OcNOS 6.3 is now generally available. This release strengthens the OcNOS ecosystem across Aggregation Router, Cell Site Router, Data Center, and Routed Optical Networking use cases, with new hardware platforms and a broad set of software features targeting service provider and data center operators.
New Platform: 400G Aggregation Router
OcNOS 6.3 introduces support for the UfiSpace S9600-56DX — a high-density aggregation router platform featuring 8×400G QSFP-DD and 48×100G QSFP28 interfaces. This platform enables service providers to aggregate high-throughput traffic at the metro edge while supporting transport services including IPoDWDM.
| Platform | Ports | Use Case |
|---|---|---|
| UfiSpace S9600-56DX | 8×400G + 48×100G | 400G aggregation router, IPoDWDM |
| Celestica DS1000 | 48×1G + 4×10G | Data center out-of-band management switch |
| Edgecore AS5835-54T | 48×1/10GBase-T + 6×100G | Data center top-of-rack switch |
Key Software Features in OcNOS 6.3
IPoDWDM: Converged IP and Optical
OcNOS 6.3 advances the IP over DWDM story by enabling 400G coherent optical interfaces to be managed directly via the OcNOS CLI — eliminating the need for a separate optical NMS for ZR/ZR+ transponders. Operators can configure optical parameters (frequency, modulation, TX power) alongside IP routing configuration in a single management plane.
BGP DDoS Prevention via FlowSpec
OcNOS 6.3 adds BGP FlowSpec support for automated DDoS mitigation at the network edge. When a DDoS attack is detected, FlowSpec rules are distributed via BGP to all participating routers simultaneously — dropping or rate-limiting attack traffic at the ingress point closest to the source, before it reaches the target.
! OcNOS 6.3 -- BGP FlowSpec DDoS mitigation rule
!
router bgp 65001
address-family ipv4 flowspec
neighbor 10.0.0.2 activate
exit-address-family
!
! Flowspec rule: drop traffic to victim IP from any source
! (typically pushed by a DDoS scrubbing controller via BGP)
flowspec
rule DDOS-BLOCK-1
match destination 203.0.113.50/32
match protocol tcp
action drop
!
!
! Verify FlowSpec rules are active:
show bgp ipv4 flowspec
show flowspec rule detailSegment Routing Improvements
OcNOS 6.3 introduces IS-IS micro-loop avoidance — a complementary mechanism to TI-LFA that prevents transient forwarding loops during network convergence. See the dedicated micro-loop avoidance guide for configuration details.
Power Savings
OcNOS 6.3 introduces platform-level power management features including dynamic port power-down for unused interfaces and thermal management improvements, reducing operational power consumption across deployed platforms.
- OcNOS 6.4 — What’s New
- ISIS Micro-loop Avoidance in OcNOS 6.3
- OcNOS Feature Matrix
- OcNOS-SP | OcNOS-DC
- Contact IP Infusion
IP Infusion Product Team