Network packet brokers provide visibility into network traffic by aggregating, filtering, and distributing packets to monitoring and security tools. The right choice depends on your traffic volume, tool requirements, and network architecture.
Quick Recommendation
| Need | Best fit | Why it fits |
|---|---|---|
| High-density data center | XS-PB-32X100-G1 | 32x 100G ports for large-scale traffic aggregation and distribution. |
| Enterprise campus | XS-PB-24X10G-4X100G-G1 | 24x 10G + 4x 100G for campus monitoring with mixed-speed tools. |
| Inline security | XS-PB-16X10G-BYPASS-G1 | 16x 10G with bypass for inline IPS deployments. |
How to Decide
Choose high-port-count brokers for data centers
Data centers with many SPAN ports need brokers that can aggregate dozens of feeds and distribute them to multiple monitoring tools without oversubscription.
Choose bypass-enabled brokers for inline security
If deploying inline IPS or firewalls, bypass functionality ensures traffic continues flowing even if the security tool fails. This prevents single points of failure.
Tip: xSONiC packet brokers support advanced features like packet slicing, timestamping, and deduplication to optimize tool performance and reduce storage requirements.
Related Guides
- How to Choose a Data Center Switch — for spine-leaf and ToR switching in data center fabrics.
- How to Choose an Optical Transceiver — for connecting packet brokers to network TAPs and switches.