OcNOS 6.3 Generally Available: 400G Aggregation, IPoDWDM, and BGP DDoS Prevention

OcNOS 6.3 is now generally available. This release strengthens the OcNOS ecosystem across Aggregation Router, Cell Site Router, Data Center, and Routed Optical Networking use cases, with new hardware platforms and a broad set of software features targeting service provider and data center operators.

New Platform: 400G Aggregation Router

OcNOS 6.3 introduces support for the UfiSpace S9600-56DX — a high-density aggregation router platform featuring 8×400G QSFP-DD and 48×100G QSFP28 interfaces. This platform enables service providers to aggregate high-throughput traffic at the metro edge while supporting transport services including IPoDWDM.

Key Software Features in OcNOS 6.3

IPoDWDM: Converged IP and Optical

OcNOS 6.3 advances the IP over DWDM story by enabling 400G coherent optical interfaces to be managed directly via the OcNOS CLI — eliminating the need for a separate optical NMS for ZR/ZR+ transponders. Operators can configure optical parameters (frequency, modulation, TX power) alongside IP routing configuration in a single management plane.

BGP DDoS Prevention via FlowSpec

OcNOS 6.3 adds BGP FlowSpec support for automated DDoS mitigation at the network edge. When a DDoS attack is detected, FlowSpec rules are distributed via BGP to all participating routers simultaneously — dropping or rate-limiting attack traffic at the ingress point closest to the source, before it reaches the target.

! OcNOS 6.3 -- BGP FlowSpec DDoS mitigation rule
!
router bgp 65001
  address-family ipv4 flowspec
    neighbor 10.0.0.2 activate
  exit-address-family
!
! Flowspec rule: drop traffic to victim IP from any source
! (typically pushed by a DDoS scrubbing controller via BGP)
flowspec
  rule DDOS-BLOCK-1
    match destination 203.0.113.50/32
    match protocol tcp
    action drop
  !
!
! Verify FlowSpec rules are active:
show bgp ipv4 flowspec
show flowspec rule detail

Segment Routing Improvements

OcNOS 6.3 introduces IS-IS micro-loop avoidance — a complementary mechanism to TI-LFA that prevents transient forwarding loops during network convergence. See the dedicated micro-loop avoidance guide for configuration details.

Power Savings

OcNOS 6.3 introduces platform-level power management features including dynamic port power-down for unused interfaces and thermal management improvements, reducing operational power consumption across deployed platforms.

• OcNOS 6.4 — What's New
• ISIS Micro-loop Avoidance in OcNOS 6.3
• Matriz de funciones OcNOS
• OcNOS-SP | OcNOS-DC
• Contactar con IP Infusion

IP Infusion Product Team