7280R3A Deterministic Network Performance

The Arista 7280R3A Series uses a deep buffer virtual output queue (VOQ) architecture that eliminates head-of-line (HOL) blocking and

virtually eliminates packet drops even in the most congested network scenarios. An advanced traffic scheduler fairly allocates

bandwidth between all virtual output queues while accurately following queue disciplines including weighted fair queueing, fixed

priority, or hybrid schemes. As a result, the Arista 7280R3A can handle the most demanding data center requirements with ease,

including mixed traffic loads of real-time, multicast, and storage traffic while still delivering low latency.

Routing Table Scale and FlexRouteTM

Network scalability is directly impacted by the size of a system’s forwarding tables. In many systems a 'one size fits all' approach is

adopted using discrete fixed size tables for each of the common types of forwarding entry. The Arista 7280R3A Series leverage a

database for forwarding resources which can be allocated for MAC, Routing, Host and ARP tables with a choice of forwarding profiles

that optimizes these tables.

Arista’s innovative FlexRoute Engine, with its patented algorithmic approach to building layer 3 forwarding tables on Arista R-Series,

provides support for the full internet routing table in hardware. Scaling to more than 5 million routes in 7280R3AK, the R series Universal

Spine and Leaf platforms have sufficient headroom for future growth in both IPv4 and IPv6. The flexibility coupled with the range of

system forwarding profiles ensures optimal resource allocation for a wide range of network topologies and use cases including Internet

Peering, virtualization, Carrier Edge and Security as well as datacenter spine and leaf.

10-400G Wire-speed Encryption with TunnelSec

7280R3AM and 7280R3AK series platforms support Arista’s TunnelSec technology, enabling line-rate, industry standard, authenticated

strong encryption using the AES-256-GCM block cipher. TunnelSec devices offer IEEE 802.1AE MAC Security (MACsec), IPsec (RFC 4303)

and VXLANsec for flexible encryption of layer 2, layer 3 or overlay networks. While MACsec operates at the link layer, offering point to

point encryption, IPsec and VXLANsec enable the construction of encrypted IP tunnels that traverse multiple unencrypted hops

between router or VTEP endpoints enabling line-rate strong encryption across third party infrastructure for WAN or DCI deployments.

The flexibility to offer multiple types of encryption enables a broad range of deployments and removes the need for additional

encryption devices while providing orders of magnitude improvements in latency and throughput when compared to traditional

appliance based implementations. The 7280R3AM and 7280R3AK series support TunnelSec on all interface speeds, from 10G to 400G

without a performance penalty. Encryption services are an EOS licensed feature and requires a license file to enable the encryption

feature. License information is included in the ordering information section of this document.

Dense 400G DWDM

Arista's R3A platforms are optimized to support high power 400ZR OSFP and QSFP-DD optical modules. 400ZR modules are software

tunable, DWDM, coherent optical modules, with a reach of up to 120km.  When combined with Arista’s ZR Line System, up to 8x 400ZR

modules can be multiplexed to transport 3.2 Tb/s over a single fiber pair.  Arista's ZR Line System consists of the AMP-ZR, an optical

amplifier packaged into a single transceiver module, and the CAB-LC8-CS, a simple fiber splitter/combiner that multiplexes up to 8x

400ZR modules into a fiber pair.  Selected 7280R3A platforms include dedicated ports that can house the amplifier without using data

plane ports. The combination of 7280R3A, 400G-ZR and the ZR-LS represent a revolutionary plug-and-play approach, completely

eliminating external transponders and line systems while reducing cost and complexity - allowing DCI links to be turned up as quickly

and easily as inside-the-datacenter links.

Algorithmic ACLs

Algorithmic ACLs combine both software and hardware to enable more flexible and scalable solutions for access control, policy based

forwarding and network telemetry. Combining general purpose memory with advanced software algorithms delivers higher scale,

performance and efficiency with lower power and is more cost effective than traditional solutions. Algorithmic ACLs leverage efficient

packet matching algorithms that in turn enables flow matching for access control, policy and visibility. The net benefits are a high

performance policy engine with both increased functionality and scale in a cost and power efficient solution. Algorithmic ACLs are

available on the 7280R3AK Series of products.

•

Enables IPv4 and IPv6 access control at the same scale

•

L4 rule ranges are programmed efficiently without expansion or reduced capacity

•

Multiple actions can be performed on a single packet or flow

•

User defined filters allow flexible packet classification based on offsets for custom actions

•

Supports rich policy with consistent semantics that would exhaust classical resources

7280R3A Series | Platform Overview