![Advanced Network Packet Broker](https://neoxnetworks.com/wp-content/uploads/2026/02/PacketTiger_Network-Packet-Broker_wwwTopPic2.webp")
Unified Visibility Across Your Entire Network
Turn Network Traffic Into Actionable Insight
Advanced Filtering | Deduplication | NetFlow & IPFIX Export
PacketTiger 1XL Versatile Packet Broker
The PacketTiger Model 1XL is engineered for performance, flexibility, and intelligent traffic management. With a scalable design supporting up to 8 × 100Gbps and zero packet loss, it enables seamless deployment in high-speed, high-density network environments. Its modular architecture and advanced technology provide deep packet visibility and real-time optimization, capable of parsing headers, processing payloads, and performing inline packet modifications. Key capabilities include deep packet inspection, application-based metadata generation, and advanced processing features like packet slicing, deduplication, data masking, header stripping, and GTP correlation.
The PacketTiger 1XL supports flow-based observability with NetFlow, IPFIX, and Kafka export, providing invaluable telemetry for threat detection and network analytics. Designed for flexibility, it allows port allocation in 1:1, N:N, N:1, and 1:N modes, and aggregates traffic across 10M to 100G network ports. It supports up to 1,000,000 filter rules, user-defined filtering (UDF), and complex logical operations (AND/OR). Load balancing is possible across 3-tuple to 5-tuple criteria, while port labeling ensures precise traffic source identification.
Additional capabilities include L2/L3 GRE tunneling, metadata export via Kafka, hardware timestamping, VLAN editing, MAC replacement, and DPDK-based hardware acceleration. Management is streamlined via CLI, SSH, SNMP, Web UI, NetCONF, and REST API, with full centralized control through PacketDirector. The system supports high availability (HA) configurations and clustering with other brokers. With logging via Syslog and SNMP traps, AAA via Radius and TACACS+, and diagnostics through DDM, the PacketTiger 1XL ensures robust performance, operational transparency, and easy fault isolation—making it a powerful backbone for modern network operations. Shop PacketTiger Model 1XL
MODELS
| CHASSIS | ||||
|---|---|---|---|---|
| SKU | NMC Slots | Max. Throughput | Dimensions (W*H*D) / Weight | Certifications |
| NX-PBPT-1XL-20 PCIe Gen4 | 4 | 20 Gb/s | 43.8 cm x 4.4 cm x 61.0 cm ca. 18 kg | CE, RoHS, UL, FCC Class A, |
| NX-PBPT-1XL-40 PCIe Gen4 | 40 Gb/s | |||
| NX-PBPT-1XL-100 PCIe Gen4 | 100 Gb/s | |||
MODULES
| PACKETTIGER 1XL MODULES | ||
|---|---|---|
| SKU | Ports | Modules |
| NX-PBPT-1L-4PC | 4 x 10G RJ45 |  |
| NX-PBPT-1L-8PS+ | 8 x 1G/10G SFP+ |  |
| NX-PBPT-1L-2PQ+ | 2 x 40G QSFP+ |  |
| NX-PBPT-1L-2PQ28 | 2 x 100G QSFP28 |  |
HIGHLIGHTS
- Cost-effective, flexible mix-n-match aggregation of 1G, 10G, 40G, and 100G TAP/SPAN/Tool ports
- Modular platform with 4 network module capacity with max native port density of 8 x 100G QSFP28, 8 x 40G QSFP+, 32 x 10G SFP+, 32 x 10G RJ45 ports (all with downspeed operations) in 1RU form factor
- Versatile network (NMC) modules with 2 x 100G QSFP28, 2 x 40G QSFP+, 8 x 10G SFP+, 4 x 10G RJ45 ports per module
- Line-rate aggregation, brokering, and regeneration of network traffic with up to 800Gbps non-blocking throughput, accelerated through DPDK
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Timestamping (nanosecond) via PTP/NTP/PPS
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation (static and dynamic)
- MAC replace
- Data privacy and compliance with data masking
- Header stripping (MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, CTP-U, GENEVE)
- Load balancing based on 5-tuple criteria
- Support for L2GRE, L3GRE, and VXLAN tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS) and VLAN editing
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE) and GTP correlation
- Support for user-defined filtering rules (UDF) with MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP Flags, MPLS, GTP, L2TP, VXLAN, and Regular Expression matching – up to 1 million rules with AND & OR logical operation
- Versatile management options (CLI, SSH, SNMP v2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- IP Netflow and IPFIX flow-data export and large-scale application classification
- Export of metadata using Kafka
- Central manageability of multiple PacketTiger devices through NEOX PacketDirector
- RADIUS and TACACS+ authentication
- Digital Diagnostics Monitoring (DDM) – roadmap
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back airflow for a data center hot/cold aisle
PacketTiger 2XL and 2XXL Versatile Packet Broker
The PacketTiger Model 2XL/XXL is a next-generation Versatile Network Packet Broker designed to handle demanding traffic loads with precision, performance, and flexibility. With a scalable architecture supporting up to 4× 100Gbps QSFP28 modules and zero packet loss, it ensures high-speed data processing for mission-critical applications. This high-performance solution integrates advanced technologies for hardware-accelerated packet processing, header parsing, and inline traffic modification, enabling organizations to perform inline modifications, enrich metadata, and maintain full traffic visibility.
The PacketTiger 2XL/XXL excels in advanced processing, including filtering, packet slicing, deduplication, data masking, header stripping (MPLS, PPPoE, VN-Tag, VxLAN, GRE, L2TP, CTP-U, GENEVE), GTP tunneling, and GTP correlation. It delivers flow-based observability with NetFlow, IPFIX, and Kafka export, empowering security and performance monitoring systems with accurate and timely insights. The system supports flexible port allocation (1:1, N:N, N:1, 1:N) and aggregation for speeds of 40G and 100G. Its powerful filtering engine allows up to 1,000,000 user-defined rules, including AND/OR logic and RegEx support, with UDF capabilities for custom traffic segmentation.
Load balancing is available on 3-tuple, 4-tuple, and 5-tuple criteria, while port labeling ensures accurate correlation at analysis tools. It supports a wide range of tunneling protocols including GRE, VxLAN, GTP, and L2TP. Timestamping, MAC replacement, VLAN editing, and DPDK-based hardware acceleration enhance performance further.The PacketTiger 2XL supports HA configurations, clustering, and offers centralized management through NEOX PacketDirector, along with CLI, SNMP, Web UI, REST API, and more. With AAA (Radius/TACACS+/LDAP), Syslog/SNMP logging, and upcoming DDM diagnostics, the 2XL/XXL ensures robust performance, visibility, and ease of use in any network environment. Shop PacketTiger Model 2XL/XXL
MODELS
| SKU | Ports | Dimensions (WxHxD)/Weight | Rack Mounting | CERTIFICATIONS |
|---|---|---|---|---|
| NX-PBPT-2XL PCIe Gen4 | 2 x 40G/100G QSFP28* | 48.3 cm x 8.7 cm x 77.2 cm / ca. 25 kg | Yes | CE, RoHS, FCC Class A |
| NX-PBPT-2XXL PCIe Gen4 | 4 x 40G/100G QSFP28* | 48.3 cm x 8.7 cm x 77.2 cm / ca. 25 kg | Yes | CE, RoHS, FCC Class A |
HIGHLIGHTS
- Cost-effective, flexible mix-n-match aggregation of 40G, and 100G TAP/SPAN/Tool ports
- Modular platform with 2 network module capacity with max native port density of 2 or 4 x 100G QSFP28 (with downspeed of 2 or 4 x 40G) in 2RU form factor
- Line-rate aggregation, brokering, and regeneration of network traffic with up to 400Gbps non-blocking throughput, accelerated through DPDK
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Timestamping (nanosecond) via PTP/NTP/PPS
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation (static and dynamic)
- MAC replace
- Data privacy and compliance with data masking
- Header stripping (MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, CTP-U, GENEVE)
- Load balancing based on 5-tuple criteria
- Support for L2GRE, L3GRE, and VXLAN tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS) and VLAN editing
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE) and GTP correlation
- Support for user-defined filtering rules (UDF) with MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP Flags, MPLS, GTP, L2TP, VXLAN, and Regular Expression matching – up to 1 million rules with AND & OR logical operation
- Versatile management options (CLI, SSH, SNMP v2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- IP Netflow and IPFIX flow-data export and large-scale application classification
- Export of metadata using Kafka
- Central manageability of multiple PacketTiger devices through NEOX PacketDirector
- RADIUS and TACACS+ authentication
- Digital Diagnostics Monitoring (DDM) – roadmap
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back airflow for a data center hot/cold aisle
PacketTiger 1SCR Versatile Packet Broker
The PacketTiger 1SCR is a high-performance Versatile Network Packet Broker built for scalable, secure, and efficient packet processing in modest-speed networks. Supporting up to 4 × 10Gbps and 7 x 1Gbps with no packet loss, it delivers consistent and reliable traffic handling across complex environments. Designed to meet modern enterprise and service provider demands, its modular architecture offers unmatched flexibility,supporting deep packet inspection, metadata generation, andadvanced payload parsing to enhance visibility and control.
This compact yet powerful solution integrates a rich feature setfor filtering, deduplication, data masking, header stripping, GTPtunneling, and GTP correlation, empowering security, monitoring, andforensic systems with actionable traffic intelligence. With NetFlow,IPFIX, and Kafka export, PacketTiger 1SCR provides robust flow-basedobservability. It supports aggregation of multiple port speeds from 10Mto 10G and flexible port configurations including 1:1, N:1, N:N, and1:N. Advanced filtering capabilities include support for upto 1,000,000 user-defined rules using logical operators and regularexpressions, as well as user-defined filtering (UDF) for granularcontrol. Traffic load can be balanced using 5-tuple criteria, while port labeling aids traceability. Features like static and dynamic packet slicing, nanosecond-level timestamping, MAC replacement, VLANediting, and DPDK-based hardware acceleration ensure optimalperformance.
The 1SCR supports Layer 2 and 3 GRE tunneling, full traffic regeneration, and clustering with HA support via NEOXPacketDirector, which enables centralized management. It offers broad managementprotocol compatibility (CLI, SNMP, REST API, and more) and integratesseamlessly into diverse network architectures. With AAAintegration, syslog/SNMP logging, and upcoming digital diagnosticsmonitoring (DDM), PacketTiger 1SCR delivers efficient, scalable, andfuture-ready packet brokering. Shop PacketTiger Model 1SCR
MODELS
| SKU | Ports | Dimensions (WxHxD)/Weight | Rack Mounting | Certifications |
|---|---|---|---|---|
| NX-PBPT-1SCR | 5 x 10M/100M/1000M RJ45 2 x 1G SFP/RJ45* 4 x 1G/10G SFP+ | 35.0 cm x 4.4 cm x 26.0 cm / 5.0 kg | Yes | CE, RoHS, FCC Class A, EC Class A |
HIGHLIGHTS
- Cost-effective, flexible mix-n-match aggregation of 1G and 10G TAP/SPAN/Tool ports
- Compact platform with a native port density of 4 x 10G SFP+ (with downspeed to 1G), 2 x 1G SFP/RJ45 combo, 5 x 10/100/1000M RJ45 ports in 1RU form factor
- Near line-rate aggregation, brokering, and regeneration of network traffic with up to 45Gbps throughput, accelerated through DPDK
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Timestamping (nanosecond) via PTP/NTP/PPS
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation (static and dynamic)
- MAC replace
- Data privacy and compliance with data masking
- Header stripping (MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, CTP-U, GENEVE)
- Load balancing based on 5-tuple criteria
- Support for L2GRE, L3GRE, and VXLAN tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS) and VLAN editing
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE) and GTP correlation
- Support for user-defined filtering rules (UDF) with MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP Flags, MPLS, GTP, L2TP, VXLAN, and Regular Expression matching – up to 1 million rules with AND & OR logical operation
- Versatile management options (CLI, SSH, SNMP v2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- IP Netflow and IPFIX flow-data export and large-scale application classification
- Export of metadata using Kafka
- Central manageability of multiple PacketTiger devices through NEOX PacketDirector
- RADIUS and TACACS+ authentication
- Digital Diagnostics Monitoring (DDM) – roadmap
- N+1 redundant, hot-swappable fans
- Hot-swappable, load-sharing, and redundant AC/DC power supplies
- Front-to-back airflow
PacketTiger 1SC Versatile Packet Broker
The PacketTiger Model 1SC is a compact yet powerful Network Packet Broker that delivers scalable performance up to 4 x 10M/100M/1000/2500M RJ45 ports, 2 x 10G SFP+ ports, and 1 x 1G RJ45 or SFP ports (Combo port) with guaranteed zero packet loss, designed to meet the demands of security, performance monitoring, and visibility in both enterprise and service provider environments. Built with a high-performance, modular architecture, it provides intelligent traffic management, packet-level analytics, and optimization capabilities tailored for evolving network infrastructures.
This model excels at deep packet inspection (DPI) and application-level metadata extraction, offering unmatched clarity into traffic flows. Equipped with a robust set of advanced processing functions, it supports packet slicing, data masking, deduplication, regular expression matching, GTP tunneling and correlation, and header stripping. Its flow-based observability tools, including NetFlow, IPFIX, and Kafka export, allow seamless integration into existing analytics and security ecosystems.
The 1SC features flexible port allocation modes (1:1, N:N, N:1, 1:N) and supports aggregation across all standard port speeds from 10M to 10G. It can handle up to 1,000,000 filter rules with AND/OR logic, supporting granular traffic control using MAC, VLAN, IP, protocol fields, tunneling headers, and UDFs. It also enables traffic regeneration, load balancing across multiple tuple schemes, and GRE tunneling at Layers 2 and 3.
With centralized orchestration via NEOXPacketDirector, full HA support, and a range of management options (CLI, REST API, SNMP, Web UI, and more), the 1SC simplifies control across multi-broker clusters. It also includes nanosecond-level timestamping, DPDK-powered acceleration, AAA support, syslog/SNMP logging, and fault diagnostics via DDM. Designed for efficiency, agility, and precision, the PacketTiger 1SC is an ideal solution for real-time traffic visibility, secure data handling, and operational resilience.Shop PacketTiger Model 1SC
MODELS
| SKU | Ports | Dimensions (WxHxD)/Weight | Rack Mounting | Certifications |
|---|---|---|---|---|
| NX-PBPT-1SC | 4 x 10M/100M/1000/2500M RJ45 ports, 2 x 10G SFP+ ports, and 1 x 1G RJ45 or SFP ports (Combo port) | 25.4 cm x 4.4 cm x 20.2 cm / 1.2 kg | No | CE, RoHS, FCC Class A, EC Class A |
* Combo ports: Either 1 x 1G SFP or 1 x 1G RJ45
HIGHLIGHTS
- Cost-effective, flexible mix-n-match aggregation of 1G and 10G TAP/SPAN/Tool ports
- Compact platform with a native port density of 2 x 10G SFP+ (with downspeed to 1G), 1 x 1G SFP/RJ45 combo, 4 x 10/100/1000/2500M RJ45 ports in 1RU form factor
- Near line-rate aggregation, brokering, and regeneration of network traffic with up to 23Gbps throughput, accelerated through DPDK
- Inline or out-of-band deployment for security tool service-chaining and security delivery
- Timestamping (nanosecond) via PTP/NTP/PPS
- Flexible port mapping (1:1, N:N, N:1, 1:N)
- Port splitting (simplex mode)
- Port labeling
- Packet slicing/truncation (static and dynamic)
- MAC replace
- Data privacy and compliance with data masking
- Header stripping (MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, CTP-U, GENEVE)
- Load balancing based on 5-tuple criteria
- Support for L2GRE, L3GRE, and VXLAN tunneling protocol
- Advanced filtering (MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, MPLS) and VLAN editing
- Filtering within a tunnel (GTP, L2TP, MPLS, GRE) and GTP correlation
- Support for user-defined filtering rules (UDF) with MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP Flags, MPLS, GTP, L2TP, VXLAN, and Regular Expression matching – up to 1 million rules with AND & OR logical operation
- Versatile management options (CLI, SSH, SNMP v2/v3, Web UI, NETCONF, and REST API) with logging through Syslog and SNMP traps
- IP Netflow and IPFIX flow-data export and large-scale application classification
- Export of metadata using Kafka
- Central manageability of multiple PacketTiger devices through NEOX PacketDirector
- RADIUS, and TACACS+ authentication
- Digital Diagnostics Monitoring (DDM) – roadmap
- Fanless design with AC/DC power
Deployment
SERVICE & SUPPORT
Unparalleled Multi-Level Service & Support for Peace of Mind
All NEOXPacketTiger NBPs come with NEOX SILVER Support and can be upgraded to GOLD Support for advanced replacement in case of a hardware failure.
FEATURED CONTENT
Creating Solutions for Your Success
Infographic
Why You Need a Packet Broker
Product Brief
A Brief Guide to Products
Product Brochure
A Complete Guide to Products
