OR-8000

The OR-8000 is the edge router and firewall for a site that terminates real bandwidth. The numbers we publish are paired with their test conditions: 40 Gbps of stateful firewall throughput at 1518-byte frames, 22 Gbps at IMIX — the mixed-size traffic distribution that resembles actual internet load — and 28 Gbps of IPsec with AES-256-GCM using the hardware AES-NI path. We list the IMIX figure because the 1518-byte number alone would tell you how the box performs on a traffic pattern you will never see.

Session capacity is eight million concurrent flows at 480,000 new sessions per second, which is the dimension that matters for NAT-heavy edges and any workload with high connection churn — DNS, short-lived API calls, scanning traffic. Routing is the full enterprise set: BGP4 for multi-homing and transit, OSPF and IS-IS for the interior, PIM for multicast, VRRP for gateway redundancy. VPN covers both WireGuard and IPsec IKEv2, scaling to 5,000 concurrent tunnels for hub-and-spoke or remote-access designs.

The chassis is built to stay up. Two 350W supplies run 1+1 redundant, three fans run 3+1, all hot-swap and front-serviceable. A single expansion bay takes an LTE module for out-of-band or last-resort WAN failover, or an SFP28 module for a 25G uplink. Typical draw is 126 W; rated MTBF is 228,000 hours.

Deployment note: Terminate dual WAN on ports 01 and 02 with BGP to each upstream for active-active or active-standby. Keep the OOB management port (07) on a separate physical path — its value is being reachable when the data plane is not. Optics and DAC are ordered via OF-SFP10; the LTE and SFP28 expansion modules are ordered separately by part number. Ships with the firewall in default-deny posture — build the allow policy before cutting production traffic over.