Aviz OPBNOS 2.8 details Celestica DS2000, port breakout, and GTP filtering

Aviz’s OPBNOS R2.8 update adds support for the Celestica DS2000 aggregation-layer platform, expands port breakout capabilities, and introduces GTPU extension header filtering for telecom observability use cases. For enterprise and security leaders, the release focuses on traffic selection, redirection, and operational continuity in monitoring and analytics pipelines.

Research Overview

The vendor describes OPBNOS as an open packet broker software-defined network observability solution used to aggregate, filter, and load-balance traffic from hardware or virtual TAPs. The R2.8 release is presented as improving platform compatibility, traffic processing, and upgrade workflows for network monitoring, analytics, and compliance use cases.

The brief positions the update around three areas: integration with a new hardware platform, enhanced handling of port breakout scenarios, and added protocol filtering for mobile network traffic inspection.

Key Findings

OPBNOS R2.8 introduces support for Celestica DS2000, described as a Broadcom chipset platform optimized for an aggregation layer in OPB deployments. The update also adds port breakout features that split high-speed ports into multiple lower-speed links for traffic distribution into monitoring or inline tools.

For telecom visibility, the release adds filtering support for GTPU extension headers, including a PDU Session Container (0x85), and supports inner-header-based filtering based on IPv4, IPv6, UDP, and TCP parameters. The brief also references an additional capability for GTP filtering using VXLAN headers.

Technical Breakdown

For platform integration, OPBNOS R2.8 is described as supporting traffic aggregation from multiple TAPs or SPAN ports, with Layer 2/3/4 filtering for IPv4 and IPv6 traffic. The brief states that distribution supports port redirection using Static LAG and hybrid port lookups to enable load balancing across multiple monitoring tools.

The release also highlights integration with OPB Fabric Manager using FlowVision for GUI-based configuration, along with management of port and flow statistics for real-time monitoring. The operational focus is on ensuring that only relevant traffic is forwarded for analysis through protocol-based filtering and controlled redirection.

Product Update

The brief describes port breakout in OPBNOS as a way to split a 100G port into configurations such as 4x10/25G or 2x50G to match network requirements. It also lists hardware availability for NVIDIA (Spectrum-2 and above) and Broadcom platforms including EC7816, EC7326, and EC7726.

For use cases, the vendor describes ingress handling that aggregates traffic from multiple lower-speed tapped links (10G/25G) into a single high-speed port for processing and monitoring, and egress handling that distributes high-speed traffic (100G) across multiple inline tools. The release text frames these behaviors as supporting traffic aggregation and load balancing while managing switch and tool connectivity.

Operational Impact

For telecom traffic classification, the brief states that OPBNOS R2.8 supports GTPU extension header filtering, with PDU Session Container (0x85) support aimed at Quality of Service control and accommodations for proprietary extensions. It describes inner-header-based filtering using IPv4, IPv6, UDP, and TCP parameters and lists load balancing across multiple telco users.

The brief also describes enhanced traffic monitoring and analytics for telecom data flows, plus advanced flow control that filters based on inner source and destination IPs, Layer 4 ports, and protocols. It further indicates that GTP filtering is supported with VXLAN headers.

The OPBNOS R2.8 brief centers on expanding hardware platform support, improving traffic distribution via port breakout, and adding GTPU extension header filtering for telecom flows, while also calling out FlowVision-based configuration and software upgrades without downtime. Blog Signals brief is a fact-based summary of the vendor blog.