EXA48800 Network Packet Broker

Cubro
cubro ex48800 network packet broker
  • Filters and load-balances traffic from 1, 10, 25, 40 or 100 Gbps links to multiple monitoring tools
  • Aggregates multiple inputs with different interface speeds to one or more output ports/monitoring tools
  • 48 x 10/25 Gbps (SFP+/SFP28) and 8 x 40/100 Gbps (QSFP/ QSFP28) ports
  • 40/100 Gbps ports support break-out to 4 x 10/25 Gbps
  • IPv6 support
  • Tunnel removal and inside tunnel filtering
  • Flexible port licensing model (24 or 48 ports enabled)
  • Deduplication to remove unwanted packets
  • Complex filtering inside packet payload
  • Open for 3rd party transceivers
  • 2-year base warranty period
Functions & Benefits of EXA48800
  • Easy to configure: Secure Web GUI / ReST API
  • Load balancing: Hash-based, session-aware load balancing on either outer or inner tunnel headers
  • Ultra high port density: Supports up to 8 x 40/100 Gbps or 32 x 25/10 Gbps ports and 48 dedicated SFP+/ SFP28 ports for 10G or 25 Gbps
  • Supports 4 x 1 Gbps ports
  • Regex filtering to search for complex ASCII strings or Hex patterns anywhere in packets
  • Tunnel termination and filtering on multiple parameters, including inner tunnel (VXLAN, GTP, ERSPAN, MPLS, SRv6, etc)
  • Deduplication function
  • IP Fragmentation with GRE encapsulation and IP Reassembly
  • Data Masking
  • SNMPv2c and SNMPv3 support

The Cubro EXA48800 is a high-performance network packet broker built to deliver advanced visibility for today’s complex, high-speed networks. It aggregates, filters, replicates, and load balances traffic, ensuring that monitoring, security, and management tools receive exactly the data they need.

Powered by a multi-core programmable switch chip combined with two high-performance ARM CPUs in a single chassis, the EXA48800 offers exceptional flexibility and functionality. This unique architecture makes it ideally suited for advanced visibility and security use cases.

With comprehensive multi-layer filtering and tunnel removal capabilities, the EXA48800 is the ideal solution for achieving full visibility into overlay networks, while simplifying operations and enhancing monitoring efficiency.

Applications/Solutions

Deduplication

The EXA48800 can detect and delete duplicate packets. Duplicates can cause numerous issues. The obvious issue is that twice as much data requires twice as much processing power, memory, etc. However, the main issue is false positives: errors that are not really errors or threats that are not actually threats. One common way that duplicate effect analysis is by an increase in TCP out-of-order or retransmission warnings. Debugging these issues takes a lot of time, usually the time an overworked, understaffed network operations or security team does not have. In addition, any analysis performed based on this information is probably not reliable, so this only exacerbates the issue. The Cubro EXA48800 offers a deduplication function to eliminate duplicated packets and protect monitoring equipment from getting overloaded.

Aggregation
The EXA48800 is able to receive traffic from a single or multiple 1/10/25/40 or 100 Gbps link(s) via the
monitoring ports of an inline tapping device. The incoming traffic can be further aggregated to a single
or multiple outputs to connect analysers and monitoring tools as required. The example below shows
how the EXA48800 aggregates upstream and downstream traffic of a 100 Gbit link to a single output
port for more economical usage of connected traffic probes/ analytics systems.

State-of-the-art tunnel functionality
The EXA48800 supports the termination of various tunnels such as:

  • ERSPAN II and III
  • MPLS over UDP
  • GRE
  • VXLAN
  • GTP



Check out the product datasheet for technical specifications.

Datasheet
Datasheet