| Supported NIC drivers | i40e, ice, ixgbe, bnxt_en, vmxnet3 |
| Linux kernel required | 5.10 or newer (7.x recommended) |
| Architecture | x86_64 (Intel / AMD); ARM64 in development |
| Subscribers per box (architectural ceiling) | 131,072 — the per-node map limit |
| Subscribers per box (planning figure) | ~64,000 on 2×100G, derived from a ~3 Mbps busy hour — size against your own busy-hour number, not this one |
| Throughput per box | 100+ Gbps validated |
| Per-packet XDP processing | ~975 ns on the full-CGNAT monolithic datapath — measured A/B/A′ under live production traffic on one node (i40e), ~41M packets per arm. We do not publish a QoS-only figure because we have not measured one; that is a smaller program and would be faster. |
| Flow cache hit rate | ~90% on residential traffic |
| Memory per subscriber | ~8 KB userspace + BPF state |
| Configuration reload | Hot-reload via NOC2 (no XDP gap for QoS/FW/DDoS) |
| License | ECDSA-signed, hardware-bound, online + offline grace |
| Bonding / LACP | Full support (802.3ad) |
| VLAN encapsulation | 802.1Q, Q-in-Q (S-tag + C-tag) |
| IPv4 / IPv6 | Both, native dual-stack |
| Logging / Export | syslog, IPFIX, JSON over TCP/UDP |