HPE Aruba Networking CX 10000x Switch Series

The HPE Aruba Networking CX 10000x Switch Series is a purpose-built, stateful distributed services switch that converges Layer 2/3 switching with hardware-accelerated stateful firewall and NAT capabilities directly in the data plane. Built on a programmable ASIC architecture, it eliminates the need for dedicated firewall appliances at the top-of-rack layer, delivering microsegmentation and zero-trust enforcement natively within the switching fabric. The series runs HPE Aruba's AOS-CX operating system, enabling intent-based automation, real-time telemetry via streaming gRPC, and a REST API-first management model suited for infrastructure-as-code environments.

Designed for modern enterprise data centers and high-performance compute clusters, the CX 10000x supports high-density 100GbE and 400GbE connectivity, making it well-suited for AI and machine learning workloads that demand low-latency, high-bandwidth east-west traffic patterns. The integrated AMD Pensando DPU (Data Processing Unit) offloads stateful services — including distributed firewall policy enforcement, connection tracking, and NAT — at line rate, freeing host CPU resources and reducing infrastructure complexity. This architecture enables operators to enforce consistent, granular security policy across thousands of workloads without introducing dedicated security appliances.

The CX 10000x integrates with HPE Aruba Central for cloud-based lifecycle management, network analytics, and AI-driven insights, as well as with VMware NSX-T and other leading virtualization platforms for seamless overlay-underlay integration. Its support for EVPN/VXLAN fabric construction, BGP, and advanced multicast makes it a foundational building block for scalable, automated data center and AI infrastructure deployments across enterprise, colocation, and service provider environments.

Ideal for

• Distributed stateful microsegmentation for zero-trust data center architectures, enforcing per-workload firewall policy at line rate without dedicated security appliances
• Top-of-rack switching for AI and machine learning GPU server clusters requiring high-bandwidth, low-latency east-west fabric interconnects
• EVPN/VXLAN spine-leaf fabric deployments in enterprise and hyperscale data centers requiring hardware-accelerated overlay and underlay integration
• Converged network and security infrastructure for virtualized environments, integrating with VMware NSX-T for consistent policy enforcement across physical and virtual workloads
• High-density server aggregation in colocation and private cloud facilities where operational simplicity, automation, and intent-based management are priorities
• Compliance-driven segmentation in regulated industries such as financial services and healthcare, where east-west traffic inspection and audit-ready telemetry are required at the rack level

Technical specifications

Available from Omnixon Global. Submit an RFQ and our team will confirm configuration and availability for your order.