The SFC7408 is an orthogonal plug-in Ethernet high-density traffic distribution device f featuring low latency and high bandwidth, making it suitable for capturing and analyzing data from links with various transmission rates.
SFC7408 is a new-generation 1G/10G/25G/100G Ethernet aggregation and traffic distribution device. It is built with domestically developed switching chips and features high port density, diverse operating modes, flexible high-performance deployment, and convenient management and maintenance. It is capable of adapting to various application environments and providing real-time network communication data to devices such as network information monitoring systems, network traffic analyzers, and signaling analyzers as needed.
The SFC7408 aggregation and traffic distribution device provides 8 service card slots, allowing for flexible selection and configuration of service cards.
The SFC7408 provides powerful intelligent flow selection and multi-path monitoring capabilities. It supports multi-port data tagging, aggregation, filtering, packet replication for multiple outputs, and load-balanced distribution. This makes it particularly well-suited for complex application environments with a high number of links, large network traffic volumes, and dense configurations. It offers a convenient and efficient data acquisition solution for network security, protocol analysis, and signaling detection systems.
High-performance multi-core computing
Single card supports up to 16x100G, with a single-card access bandwidth of 1.6Tbps.
Redundant Design
Control Plane: 1+1 hot-swappable backup
Fans: 4+1 redundant, hot-swappable
Power Supply: 3+1 redundant, hot-swappable
High Bandwidth Switching Capacity
Single service card supports up to 1.6Tbps switching backplane bandwidth (unidirectional).
Chassis-level switching backplane bandwidth reaches up to 12.8Tbps.
Service Diversity
Supports multiple service versions and enables diverse applications with high integration.
Customizable Software
Advanced traffic distribution features can be deeply customized based on DPI for specific application scenarios.
White-Box Ready
Blade server design, compatible with orthogonal chassis, and white-box ready. Users can port their own software for tailored applications.
Efficient Deployment
Reduces physical interconnections between different services, enabling internal connectivity and efficient project delivery.
|
Item |
functionality |
Description |
|
Basic Parameters |
Hardware form |
Standard 4U rack-mount device with redundant power supplies and redundant fans. |
|
Basic Functions |
Replication/Aggregation /Traffic distribution |
Supports one-to-many, many-to-one, and many-to-many traffic replication, aggregation, and distribution. |
|
Load-balance |
Supports bundling multiple interfaces into output groups, load balancing based on IP quintuple, and same-source-same-destination load balancing based on inner and outer IP addresses. |
|
|
Filter rules |
MAC address matching, supporting both exact and mask formats VLAN matching, supporting both exact and mask formats IP quintuple matching, supporting both masked quintuples and exact quintuples TCP flag bit matching Fragmented packets, supporting matching the first fragment and non-first fragments User-defined fields ,etc. |
|
|
Rule capacity |
The maximum number of masks is 12K for IPv4 or 4K for IPv6, sharing mask resources. The maximum number of precise rules supported is 200K for IPv4 or IPv6. |
|
|
Ports |
Supports transmit/receive multiplexing and single-fiber transmission. |
|
|
Packet header modification |
Supports modifying the source MAC and destination MAC of the packet. |
|
|
IP address modification |
Supports modifying the IP address of the datagram. |
|
|
VLAN Lable |
Supports adding port tags Supports custom VLAN addition
Supports modifying the original VLAN to a port tag Supports modifying the original VLAN to a custom VLAN
Supports up to 3-layer VLAN stripping |
|
|
Packet truncation |
Supports line-rate packet truncation (64B/96B/128B/256B/512B/...). Supports forward truncation of packets to a specified length. |
|
|
Packet header stripping |
Suports stripping IPIP/MPLS/GRE/VxLAN tunnel. |
|
|
Advanced Functions |
IP quintuple modification |
Supports modifying the IP address of the datagram and the transport layer port number. |
|
Packet truncation |
Supports truncation to any specified length between 64B-1518B. Supports L4 Payload truncation. |
|
|
Packet header stripping |
Suports stripping IPIP/MPLS/GRE/VxLAN tunnel. Suports stripping GTP/L2TP/Teredo/AH/VxLAN tunnel. |
|
|
Packet anonymization |
Supports custom field-level data masking for location data, capable of handling 4-segment message anonymization. |
|
|
Timestamp |
Support for nanosecond-level timestamp addition, which can be modified in the MAC address or added to the packet tail. |
|
|
Rule capacity |
Supports tens of millions of rule capacity |
|
|
Filter rules |
Traffic learning by interface (e.g., N1/N2/N4/N5/N7/N15/N16/N22/N40/S1-MME/S6a/SGs/S11/VoLTE SIP). Signaling flow parsing (e.g., outputs S11's Create Session Request messages by interface). |
|
|
Management Functions |
Network managment |
Suports IPv4 and IPv6 address. |
|
WEB managment |
Supports HTTP/HTTPS login, with all major functions accessible through the web interface. |
|
|
CLI |
Supports SSH and Telnet login, with all configuration functions accessible via the command line |
|
|
Configuration backup |
Supports configuration file import/export/editing. |
|
|
NTP |
Supports NTP clock synchronization. |
|
|
Monitor |
Log |
Supports defining SYSLOG by severity level and reporting it to the server. |
|
SNMP |
Supports SNMP, v2c/v3 protocols, and SNMP TRAP. |
Note: Advanced feature software customization is supported. The above advanced features are already available in the software, but they are not necessarily included in all versions. The specific features depend on the actual software version and must be selected based on specific requirements.
Orthogonal chassis
Size: 440mm (W) × 176mm (H) × 545mm (D)
Form Factor: 4U, supporting 8 service slots
Per-slot Backplane Bandwidth: Up to 1.6Tbps
Total System Bandwidth: 12.8Tbps (for basic feature offloading)
Hot-swappable Fan Design: Supports 4+1 redundancy
Hot-swappable Power Supply Design: Supports 3+1 redundancy
Total Power Consumption: ≤2500W
|
|
|
|
|
|
|
Compatibility: Designed for the SFC7408 orthogonal chassis.
Front Panel Ports:
4 × 100G interfaces
2 × 10G service interfaces
2 × GE management Ethernet ports
2 × management serial port
1 × mini console port
Supports independent management per card.
Switching Backplane: 800Gbps (400Gbps direct-to-panel, 400Gbps internal interconnect via advanced processor).
Advanced Features: Supports 200G advanced feature offloading.
The SFC7408-KP920S is an orthogonal blade server designed for the SFC7408 orthogonal chassis.
The front panel supports 2x 100G interfaces and 2x 10G service interfaces, along with 2x GE management Ethernet ports, 2x 10G management optical ports, 1x mini management serial port, and 2x USB ports, supporting independent management per blade.
It is powered by 2x 32-core CPUs, with 128GB memory x2 (non-upgradable), 2x M.2 SSD slots, and a standard storage configuration of 512GB x2, with optional storage capacities ranging from 512GB to 2TB.
|
SFC7402CE |
SFC7404XE |
SFC7402CE (100G Inline Link Protection Card)：A 100G plug-in inline link protection card supporting 2x 100G optical inline connections and 4x 100G backplane channels, enabling 1:1 link-direction data monitoring.
SFC7404XE (10G Inline Link Protection Card)：A 10G plug-in inline link protection card supporting 4x 10G/1G optical inline connections and 8x 10G backplane channels, enabling 1:1 link-direction data monitoring.
Optical Splitting & Performance：Uses a 1:2 optical splitter with an 80:20 split ratio (80% main link, 20% bypass).
Input optical power sensitivity:
100G links: As low as -2 dBm
10G links: As low as -12 dBm
1G links: As low as -15 dBm
Bypass mode: Adds minimal attenuation (≤1.5 dB) to the main link.
Service mode: Provides optical amplification for the main link.
Operating Modes Supports 3 service modes:
K0 (Bypass Mode): Direct traffic bypass.
K1 (Soft Bypass Mode): Monitors traffic before switching.
K2 (Service Mode): Inline traffic analysis and protection.
Monitoring & Protection
Self-diagnostic mechanisms: Monitors for bit errors, packet loss, port status, and traffic drops, with automatic failover.
Management interfaces: CLI, WEB, UDP Socket API, SNMP.
Emergency button: Physical panel button for instant failover to protect the main link.
Modular Design
Hot-swappable card and module design.
Optical modules are externally mounted on the panel.
Fault isolation
Card-level failures: Replace the card only.
Module-level failures: Replace the module only.
Ensures flexible and rapid fault recovery.
Software Upgrade & Power
Supports wareboot upgrade (software upgrade without disrupting the main link).
Power consumption: ≤150W per card.
EN
