Data Sheet

Thunder CGN
IPv4 Preservation & IPv6 Transition Management

Platforms
Thunder CGN, the most advanced carrier-grade networking and Services

solution, provides high-performance CGNAT with protocol

Thunder CGN
translation that allows service providers and enterprise to Physical & SPE
Appliances
extend IPv4 investment while simultaneously transitioning to
V
IPv6 standards.
Thunder CGN
Virtual Appliance

solution that provides the broadest support

Extend IPv4 While for industry standards and meets different
Thunder CGN
Bare Metal

Enabling IPv6 IP address and protocol translation

requirements simultaneously.
The award-winning A10 Thunder CGN
proactively solves IPv4 address exhaustion Thunder CGN enhances your infrastructure Thunder CGN
Container
to overcome the challenges associated with security and availability to ensure your
the rapid increase of IP address demands Management
applications remain addressable and
for internet-connected devices and BYOD operate transparently through address
roll out. Thunder CGN delivers advanced translation with multiple mechanisms, such
CGNAT features to help service providers as integrated DDoS protection for NAT pools Harmony Controller
and enterprises extend IPv4 connectivity, and application layer gateways (ALG). Centralized Analytics
transition to IPv6 and reduce TCO, while and Management

supporting network and infrastructure Built on A10’s market-proven Advanced

transformation to cloud native, 5G, and edge Core Operating System (ACOS®), Thunder
technologies. CGN delivers advanced functionality
FlexPool
across the broadest range of form factors Capacity Pooling
As network addressing and IPv6 transition - container, virtual, bare metal and physical License
architectures can vary greatly across and - with performance up to 370 Gbps.
within an organization, customers need a Talk
With A10
Web
a10networks.com/cgn

1
Benefits

Extend IPv4 Reduce TCO

v4 Investment High performance in a compact form

Solve IPv4 address exhaustion and factor results in lower OPEX and CAPEX

extend the life of an IPv4 network through efficient rack space usage,

infrastructure to ensure critical lower power consumption, reduced

applications and services are always cooling requirements, and automated

available and reliable. tools for efficient management and

operations.

Manage IPv6
Migration
Secure
Enable a smooth transition to IPv6 by Protection and Availability
supporting translation and tunneling
Enhance your infrastructure security
between IPv4 and IPv6 networks.
with NAT IP pool protection from
Various options, such as DS-Lite, 6rd,
large-scale DDoS attacks. Provide the
Lw4o6, NAT64/DNS64 and MAP, can
highest connection reliability by using
run concurrently to allow network
application layer gateways (ALG) and
operators to phase in transition
other important features such as high
mechanisms as needed.
availability (HA) for hitless fail-over.

Scale for IoT

and BYOD
Flexible
The Internet of Things and BYOD Deployment Options
adoption have enabled the rapid
With physical, virtual, bare metal and
proliferation of internet-connected
container options, tailor Thunder CGN
devices, depleting the available IPv4
deployments to align with your software
address space. Plan to meet the
or hardware strategy, as needed
demand for connectivity expansion and
for enterprise and service provider
scale your infrastructure for growth to
environments (fixed, mobile or multi-
ensure service continuity.
access edge compute (MEC)).

Performance The award-winning Thunder CGN product line—with an industry-leading

performance of 300 Gbps and 512 million concurrent sessions in a single
& Scalability appliance — offers up to 2.5 times the performance of the competition with less
than half the data center footprint.

2
Reference Architectures

v4
Public IPv4
Internet Harmony
Addresses
Controller
Thunder CGN

CGN/CGNAT/LSN
Private/CGN
Scoped IPv4
Addresses

Service Provider
or Enterprise
IPv4 Network
Consumer
NAT/Private Carrier-Grade NAT
IPv4 Addresses Deployment Options
Use A10 Thunder CGN to leverage a standards-
v4 v4 based mechanism—carrier-grade network
Enterprise Mobile Provider Enterprise address translation (CGNAT), large-scale NAT
NAT 44 NAT 44 NAT 44 (LSN), NAT444 or NAT44—to reclaim existing
IPv4 space.

v4 v6
Internet Internet
Harmony
Thunder CGN Controller

6RD/DS-LITE/NAT64/DNS64/MAP-T/and More

v4 v6

IPv6 Migration Options

v6 v4 v6
Clients Clients Clients A10 Thunder CGN delivers IPv6 translation and
6RD MAP-T NAT64/DNS64 encapsulation technologies, including prevalent
MAP-E
DS-LITE/LW406 protocol connectivity and interplay for phased
IPv4-to-IPv6 transitions.

3
Features

Extend IPv4 Investment

v4 Carrier-grade network address translation (CGNAT) extends the service life of an IPv4 infrastructure, allows
time to plan for an IPv6 transition and ultimately reduces cost by avoiding disruptions to business operations.

Advanced CGNAT Functions

Gain a standards-based mechanism to reclaim existing public IPv4 address space. CGNAT scales networks
to overcome IPv4 exhaustion with high-performance, highly transparent address and protocol translation,
providing NAT44(4) and ALGs to support network growth and a seamless user experience.

Millions of Concurrent Sessions

Thunder CGN supports up to 512 million concurrent sessions with unprecedented setup and teardown
rates in a compact form factor. Competing solutions require a large-chassis product with multiple
application blades to achieve similar performance.

Advanced Logging
Gain comprehensive logging options to meet stringent compliance and government mandates. Enhance
logging detail and use log compression features and techniques, such as deterministic or fixed NAT, to
reduce log volumes and logging infrastructure requirements.

Comprehensive IPv4 to IPv6 Transition Options

Since IPv6 is not backward compatible with IPv4, various solutions are available to achieve full
connectivity, regardless of source or destination IP protocol.

Prevalent Protocol Connectivity

Transition technologies, such as Dual-Stack Lite (DS-Lite) or Light Weight 4 over 6 (Lw4o6), allow network
operators to run an IPv6-only core network, while IPv4-only devices can still connect to the internet using
softwires (or tunnels) through the IPv6-only infrastructure. IPv6 Rapid Deployment (6rd) provides similar
behavior, allowing IPv6 access through an IPv4 network. MAP-T is a translation technique that builds on
the Address plus Port method of stateless NAT to translate packets between IPv4 and IPv6 networks.

IPv6 Client Access to IPv4 Content

IPv6 was not built to be backward compatible with IPv4, complicating the deployment of IPv6 clients.
Available with Thunder CGN, NAT64/DNS64 solves this problem by allowing IPv6-only devices to access
IPv4-only content.

Interplay for Phased IPv6 Migration

Deploy transition technologies concurrently to enable a full transition lifecycle. For example, start with
CGNAT to mitigate IPv4 address exhaustion and phase in NAT64/DNS64 to enable IPv6 clients to access
IPv4 content.

4
Features

Ensure App Accessibility & Reliability

Even though the OSI network layer principle should ensure separation between the application and
network behavior, this is not always the case. Many applications rely on network transport information to
operate, which can lead to problems when just the network portion is translated. Connection reliability is
also crucial for applications that need to be available at all times.

CGNAT Transparency
Facilitate predictable NAT behavior and provide transparent end-user experiences with advanced
CGNAT features, such as Endpoint Independent Mapping (EIM), Endpoint Independent Filtering (EIF) and
hairpinning. User quotas ensure that public IP port usage is fairly distributed between end-users and that
viruses and malware, for example, can’t exhaust resources for other users.

ALG Protocol Support

It is critical for network operators to maintain connectivity for all application services and users, while
ensuring application integrity. ALGs see to it that protocols — such as FTP, TFTP, RTSP, PPTP, SIP, ICMP,
H.323, ESP, MGCP and DNS—remain functional. Many legacy NAT implementations do not provide this level
of transparency.

Stateful Session Synchronization

Build non-stop operations with high-availability (HA) session synchronization. When deployed in HA mode,
Thunder CGN maintains active sessions during fail-over to provide seamless user experience and ensure
that end-users will be unaware of any failures or connection terminations. This prevents users from having
to restart a large download, for example, and increases user satisfaction.

Integrated DDoS Protection

Secure NAT IP pools and prevent huge volumes of multi-vector DDoS attack traffic with integrated DDoS
protection. Thunder SPE models provide additional hardware acceleration for policy enforcement. Offer
maximum uptime of network resources to process subscriber traffic and avoid service interruptions.

Thunder
300 512M 450M
14045 CGN by the Numbers
Gbps Concurrent
Sessions
PPS
DDoS Protection

1,023 8M
Application Delivery Full TCP
Partitions Connections Per Second

5
Management & Integration
Thunder CGN deployments can be customized with centralized device management and integration into third-party
frameworks, as needed. Software-based Thunder CGN options enable rapid deployment and flexible operation alongside the
high-performance hardware options available.

Global Hypervisor
Management Software Support

Analytics-Driven For virtual deployments, vThunder

provides the full set of CGNAT features
Gain subscriber and network services
that run atop leading hypervisors
visibility with A10 Harmony™ Controller
—such as VMware ESXi, KVM and
for Thunder CGN. Leverage traffic and
Microsoft Hyper-V—on your choice of
security analytics to detect anomalous
virtualized infrastructure.
trends and get customizable alerts
based on configurable metrics. Centrally
configure and manage policies across Bare Metal
services in a multi-cloud environment.
High-Performance Software
Simplify capacity planning, improve
Thunder CGN for Bare Metal is a
service reliability and increase
unique offering that allows service
operational efficiency to reduce TCO of
providers and enterprises to extend
the overall solution.
IPv4 connectivity and transition to IPv6.
Thunder CGN can also be integrated Build CGNAT software atop your choice
in DevOps processes by using the of standardized COTS hardware for
aXAPI RESTful API for full control and greater performance.
automation.
Gain direct and complete access to
the underlying hardware and avoid the
Ready hypervisor overhead associated with
for SDN & NFV virtualized solutions.

Build a truly open platform to

implement on-demand provisioning and Cloud Native
integrate with OpenStack, SDN fabrics
5G, Edge, Cloud Deployments
and NFV/ MANO frameworks.
Thunder CGN can be deployed in a
container-native deployment such as
Docker and Kubernetes. This helps the
organization build flexible and efficient
cloud native development platform.

6
Real-Time Actionable Insights

Analytics Driven CGN

Troubleshooting Dashboard
Get real-time actionable insights on critical
CGN services such as mapping distribution,
NAT IP pool utilization, subscriber
session insights, subscriber user quota
alerts and more, for analysis and faster
troubleshooting.

7
Thunder CGN Physical Appliance
Specifications

Thunder Thunder Thunder

Performance 940 CGN 1040 CGN 3040 CGN
Throughput 10 Gbps 20 Gbps 30 Gbps

Full TCP Connections Per Second 120K 300K 500K

Concurrent Sessions 16 Million 32 Million 64 Million

Application Delivery Partitions (ADP) 32 32 64

Network Interfaces

1 GE (BASE-T) 5 5 6

1 GE Fiber (SFP) 0 0 2

1/10 GE Fiber (SFP+) 4 *4

4 *4
4

Ethernet Mgmt Port,

Management Ports Ethernet Mgmt Port, RJ-45 Console Port RJ-45 Console Port,
Lights Out Management

Hardware Specifications

Intel Intel Intel Xeon

Processor
Communication Processor Communication Processor 4-core

Memory (ECC RAM) 8 GB 8 GB 16 GB

Storage SSD SSD SSD

Hardware Acceleration Software Software Software

Dimensions (Inches) 1.75 (H) x 17.5 (W) x 17.25 (D) 1.75 (H) x 17.5 (W) x 17.25 (D) 1.75 (H) x 17.5 (W) x 17.45 (D)

Rack Units (Mountable) 1U 1U 1U

14 lbs 15 lbs
Unit Weight 20.6 lbs
16lbs (RPS) 17 lbs (RPS)

Single 750W*2 Single 750W*2 Dual 600W RPS

Power Supply (DC option available)
80 Plus Platinum Efficiency, 100 - 240 VAC, 50 – 60 Hz

Power Consumption (Typical/Max) *1

60W / 80W 80W / 110W 180W / 240W

Heat in BTU/Hour (Typical/Max) *1

205 / 273 273 / 376 615 / 819

Cooling Fan Removable Fans Removable Fans Hot Swap Smart Fans

Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%

FCC Class A, UL, CE, GS, CB, VCCI, FCC Class A, UL, CE, GS, CB, VCCI, FCC Class A, UL, CE, CB, VCCI, CCC,
Regulatory Certifications
CCC, KCC, BSMI, RCM | RoHS CCC, KCC, BSMI, RCM | RoHS KCC, BSMI, RCM  | RoHS

Standard Warranty 90-Day Hardware and Software

8
Thunder CGN Physical Appliance Specifications (Cont.)

Thunder Thunder Thunder

Performance 3350-E CGN 3350 CGN 3350S CGN
Throughput 30 Gbps 40 Gbps 50 Gbps

Full TCP Connections Per Second 500K 900K 1.5 Million

Concurrent Sessions 64 Million 96 Million 128 Million

Application Delivery Partitions (ADP) 64 127 1,023

Network Interfaces

1 GE Copper 6 6 6

1 GE Fiber (SFP) 2 2 2

1/10 GE Fiber (SFP+) 8+4 *4

4 *4
8 + 4*4

25 GE Fiber (SFP28) 0 4 0

40 GE Fiber (QSFP+) 0 4 0

Management Ports Ethernet Mgmt Port, RJ-45 Console Port

Hardware Specifications

Processor
Intel Xeon 8-core Intel Xeon 8-core Intel Xeon 14-core

Memory (ECC RAM) 16 GB 32 GB 64 GB

Storage SSD SSD SSD

Hardware Acceleration Software Software Software

Dimensions (Inches) 1.75 (H) x 17.5 (W) x 18(D) 1.75 (H) x 17.5 (W) x 18(D) 1.75 (H) x 17.5 (W) x 18(D)

Rack Units (Mountable) 1U 1U 1U

Unit Weight 18 lbs 18 lbs 18 lbs

Dual 750W RPS Dual 750W RPS Dual 750W RPS

Power Supply (DC option available)
80 Plus Platinum Efficiency, 100 - 240 VAC, 50 – 60 Hz

Power Consumption (Typical/Max) *1

151W / 205W 165W / 238W 175W / 222W

Heat in BTU/Hour (Typical/Max) *1

516 / 700 564 / 831 598 / 758

Cooling Fan Hot Swap Smart Fans

Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%

Regulatory Certifications
FCC Class A, UL, CE, GS, CB, VCCI, FCC Class A, UL, CE, GS, CB, VCCI, FCC Class A, UL, CE, GS, CB, VCCI,
CCC, BSMI, RCM | RoHS CCC, KCC, BSMI, RCM | RoHS CCC, KCC, BSMI, RCM | RoHS

Standard Warranty 90-Day Hardware and Software

9
Thunder CGN Physical Appliance Specifications (Cont.)

Thunder Thunder Thunder Thunder

Performance 4440 CGN 5440 CGN 5840 CGN 5840-11 CGN
Throughput 78 Gbps 100 Gbps 115 Gbps 115 Gbps

Full TCP Connections Per Second 1.6 Million 2.2 milion 3 Million 3 Million

Concurrent Sessions 128 Million 256 Million 256 Million 256 Million

Application Delivery Partitions (ADP) 127 1,023 1,023 1,023

Network Interfaces

1/10 GE Fiber (SFP+) 24 24 24 48

40 GE Fiber (QSFP+) 4 4 4 0

100 GE Fiber (QSFP28) 0 0 0 4

Management Ports Ethernet Mgmt Port, RJ-45 Console Port, Lights Out Management

Hardware Specifications

Processor
Intel Xeon 6-core Intel Xeon 12-core Intel Xeon 18-core Intel Xeon 18-core

Memory (ECC RAM) 32 GB 64 GB 64 GB 64 GB

Storage SSD SSD SSD SSD

Hardware Acceleration 2 x FTA-4 2 x FTA-4 2x FTA-4 2x FTA-4

Dimensions (Inches) 1.75 (H) x 17.5 (W) x 30 (D) 1.75 (H) x 17.5 (W) x 30 (D) 1.75 (H) x 17.5 (W) x 30 (D) 1.75 (H) x 17.5 (W) x 30 (D)

Rack Units (Mountable) 1U 1U 1U 1U

Unit Weight 32.5 lbs 32.5 lbs 32.5 lbs 34.3 lbs

Dual 1100W RPS Dual 1100W RPS Dual 1100W RPS Dual 1500W RPS
Power Supply (DC option available)
80 Plus Platinum Efficiency, 100 - 240 VAC, 50 – 60 Hz

Power Consumption (Typical/Max) *1

360W / 445W 360W / 445W 375W / 470W 550W /760W

Heat in BTU/Hour (Typical/Max) *1

1,229 / 1,519 1,229 / 1,519 1,280 / 1,604 1,877 / 2,594

Cooling Fan Hot Swap Smart Fans

Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%

Regulatory Certifications
FCC Class A, UL, CE, CB, FCC Class A, UL, CE, CB, FCC Class A, UL, CE, CB, FCC Class A, UL, CE, CB,
VCCI, CCC, KCC, BSMI, RCM VCCI, CCC, KCC, BSMI, RCM VCCI, CCC, KCC, BSMI, RCM VCCI, CCC, BSMI, RCM |
| RoHS | RoHS | RoHS RoHS

Standard Warranty 90-Day Hardware and Software

10
Thunder CGN Physical Appliance Specifications (Cont.)

Thunder Thunder Thunder Thunder

Performance 6440 CGN 7440 CGN 7440-11 CGN 7650 CGN
Throughput 150 Gbps 220 Gbps 220 Gbps 370 Gbps

Full TCP Connections Per Second 3 Million 5 Million 5 Million 8 Million

Concurrent Sessions 256 Million 256 Million 256 Million 384 Million

Application Delivery Partitions (ADP) 1,023 1,023 1,023 1,023

Network Interfaces

1/10 GE Fiber (SFP+) 48 48 48 0

40 GE Fiber (QSFP+) 4 4 0 0

100 GE Fiber (QSFP28) 0 0 4 16

Management Ports Ethernet Mgmt Port, RJ-45 Console Port, Lights Out Management

Hardware Specifications

2 x Intel Xeon 2 x Intel Xeon 2 x Intel Xeon 2 x Intel Xeon

Processor
10-core 18-core 18-core 24-core

Memory (ECC RAM) 128 GB 128 GB 128 GB 192 GB

Storage SSD SSD SSD SSD

Hardware Acceleration 3 x FTA-4 3 x FTA-4 3 x FTA-4 2 x FTA-5

Dimensions (inches) 1.75 (H) x 17.5 (W) x 30 (D) 1.75 (H) x 17.5 (W) x 30 (D) 1.75 (H) x 17.5 (W) x 30 (D) 2.625 (H) x 17.5 (W) x 30 (D)

Rack Units (Mountable) 1U 1U 1U 1.5U

Unit Weight 36 lbs 35.7 lbs 35.7 lbs 41.5 lbs

Dual 1100W RPS Dual 1100W RPS Dual 1500W RPS Dual 1500W RPS
Power Supply (DC option available)
80 Plus Platinum Efficiency, 100 - 240 VAC, 50 – 60 Hz

Power Consumption (Typical/Max) *1

480W / 550W 690W / 820W 784W / 950W 864W / 1,091W

Heat in BTU/hour (Typical/Max) *1

1,638 / 1,877 2,355 / 2,798 2,676 / 3,242 2,949 / 3,722

Cooling Fan Hot Swap Smart Fans

Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%

FCC Class A, UL, CE, CB, FCC Class A, UL, CE, CB, FCC Class A, UL, CE, CB, FCC Class A, UL, CE, GS, CB,
Regulatory Certifications VCCI, CCC, KCC, BSMI, RCM VCCI, CCC, KCC, BSMI, RCM | VCCI, CCC, BSMI, RCM | VCCI, CCC, KCC, BSMI, RCM
| RoHS RoHS, FIPS 140-2^|*3 RoHS | RoHS

Standard Warranty 90-Day Hardware and Software

Hardware specifications and performance numbers are subject to change without notice, and may vary depending on configuration and environmental conditions.
As for network interface, it’s highly recommended to use A10 Networks qualified optics/transceivers to ensure network reliability and stability.
*1 With base model. Number varies by SSL model | *2 Optional RPS |
*3 FIPS model must be purchased  |  *4 10 Gbps speed only  | ^ Certification in process

11
Thunder CGN SPE Physical Appliance
Specifications

Thunder Thunder Thunder Thunder Thunder

4435 CGN 5845 CGN 7445 CGN 7655S CGN 14045 CGN
Performance Dual Modules

Throughput 38 Gbps 115 Gbps 220 Gbps 370 Gbps 300 Gbps

Full TCP Connections Per Second 1.4 Million 3 Million 5 Million 8 Million 8 Million

Concurrent Sessions 128 Million 256 Million 256 Million 384 Million 512 Million

Selective Dynamic Filter Rate [PPS]† 55 Million 166 Million 332 Million 500 Million 450 Million

Selective Dynamic Filter Hardware

256K / 128K 256K / 128K 256K / 128K 512K / 256K 512K /256K
Entries (IPv4/IPv6)

Application Delivery Partitions 1,023 1,023 1,023 1,023 1,023

Network Interfaces

1/10 GE Fiber (SFP+) 16 48 48 0 0

40 GE Fiber (QSFP+) 0 0 0 0 4

100 GE Fiber 0 4 (QSFP28) 4 (QSFP28) 16 (QSFP28) 4 (CFP or QSFP28)

Management Ports Ethernet Mgmt Port, RJ-45 Console Port , Lights Out Management
+

Hardware Specifications

Processor (Intel Xeon) 10-core 18-core 2 x 18-core 2 x 28-core 4 x 18-core

Memory (ECC RAM) 64 GB 64 GB 128 GB 384 GB 512 GB

Storage SSD SSD SSD SSD SSD

Hardware Acceleration FTA-3, SPE 2 x FTA-4, SPE 3 x FTA-4, SPE 2 x FTA-5, SPE 8 x FTA-3, SPE

1.75 (H) x 17.5 (W) x 1.75 (H) x 17.5 (W) x 2.625 (H) x 17.5 (W) x 5.3 (H) x 16.9 (W) x
Dimensions (Inches) 1.75 (H) x 17.5 (W) x 30 (D)
30 (D) 30 (D) 30 (D) 28 (D)

Rack Units (Mountable) 1U 1U 1U 1.5U 3U

Unit Weight 34.5 lbs 34.3 lbs 35.7 lbs 44.2 lbs 102 lb

Dual 1100W RPS Dual 1500W RPS Dual 1500W RPS Dual 1500W RPS 2+2 1100W RPS
Power Supply
(DC option available)
80 Plus Platinum Efficiency, 100 - 240 VAC, 50 – 60 Hz

Power Consumption (Typical/Max) *

350W / 420W 585W / 921W 784W / 1,078W 1,121W / 1,300W 1,700W / 2,000W

Heat in BTU/Hour (Typical/Max) *

1,195 / 1,433 1,997 / 3,143 2,676 / 3,679 3,826 / 4,436 5,801 / 6,825

Cooling Fan Hot Swap Smart Fans

Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%

FCC Class A, UL, CE,

FCC Class A, UL, CE, FCC Class A, UL, CE, FCC Class A, UL, CE, FCC Class A, UL, CE,
TUV, CB, VCCI, CCC,
Regulatory Certifications CB, VCCI, CCC, BSMI, CB, VCCI, CCC, BSMI, GS, CB, VCCI, CCC, CB, VCCI, CQC, KCC,
MSIP, BSMI, RCM, EAC,
RCM | RoHS RCM | RoHS BSMI, RCM | RoHS BSMI, RCM | RoHS
NEBS | RoHS

Standard Warranty 90-Day Hardware and Software

Hardware specifications and performance numbers are subject to change without notice, and may vary depending on configuration and environmental conditions.
As for network interface, it’s highly recommended to use A10 Networks qualified optics/transceivers to ensure network reliability and stability.
^ Packets per second. Hardware-based selective dynamic filtering feature is available on Thunder CGN SPE family |
* With base model. Number varies by SSL model | + Thunder 14045 comes with a splitter cable for console to provide access to both modules.

12
A10 Thunder on Dell Technologies OEM
Solution Bundle Specifications

Single Service Platform (SSP) Specifications

The SSP range consists of A10’s cloud-ready software and purpose-built Dell Technologies hardware, with an inclusive license*1 that has the capabilities of delivering
Application Delivery Controller (ADC), SSL Insight (SSLi), and Carrier Grade Networking (CGN) solutions along with an expanded feature set of A10 capabilities.

Dell Technologies Dell Technologies R640 Dell Technologies R740

Thunder CGN Performance VEP4600 10GE NIC Model 100GE NIC Model 10GE NIC Model 100GE NIC Model
Throughput 12 Gbps 30 Gbps 60 Gbps 60 Gbps 100 Gbps

Full TCP Connections Per Second 500K 1.5 Million 1.5 Million 2 Million 2 Million

Concurrent Sessions 50 Million 100 Million 100 Million 100 Million 100 Million

Network Interfaces
1 GE (BASE-T) 6 2 2 2 2

1/10 GE Fiber (SFP+) 4 6 2 10 10

100 GE Fiber (QSFP28) 0 0 2 0 4

Hardware Specifications
Processor Intel Xeon 8-core 2 x Intel Xeon 20-core 2 x Intel Xeon 20-core

Memory 16 GB 192 GB 192 GB

Storage SSD 2 x SSD 2 x SSD

TLS/SSL Security Processor Built-in 2 x Security card (PCIe) 2 x Dual-chip security card (PCIe)

Power Supply Single 230W

Dual 750W Power Supply Dual 2000W Power Supply
Power Supply

Multi-tenant Virtual Platform (MVP) Specifications

A10 Thunder Multi-tenant Virtual Platform (MVP) on Dell Technologies is an advanced platform enabling multiple virtual instances or services on a single platform, with
inclusive license*1 that has the capabilities of delivering Application Delivery Controller (ADC), SSL Insight (SSLi), and Carrier Grade Networking (CGN) solutions along with
an expanded feature set of A10 capabilities.

Dell Technologies R640 Dell Technologies R740

Performance with CGNAT 10GE NIC Model 100GE NIC Model 10GE NIC Model 100GE NIC Model
Throughput 32 Gbps 60 Gbps 56 Gbps 120 Gbps

Full TCP Connections Per Second 750K 850K 1.5 Million 1.5 Million

Concurrent Sessions 100 Million 220 Million 140 Million 220 Million

Network Interfaces
1 GE (BASE-T) 2 2 2 2

1/10 GE Fiber (SFP+) 6 2 10 10

100 GE Fiber (QSFP28) 0 2 0 4

Hardware Specifications
Processor 2 x Intel Xeon 20-core 2 x Intel Xeon 20-core

Memory 192 GB 192 GB

Storage 2 x SSD 2 x SSD

TLS/SSL Security Processor 2 x Security card (PCIe) 2 x Dual-chip security card (PCIe)

Power Supply Dual 750W Power Supply Dual 2000W Power Supply

*1 A10 Thunder on Dell Technologies OEM bundle solutions are licensed under the Convergent Firewall (CFW) license. Check with your A10 Networks sales representative for the latest
information on full feature testing and validation.
All Thunder MVP performance specifications are aggregate number that use the following VM profiles:
- R640 10GE NIC model is tested with 4-VM profile (8 vCPUs, 16 GB memory, 30 GB storage, 16 SSL virtual functions (VFs) assigned on each vThunder)
- R640 100GE NIC model is tested with 4-VM profile (16 vCPUs, 32 GB memory, 30 GB storage, 8 SSL VFs assigned on each vThunder)
- R740 10GE and 100GE NIC model are tested with 8-VM profile (8 vCPUs, 16 GB memory, 30 GB storage, 16 SSL VFs assigned on each vThunder)

13
Thunder CGN Virtual Appliance
Specifications

vThunder CGN

Supported Hypervisors VMware ESXi 5.5 or higher (VMXNET3, SR-IOV, PCI Passthrough)
KVM QEMU 1.0 or higher (VirtIO, OvS with DPDK, SR-IOV, PCI Passthrough)
Microsoft Hyper-V on Windows Server 2008 R2 or higher

Hardware Requirements See Installation Guide

Standard Warranty 90-Day Software

Bandwidth Licenses 200

Lab 1 Gbps 4 Gbps 8 Gbps 10 Gbps 20 Gbps 40 Gbps 100 Gbps FlexPool
Mbps

*1 *1 |*2 *2
VMware ESXi

*1 |*2 *2
KVM *1

+
Microsoft Hyper-V

*1 SR-IOV
*2 PCI Passthrough
+ 8 Gbps license not recommended for Microsoft Hyper-V

Thunder CGN for Bare Metal

System Requirements Minimum Hardware Requirement:

Intel x86-based CPUs with minimum of 4 cores, 16 GB RAM, 80 GB of free disk space, 2 Ethernet interfaces (3 or more are
recommended), Intel Network Adapters and drivers including igb, ixgbe, and i40e. For more details, see Installation Guide.

Reference Platforms Cisco UCS, Dell PowerEdge, Ericsson Hyperscale Datacenter System (HDS), HP ProLiant and more

Bandwidth Licenses* 10 Gbps (4 cores), 20 Gbps (8 cores), 40 Gbps (14 cores) and 60 Gbps (24 cores)
FlexPool (Up to 60 Gbps per Thunder CGN)

Standard Warranty 90-Day Software

* Licenses are tied with maximum number of cores which can be allocated to ACOS.

14
Thunder CGN Virtual Appliance Specifications (Cont.)

Thunder CGN Container

Image Format Docker

Operating System Reference Operating System:

• Ubuntu 16.04.3 LTS (Xenial Xerus)
• RedHat Enterprise Linux version 7.6

System Requirements Minimum Requirement:

• 1 or more data interface
• 1 vCPU and 4GB memory

Licenses (per instance) BYOL Bandwidth License: Up to 100 Gbps

FlexPool License: Up to 100 Gbps

Performance Reference* Maximum throughout on a single Thunder container (24 vCPUs, shared polling mode off)
• 1510B: 180 Gbps
• 512B: 103 Gbps
• IMIX: 75 Gbps

Standard Warranty
90-Day Software

* Supermicro 7049GP-TRT with Intel Xeon Platinum 8160 CPU @ 2.10GHz and 2x Mellanox Connect X-5 NICs. Tested with UDP traffic for CGN service.

Detailed Feature List

Features may vary by appliance

IPv4 Preservation/IPv6 Integrated DDoS Protection Networking

Transition • IP Anomaly Filtering • Integrated Layer 2/Layer 3
• Full-native IPv6 management and • Selective Dynamic Filtering • Transparent Mode/Gateway Mode
feature support
• Connection Rate Limiting • Routing – Static Routes, IS-IS (v4/
• Application Level Gateways (ALG) v6), RIPv2/ng, OSPF v2/v3, BGP4+
for FTP, TFTP, RTSP, PPTP, SIP,
ESP, H.323, MGCP, ICMP, DNS High-Performance CGN • VLAN (802.1Q)

• Insert headers (X-Forwarded-For,

Logging • Link Aggregation (802.1AX), LACP
X-Client-IP, X-MSISDN) • Up to 32 logging servers • Access Control Lists (ACLs)
• Carrier-Grade NAT (CGN/CGNAT), • ASCII, HEX, Binary, RADIUS • Traditional IPv4 NAT/NAPT
Large-Scale NAT (LSN), NAT444, SYSLOG (RFC5424) or custom
• IPv6 NAPT
NAT44 logging format
• Jumbo Frame support*
• NAT64/DNS64, DS-Lite, Lw4o6, • Logging optimization (Port
6rd, NAT46, NPTv6, MAP-E batching, Fixed-NAT, HEX, Binary • Hardware-accelerated VXLAN*
logging) • NVGRE

15
Detailed Feature List (Cont.)

Management High-Performance, Visibility & Analytics with

• Dedicated on-box management Scalable Platform Harmony Controller
interface (GUI, CLI, SSH, Telnet) • Advanced Core Operating System • Subscriber
• SNMP, syslog, email alerts, (ACOS)
- Active sessions
NetFlow v9 and v10 (IPFIX), sFlow - Linear application scaling
- Session opening and closing
• Port mirroring - ACOS on data plane rates
• RESTful API (aXAPI) • Linux on control plane - TopN flow consuming
• LDAP, TACACS+, RADIUS support subscribers
• Flexible traffic acceleration (FTA)
• Granular Role-based Access for scalable flow distribution, - TopN bandwidth consuming
Control common attack mitigation subscribers

• Configurable control CPU counts - Hardware FTA utilizing FPGAs* • CGN Services
• Security policy engine (SPE) - Allocated Mappings
enabling hardware acceleration
Virtualization - Mapping opening and freeing
for policy enforcement*
rates
• Thunder Virtual Appliance for
• CGN scale-out for “add-as-you-
VMware vSphere ESXi, Microsoft - Mapping distribution per
grow” capability
Hyper-V, and KVM (VirtIO, Open protocol and per technology
vSwitch with DPDK and SR-IOV) - Mapping errors
• Bare metal deployment support Carrier-Grade Hardware*
- NAT IP pool utilization
• Container deployment support • Advanced hardware architecture
- TopN pool consumption stats
• Hypervisor acceleration and • Hot-swap Redundant Power
- Session distribution per NAT
management integration Supplies (AC and DC)
technology
• A10 Thunder on Dell Technologies • Smart Fans (hot swap)
• Destination
OEM Solution Bundle • Solid-state drive (SSD)
- Overall packet rate
• Tamper detection
- Analytics on fragmented/
Extensibility • Lights Out Management (LOM/IPMI) malformed traffic
• aVCS (Virtual Chassis System) • 40 GbE and 100 GbE ports - Flow open attempts from
• Multi-tenancy with Application Internet
Delivery Partitions (ADP) Partition-
Security and Capability
based management
Assurance Certifications*
• L3 virtualization
• Common Criteria EAL 2+
• FIPS 140-2 Level 2
• Joint Interoperability Test
Command (JITC)

* Features and certifications may vary by appliance.

Learn More ©2021 A10 Networks, Inc. All rights reserved. A10 Networks, the A10 Networks logo, ACOS, A10 Thunder, Thunder
TPS, A10 Lightning, A10 Harmony, and SSL Insight are trademarks or registered trademarks of A10 Networks, Inc. in
About A10 Networks the United States and other countries. All other trademarks are property of their respective owners. A10 Networks
assumes no responsibility for any inaccuracies in this document. A10 Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice. For the full list of trademarks, visit: www.a10networks.
Contact Us com/a10-trademarks.

a10networks.com/contact Part Number: A10-DS-15102-EN-23 MAR 2021

16