MikroTik CCR2004-1G-2XS-PCIe Smart NIC Router

The MikroTik CCR2004-1G-2XS-PCIe is a full-featured RouterOS-powered Smart NIC that installs into a standard PCIe slot, transforming any server into a hardware-accelerated routing node without consuming a separate 1U chassis. At its core sits the same Cloud Core Router silicon used in MikroTik's rack-mount CCR2004 family, pairing a quad-core ARM Cortex-A72 based network processor with dedicated packet-forwarding hardware to sustain wire-rate forwarding across its two SFP28 (25GbE) uplinks and one 1G management port. RouterOS 7 runs autonomously on the card's onboard processor, meaning routing, firewall, MPLS, BGP, OSPF, and VPN functions execute entirely on the card's CPU rather than consuming host x86 cycles.

The dual SFP28 ports accept both 25GbE and 10GbE SFP+ transceivers, offering flexible uplink integration into modern spine-leaf data center fabrics or high-density colocation environments. The onboard 1G copper port serves as an out-of-band management interface, accessible independently of host OS state for zero-touch provisioning, remote troubleshooting, and configuration via Winbox, WebFig, or SSH. The PCIe interface allows the host system to interact with the card as a standard network adapter while the embedded RouterOS instance governs all forwarding-plane policy autonomously.

Designed for hyperscaler edge deployments, virtualization hosts requiring deterministic inter-tenant routing, and bare-metal servers that need integrated WAN termination, the CCR2004-1G-2XS-PCIe eliminates the need for a discrete router appliance at each compute node. This approach reduces rack space, simplifies cabling topology, and centralizes policy enforcement at the NIC layer — making it particularly compelling for software-defined networking buildouts, NFV workloads, and high-density colocation racks where every rack unit carries a premium.

Ideal for

• Bare-metal server WAN termination — embed BGP peering and firewall policy directly at the NIC layer, eliminating the need for a separate router appliance per compute node in colocation facilities
• Hypervisor edge routing — provide per-host inter-VLAN and inter-tenant routing for VMware ESXi or KVM environments without routing traffic off-server to a top-of-rack device
• NFV chaining — host RouterOS-enforced service function chains (NAT, firewall, QoS, MPLS) as a dedicated forwarding plane alongside general-purpose VNFs running on the host CPU
• High-density spine-leaf integration — connect individual servers into 25GbE leaf switches with full Layer 3 routing offload, reducing east-west traffic latency and freeing host CPU for application workloads
• Out-of-band management gateway — leverage the dedicated 1G copper port as an independent management plane endpoint for lights-out provisioning and remote diagnostics independent of the host OS
• Campus or ISP CPE aggregation — deploy as an embedded routing engine within network-appliance servers handling subscriber routing, policy-based forwarding, and MPLS label switching at 25G line rates

Technical specifications

Available from Omnixon Global. Submit an RFQ and our team will confirm configuration and availability for your order.