OcNOS CP 7.0 General Availability: SR-MPLS and EVPN-VXLAN Bundles for Modern Networks

IP Infusion announces the general availability of OcNOS CP 7.0, the latest version of its production-ready networking control plane source code platform. OcNOS CP — formerly known as ZebOS — is designed for networking vendors, system integrators, and enterprises building connected systems that require a proven, carrier-grade control plane foundation.

OcNOS CP 7.0 introduces two enhanced purpose-built bundles, stronger security capabilities, improved operational visibility, and expanded automation support. This release continues IP Infusion’s commitment to delivering a structured product roadmap — not a services-driven, ad-hoc development model.

Two New Control Plane Bundles

OcNOS-CP-SR-MPLS Bundle: Modernizing Service Provider Networks

The SR-MPLS bundle eliminates the complexity of LDP and RSVP-TE from existing MPLS networks while enabling deterministic path control through Segment Routing Traffic Engineering. Key features include:

• Segment Routing with IS-IS and OSPF — IGP-distributed labels replace LDP, reducing control-plane state across the entire network
• SR-TE and Flex-Algo — explicit path control and custom routing algorithms for network slicing without additional hardware
• TI-LFA Fast Reroute — topology-independent pre-computed backup paths for sub-50ms failover
• BGP-LU (Labeled Unicast) — seamless inter-domain label distribution for multi-domain SR deployments
• EVPN over SR-MPLS — L2VPN and L3VPN services riding the SR underlay for a unified service architecture

! OcNOS CP 7.0 -- SR-MPLS bundle: IS-IS SR with TI-LFA
!
configure terminal
!
interface lo
  ip address 10.0.0.2/32 secondary
  ip router isis DOMAIN
  prefix-sid index 2
  exit
!
router isis DOMAIN
  net 49.0001.0000.0000.0002.00
  is-type level-2-only
  metric-style wide
  mpls traffic-eng router-id 10.0.0.2
  mpls traffic-eng level-2
  segment-routing mpls
  fast-reroute ti-lfa level-2 proto ipv4
  exit
!
commit
exit
!
! Verify SR state and the TI-LFA backup paths
show isis segment-routing state
show ip isis route tilfa
show mpls forwarding-table

OcNOS-CP-EVPN-VXLAN Bundle: Scalable Data Center and Campus Fabrics

The EVPN-VXLAN bundle transforms data center and campus networking by replacing the 4K VLAN limitation with 16 million VXLAN Network Identifiers (VNIDs), moving MAC learning from the data plane to the BGP control plane, and enabling clean L3 Clos fabric design without STP dependency.

! OcNOS CP 7.0 -- EVPN-VXLAN bundle: L2 service over VXLAN
!
configure terminal
!
nvo vxlan enable
nvo vxlan vtep-ip-global 10.0.0.1
!
vlan database
  vlan 100 bridge 1 state enable
  exit
!
mac vrf TENANT-A
  rd 10.0.0.1:100
  route-target both 100:100
  exit
!
nvo vxlan id 10100 ingress-replication bridge-vlan 100
  vxlan host-reachability-protocol evpn-bgp TENANT-A
  exit
!
router bgp 65001
  address-family l2vpn evpn
    neighbor 10.0.0.3 activate
    exit-address-family
  exit
!
interface xe11
  switchport
  bridge-group 1
  switchport mode trunk
  switchport trunk allowed vlan add 100
  access-if-vxlan
  exit
!
commit
exit
!
! Verify EVPN state:
show bgp l2vpn evpn summary
show nvo vxlan vnid 10100
show nvo vxlan tunnel
show nvo vxlan mac-table

Enhanced Security: First-Hop Security and Traffic Protection

OcNOS CP 7.0 strengthens first-hop security with Dynamic ARP Inspection (DAI), IP Source Guard (IPSG), and DHCPv4/v6 snooping — protecting hosts within the fabric from ARP spoofing, IP address theft, and rogue DHCP servers. Traffic protection mechanisms include uRPF (Unicast Reverse Path Forwarding) and enhanced ACL capabilities for edge enforcement.

! OcNOS CP 7.0 -- First-hop security configuration
!
configure terminal
!
! Enable DHCP snooping on the bridge, then per VLAN
ip dhcp snooping bridge 1
ip dhcp snooping vlan 100-200 bridge 1
!
! Dynamic ARP inspection rides on the DHCP snooping binding table
ip dhcp snooping arp-inspection vlan 100-200 bridge 1
!
! Trust the uplink toward the DHCP server
interface xe1
  ip dhcp snooping trust
  exit
!
! IP Source Guard on the access ports
interface xe10
  ip verify source dhcp-snooping-vlan
  exit
!
commit
exit

Operational Visibility: TWAMP, Y.1731, and IP SLA

OcNOS CP 7.0 includes comprehensive performance measurement capabilities for service assurance. TWAMP (Two-Way Active Measurement Protocol) enables bidirectional delay, jitter, and packet loss measurement between any two network nodes. Y.1731 provides Ethernet-level OAM for service-level verification. IP SLA enables event-driven automation triggered by performance threshold violations.

! OcNOS CP 7.0 -- TWAMP for service SLA verification
!
configure terminal
!
! Reflector side
twamp server
  exit
!
! Sender side
twamp client
  exit
!
twamp session SLA-CHECK
  exit
!
commit
exit
!
! Verify:
show twamp-sessions all
show twamp-statistics interfaces

Who Is OcNOS CP For

OcNOS CP 7.0 is used by organizations that need source-code access to a production-grade control plane for deep integration, customization, and product differentiation:

• OEMs and ODMs building white-box networking platforms on merchant silicon
• Security vendors (firewalls, SD-WAN, SASE) that need a full routing stack embedded in their product
• Cloud operators requiring a customizable control plane for proprietary fabric architectures
• Enterprise networking teams building internal infrastructure on custom hardware

Customers include over 300 networking product companies worldwide, with deployments across Tier-1 service providers and major enterprise networks.

• OcNOS CP 7.0 — Platform Overview and Positioning
• OcNOS CP Product Page
• OcNOS Feature Matrix
• Contact IP Infusion

Alan Huang is Senior Product Manager, Data Center at IP Infusion. Connect on LinkedIn.