WWW.6WIND.COM [email protected]

6WIND Turbo Router™ Replace Hardware with vRouter for Commercial-off-the-Shelf (COTS) Servers and Software: vRouter Use Virtual Machines Cases 6WIND Turbo Router is a software Advanced Management and router that provides scalable, cost- Monitoring with APIs Border Router: Multi-homing with effective IP routing, IPsec VPNs and 6WIND's vRouters provide both tradi- CG-NAT solutions. Built with 6WIND's tional, CLI-based management and BGP - provide multiple links to a 20 year high performance software management based on YANG and single service provider or multiple pedigree, Turbo Router has been NETCONF APIs for integration with service providers for redundancy, replacing Cisco and Juniper hardware higher level orchestrators and manage- reliability and path diversity. routers through a simple software ment frameworks. For monitoring, the download on x86 servers and virtual traditional SNMP and syslog mecha- VPN Concentrator and Site-to- machines (VMs). nisms are supported, plus data plane Site VPN: Secure point-to point telemetry through sFlow, and graphical vRouter Architecture analytics with time series data base. connections between multiple data 6WIND Turbo Router is divided up into centers and sites. a control plane and a data plane. The Performance control plane is comprised of the Linux Routing¹ CG-NAT: Carrier-Grade NAT, also operating system as well as routing Ÿ Forwarding: 16 Mpps per Core known as Large Scale NAT (LSN), applications. The control plane runs Ÿ VLAN: 13.5 Mpps per Core independently of the data plane Ÿ Filtering: 6.2 Mpps per Core shares an outside address among Ÿ component and runs on at least one Over 1M Routes multiple inside local (private) IP Ÿ Multiple Full Internet Tables core. 6WIND's high performance is addresses for IPv4 preservation Ÿ 1/10/25/40/50/100GE Support accomplished by running the data and IPv6 migration projects. IPsec¹ plane packet processing on dedicated Ÿ IPsec: 14 Gbps per Core cores. In addition, 6WIND's vRouters Ÿ 50,000+ Established Tunnels uCPE: Deploy as a VNF (Virtual have native multi-queue support to Ÿ Up to 1,000 Tunnels per Second Network Function) on multiple distribute the load across multiple CPU CG-NAT² architectures with APIs for built-in cores. This combination allows perfor- Ÿ 30M Simultaneous Connections per monitoring and third-party orches- mance to scale linearly with the number 32G of RAM (scales with memory) of cores assigned to the vRouter. Ÿ 200,000 Connections per Second per trators. Core Ÿ 10 Gbps per Core

WWW.6WIND.COM #SPEEDMATTERS For Networks Turbo Router Network Licenses IP Services Port Assignment 1G, 2G, 5G, 10G, 25G, 40G, 100G, 200G Ÿ DHCP Server / Client / Relay Ÿ Random or Parity Ÿ DNS Client / Proxy Ÿ Port Block Allocation (PBA) Features Ÿ NTP Ÿ Per user/per CPE Session Limiter Routing Ÿ Deterministic³ Ÿ BGP4, BGP4+ QoS Ÿ OSPFv2, OSPFv3 Ÿ Rate Limiting per Interface IP Pool Management Ÿ RIPv1, RIPv2, RIPng Ÿ Rate Limiting per VRF Ÿ Paired pooling Ÿ Static Routes Ÿ Class-based QoS Ÿ IP pool resize Ÿ Path Monitoring for Static Routes -Classification: ToS / IP / DSCP / CoS Ÿ ECMP -Shaping and Policing Logging Ÿ PBR -Scheduling: PQ, PB-DWRR Ÿ Port batching Ÿ MPLS Ÿ Syslog Ÿ BGP L3VPN Operations Ÿ BFD Ÿ Installation: PXE, USB, ISO, QCOW2, ALG Support Ÿ NHRP³ OVA Ÿ ICMP, FTP, TFTP, RTSP, PPTP, SIP, H323 Ÿ VXLAN EVPN³ Ÿ Update / Rollback Support Ÿ BGP RPKI³ Ÿ Provisioning: cloud-init, Ansible, ZTP³ Hairpinning

L2 and Encapsulations ------Endpoint-Independent Mapping and Ÿ GRE, mGRE³ Filtering Ÿ VLAN (802.1Q, QinQ) Turbo IPsec Application Licenses: Ÿ VXLAN 1K, 2K, 5K, 10K, 25K, 50K Tunnels Address and Port-Dependent Mapping Ÿ LAG (802.3ad, LACP) and Filtering Features IP Networking IPsec ------Ÿ IPv4 and IPv6 Ÿ IKE v1/v2 Pre-shared Keys or X509 Ÿ Segment Routing v6³ Certificates System Requirements Ÿ IPv6 Autoconfiguration³ Ÿ MOBIKE Xeon or Atom processor with 1, 2 or Ÿ VRF Ÿ Encryption: 3DES, AES-CBC/GCM (128, 4 sockets (Advantech, , HP, Lanner, Ÿ IPv4 and IPv6 Tunneling 192, 256) Super Micro) Ÿ NAT Ÿ Hash: MD-5, SHA-1, SHA-2 (256, 384, Ÿ Multicast³ 512) AES-XCBC (128) Core Count: Minimum one for control, Ÿ Key Management: RSA, DH MODP one for data plane; fully customizable Management / Monitoring groups 1 (768 bits), 2 (1024 bits), 5 Ÿ SSHv2, Telnet (1536 bits) and 14 (2048 bits), DH PFS Memory: 2GB minimum, configurable, Ÿ CLI Ÿ EAP/Radius³, EAP-MSCHAPv2³ depends on capacity Ÿ NETCONF / YANG Ÿ Extended Sequence Numbers (ESN), Ÿ SNMP Large Anti-replay Windows NIC Ÿ KPIs / Telemetry (YANG-based) Ÿ High Performance (AES-NI, QAT) Ÿ Intel 1G 82575, 82576, 82580, I210, Ÿ RBAC with AAA Ÿ Tunnel, Transport or BEET mode I211, I350, I354 Ÿ Syslog Ÿ SVTI Ÿ Intel 10G / 40G 82598, 82599, X520, Ÿ 802.1ab LLDP Ÿ DMVPN³ X540, XL710 Ÿ sFlow Ÿ OpenVPN³ Ÿ Mellanox 10G / 25G / 40G / 50G / 100G CX4, CX5 High Availability ------Ÿ Broadcom NetExtreme E-Series Ÿ VRRP Ÿ Virtio, SR-IOV, PCI passthrough, Ÿ IKE/IPsec Synchronization (for IPsec Turbo CG-NAT Application Licenses: VMXNET3, ENA add-on) 1, 2, 5, 10, 20, 30 Million Simultaneous Connections Deployment / Hypervisor Security Bare Metal, KVM, VMware ESXi, Ÿ ACLs (stateless & stateful) Features OpenStack NFV, AWS, Containers Ÿ uRPF (Kubernetes / docker)³ Ÿ CP Protection CG-NAT Modes Ÿ BGP FlowSpec Ÿ NAT44 Ÿ NAT64³

¹ Test Platform: Intel® Xeon® Gold 6152 @ 2.1GHz. IPsec tests use AES 128-GCM. WWW.6WIND.COM ² Test Platform: Dual Intel® Xeon® Platinum 8170 @ 2.1GHz with 2x26 cores. #SPEEDMATTERS ³ Near-term Roadmap