-BGP tables & peering, OSPF v2/v3, ECMP/UCMP, VRF, and policy-based routing.
- Multi-WAN & NAT at scale — policy-based multi-ISP steering and failover, plus NAT, CGNAT, and MAP-T for IPv4 sharing and IPv4-to-IPv6 transition.
- Built-in VPN & firewall — IPsec and WireGuard VPN, GRE/VXLAN tunneling, N-tuple wild-match ACLs, DHCP/DNS, and PPPoE client/server.
- Automation-ready operations — SONiC management model with ZTP, Klish, RESTful API, gNMI, NetConf, and uCentral for NetDevOps workflows.
- Deep observability — NetFlow/IPFIX, Prometheus exporter, SNMP v1/v2/v3, and SPAN/RSPAN/ERSPAN for full traffic and health visibility.
- High availability — MC-LAG, VRRP, BFD, and Monitor Link, on the same compact half-width 1U OCTEON 10 hardware as the ET2508.
SONiC-VPP Routing OS
AsterNOS-VPP is a production-hardened SONiC routing OS with VPP as the data-plane engine. The full feature set ships pre-activated on RT2500 series routers — no per-feature license keys, no add-on modules to purchase separately.
Interface
Routing Protocols
MPLS
IP Service
Tunnel
Security
Quality of Service (QoS)
High Availability
Management & Monitoring
The Silicon: Marvell OCTEON 10 (CN102XX)
Both the ET2508 and RT2508 are built on the Marvell OCTEON 10 DPU platform — the industry’s first DPU family on a 5 nm process with 64-bit ARM Neoverse N2 cores. According to Marvell, this generation delivers roughly a 3× jump in per-core compute (SPECint/core/GHz) and a 50% reduction in power versus the previous OCTEON generation, which is what lets a compact, fan-light edge appliance sustain real routing, security, and compute workloads under ~60 W.
What sets OCTEON 10 apart at the edge is its set of integrated hardware acceleration engines, so packet, crypto, and AI work doesn’t fall back to software:
Hardware-based VPP accelerator
Marvell cites up to 5× higher packet-processing rates, the foundation for the platform’s up to 58 Gbps forwarding and AsterNOS-VPP’s 50 Gbps routing.
True inline crypto
IPsec/SSL encryption and decryption handled in-line at up to 50 Gbps, with no separate offload card.
Highly programmable packet processors
with an integrated switch and packet parser, enabling flexible forwarding pipelines.
Secure Boot with eHSM/TrustZone
and PCIe DMA acceleration for a hardened, high-throughput data path.
CN102XX at a glance (the member powering ET2508 / RT2508)
| Attribute | CN102XX | CN103XX |
|---|---|---|
| ARM Neoverse N2 cores | Up to 8 | Up to 8 |
| Max frequency | 2.7 GHz (2.5 GHz in ET2508 / RT2508) | 2.7 GHz |
| SPECint (2017) | 37 | 37 |
| Cache (L2 / L3) | 8 MB / 16 MB | 8 MB / 16 MB |
| DDR5 memory controllers | 2 × DDR5 @ 5600 MT/s | 2 × DDR5 @ 5600 MT/s |
| Crypto | True inline (IPsec / SSL) | True inline (IPsec / SSL) |
| Ethernet | 4×10G + 2×10G or 16×1G | 4×50G/25G/10G + 2×10G or 16×1G |
| PCIe | PCIe 3.0, up to 6 | PCIe 5.0, up to 6 |
| SerDes | 10G | 56G |
| Typical power | 10–20 W | 10–25 W |
Software & ecosystem
OCTEON 10 ships with a feature-rich SDK and standard toolchain (GCC, GDB, BinUtils) and supports KVM, Docker/CNI, OVS, and Kubernetes, plus standard DPDK, VPP, and SPDK. That open-software alignment is exactly why the ET2508 can be a bare-metal canvas for your own stack, while the RT2508 uses the same hardware-accelerated VPP path to run AsterNOS-VPP at line rate.
| Enterprise edge router family datasheet | Enterprise edge router datasheet |
| Quick start guide for AsterNOS-VPP CLI | AsterNOS-VPP documentation |
| CERTIFICATE |  ISO 9001 |  ISO 14001 |  ISO 45001 |  ISO 27001 |  FCC |  CE |
| SCOPE | Quality management system | Environmental management | Occupational health and safety | Information security management | US radio frequency compliance | EU health, safety and environmental compliance |