Netgate 8500 TNSR Secure Router — front view
Netgate 8500 front Netgate 8500 rear — dual hot-swap PSUs
TNSR Secure Router · Flagship

Netgate 8500 TNSR Secure Router

Netgate's 100G-class flagship. A 22-core Xeon, 128 GB ECC RAM and 17 ports delivering 400+ Gbps of routing — built for service providers and data centres.

Configured to order
UK pricing on application · quote within one working day · VAT invoice included
Request a quote → 📄 Datasheet (PDF)
Authorised UK reseller
UK support team
Installation available

Official Netgate performance

Netgate's published figures for the 8500 running TNSR (iPerf3 bidirectional traffic, maximum configuration). Base port configuration delivers 88 Gbps, expandable to 400+ Gbps with 25G/100G cards.

400+ Gbps
Routing (L3)
350+ Gbps
Firewall
200+ Gbps
NAT
140+ Gbps
IPsec VPN

Technical specifications

Routing (L3, iPerf3)400+ Gbps (88 Gbps on base ports, expandable via 25G/100G cards)
Firewall throughput350+ Gbps
NAT throughput200+ Gbps
IPsec VPN throughput140+ Gbps
CPUIntel Xeon D-2899NT, 22-core @ 2.2 GHz (Ice Lake-D HCC)
RAM128 GB DDR4 ECC, 2933 MT/s (4× 32 GB UDIMM)
Storage512 GB NVMe M.2 SSD
Ports17 total: 4× 10G SFP+ · 4× 10G SFP28 · 8× 1G RJ45 (Intel i350) · 1× 1G RJ45 (i210)
Expansion2× PCIe 4.0 x16 slots for 25G / 100G cards
ManagementDedicated 1G BMC port (Aspeed AST2620) · Cisco-pinout console
Power2× hot-swappable 800 W PSUs included (AC) · 48V DC option
Form factor1U rack (430 × 375 × 43.8 mm) · active front-to-back cooling
SoftwareTNSR · TAC support included · Snort 3 IDS/IPS

What's included

22-core Xeon D-2899NT
Server-class Ice Lake-D processor with huge headroom for inline IDS/IPS
17 ports out of the box
4× 10G SFP+, 4× 10G SFP28 and 9× 1G RJ45 — WAN or LAN on any port
Scales to 100G+
Two PCIe 4.0 x16 slots take optional 2-port 25G and 100G cards
128 GB ECC RAM + NVMe
Massive memory for full routing tables and services
140+ Gbps IPsec
Wire-speed encrypted interconnects with TNSR's vector packet processing
TNSR + TAC included
No per-user licences or artificial limits; Snort 3 IDS/IPS built in

Who is it for?

Service providers, carriers and large data centres that need 100G-class secure routing with room to grow. If you're aggregating multiple 10G/25G links, running encrypted interconnects at scale, or need inline IDS/IPS without sacrificing throughput, this is the platform.

🛠️ Complex deployment? That's the point.

Every 8500 quote includes a configuration review — ports, optics, expansion cards, power and TAC level — so you order exactly what your deployment needs. Start the conversation →

Need less than 100G? The Netgate 8300 TNSR delivers 110 Gbps from stock.

Netgate 8500 — frequently asked questions

How much does the Netgate 8500 cost?+
The 8500 is configured to order — pricing depends on port expansion cards, AC or DC power, and the TAC support level you need. Request a quote and we'll come back within one working day with UK pricing, lead time and a recommended configuration.
What's the difference between the 8500 and the 8300?+
The 8300 running TNSR delivers around 110 Gbps of routing; the 8500 steps up to a 22-core Xeon, 128 GB of ECC RAM and 400+ Gbps with expansion cards — plus 25G/100G connectivity options. The 8300 suits large enterprise edges; the 8500 is built for service providers and data centres.
Does the 8500 run pfSense?+
No — the 8500 is a TNSR platform. TNSR is Netgate's high-performance routing software built on vector packet processing, managed via CLI and RESTCONF/NETCONF APIs rather than the pfSense web GUI.
Do you offer installation and support in the UK?+
Yes. We can pre-stage configuration, assist with data-centre installation and provide ongoing management alongside Netgate TAC support. Tell us about your deployment in the quote form and we'll scope it properly.