Unwavering Commitment to Open Networking — ASTERFUSION

Asterfusion® NF NPB Switch

Supports traffic aggregation, distribution, in-depth packet processing and reduce backend analytical systems’ workload in network visibility scenarios


Product Specs

Product modelInterfaceSwitching Capacity
NF2024
24 x 10GE SFP+

480Gbps

NF2048
48 x 10GE SFP+

960Gbps

NF2224
24 x 10GE SFP+, 2 x 100GE QSFP28

880Gbps

NF2248
48 x 10GE SFP+, 2 x 100GE QSFP28

1.36Tbps

NF2448
48 x 10GE SFP+, 4 x 100GE QSFP28

1.76Tbps

Why Asterfusion® NF NPB Switch?

  • Full-stack network packet visibility

    Asterfusion® NF NPB switches contain a high-performance programmable switching ASIC and upto two intelligent service processing units. Compared with existing NPB switches, Asterfusion® NF contain significant improvements in switching capacity, computing capacity and manageability; while at the same time,provide complete traffic collection and processing capability,offering users a one-stop network visibility solution.

  • Flexible and efficient in-depth service processing

    Based on the programmable switching ASICs, Asterfusion® NF2000 switches can carry out basic visibility functions such as packet header matching, truncation and modification, offering packet processing flexibility with the wire-speed performance. Asterfusion® NF switches also contain 2 intelligent service processing units,which can provide advanced service processing functions such as application layer protocol matching, signature matching, packet de-duplication, SSL decryption, and packet header truncation out.

  • High Performance SSL Decryption functions

    Asterfusion® NF switches provide an optional SSL decryption solution, which can effectively solve the HTTPS network visibility problems for enterprise and vertical-industry users in the case of . With hardware encryption and decryption co-processors inside the Intelligent Service Processing Unit,Asterfusion® NF switches can carry out SSL traffic decryption at a very high speed.

  • Intelligent signaling and user traffic correlation marking

    Asterfusion® NF switches can decode and track identification of signaling protocols running in each interface of mobile core networks; extract and re-construct specified signaling packets and ensure the delivery of the entire message to back-end analytical systems; Asterfusion® NF switches can also support correlation marking between signaling-plane traffic and user-plane traffic, thus allowing for intelligent filtering and distribution of correlated traffic.

Value Propositions

Flexible capacity expansion through Modular design

The high performance multi-core ARM SoC and their associated memory capacity of the intelligent service processing units inside the Asterfusion® NF series can be customized and expanded according to the performance requirements of the users’ application scenarios. Besides the ease of capacity expansion,Asterfusion® NF switches also provide a high price/performance ratio through the modular design architecture.

TCO Reduction in NPB Network Deployment

With high performance multi-core ARM SoC intelligent service processing units,Asterfusion® NF switches can provide abundant general-purpose computing power needed to implement in-depth service processing functuoins such as SSL decryption, packet de-duplication, packet desensitization, etc. while at the same time,reduce analytical systems’ workload and therefore, reducing the total number of analytical system clusters and lowering the TCO in NPB network deployment.

Application Scenarios

NF系列深度豹纹处理应用的拓扑图

In-depth packet processing

Scenario 1

Asterfusion® NF switches support a multi-layer (from L2 to L7) traffic classification function needed to sort out ultra-fine grained traffic and therefore enhance the traffic processing effectiveness of the backend analytical systems. At the same time, Asterfusion NF switches can also efficiently carry out in-depth packet processing, such as packet de-duplication, content desensitization and other operations to meet various packet processing needs in different application scenarios, thereby fully improving the overall performance of the analytical systems.

NF系列用于大型企业安全监控场景的拓扑图

SSL decryption offload

Scenario 2

The Asterfusion® NF switches offer a comprehensive solution for inspecting users’ SSL connection requests; decrypting the communication connection between users and servers and then trasferring the decrypted traffic to the security analysis systems,. This solution can be widely deployed in various special security inspection scenarios for large enterprise and government agencies.

NF系列信令关联分流的应用场景的拓扑图

Signaling correlation distribution

Scenario 3

Asterfusion® NF switches can support the analysis and correlation marking between 3G/4G/5G signaling-plane traffic and user-plane traffic. Through the customized network element self-learning mechanism, Asterfusion NF switches can segregate complete signaling-plane traffic and user-plane traffic belonging to different network elements, mark the key information from signaling-plane analysis into the specified position of collected user-plane packets, and then based on the marked information, filter and distribute collected user-plane packets to backend anlaysis systems.

©  Asterfusion Data Technologies Co., Ltd. All rights reserved.