HPE Aruba CX Aruba CX 10000
The Aruba CX 10000 with AMD Pensando is a 1U distributed services datacenter switch integrating an AMD Pensando Elba programmable DPU into enterprise top-of-rack networking. Delivering 48 ports of 25GbE and 6 ports of 100GbE, the CX 10000 executes stateful east-west firewalling, micro-segmentation, NAT, and line-rate encryption directly at the server access edge without trombone routing through centralized firewall appliances.
Specifications
| Brand | HPE |
|---|---|
| Family | Aruba CX |
| Form factor | 1U distributed services switch |
| Released | Oct 2021 |
| Form factor | 1U fixed distributed services switch |
| Ports | 48x 10G/25G SFP28 and 6x 40G/100G QSFP28 |
| Dpu processor | Integrated AMD Pensando Elba Data Processing Unit |
| Stateful services | Stateful L4-L7 firewalling, telemetry, micro-segmentation, and encryption |
| Firewall throughput | Up to 800 Gbps stateful firewall inspection bandwidth |
| Network switching | 3.2 Tbps standard Layer 2/Layer 3 switching capacity |
| Policy orchestration | Pensando Policy and Services Manager (PSM) and Aruba Fabric Composer |
Generations
- Previous generation: HPE Aruba CX 8325-48Y8C
Works together
How the HPE Aruba CX Aruba CX 10000 connects to servers, storage and the network: 3 ways, with the parts and products on each path.
iSCSI and NVMe/TCP over Ethernet
Keep the speed the same at all three points: a 25GbE server, a 25GbE switch port and a 25GbE array port. Mixed speeds work but the slowest link sets the pace.
Servers
HPE ProLiant DL325 Gen10 Plus v2 1U rack
HPE ProLiant DL345 Gen10 Plus 2U rack
HPE ProLiant DL360 Gen10 Plus 1U rack
HPE ProLiant DL365 Gen10 Plus 1U rack
HPE ProLiant DL380 Gen10 Plus 2U rack
HPE ProLiant DL385 Gen10 Plus v2 2U rack
Adapters for the server
P08443-B21 HPE Ethernet 10/25Gb 2-port SFP28 BCM57414 Adapter
P10111-B21 HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter
P10112-B21 HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACHT Adapter
P10115-B21 HPE Ethernet 10/25Gb 2-port SFP28 BCM57414 OCP3 Adapter
Storage
HPE Alletra 6000 4U rack
HPE Alletra 9000 4U rack mission-critical array
HPE MSA 2062 2U rack hybrid SAN
HPE Alletra Storage MP 2U rack
HPE Primera 600 4U rack mission-critical array
Dell PowerStore 500T 2U rack
Optics
QSFP-100G-SR4 Arista 100GBASE-SR4 QSFP28 Optical Transceiver
SFP-25G-SR Arista 25GBASE-SR SFP28 Optical Transceiver
QSFP-100G-SR4-S Cisco 100GBASE-SR4 QSFP28 Optical Transceiver
File storage (NFS and SMB)
Front-end ports face the clients; back-end ports (on scale-out systems) connect the nodes to each other and need their own switch pair.
Servers
HPE ProLiant DL325 Gen10 Plus v2 1U rack
HPE ProLiant DL345 Gen10 Plus 2U rack
HPE ProLiant DL360 Gen10 Plus 1U rack
HPE ProLiant DL365 Gen10 Plus 1U rack
HPE ProLiant DL380 Gen10 Plus 2U rack
HPE ProLiant DL385 Gen10 Plus v2 2U rack
Adapters for the server
P08443-B21 HPE Ethernet 10/25Gb 2-port SFP28 BCM57414 Adapter
P10111-B21 HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter
P10112-B21 HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACHT Adapter
P10115-B21 HPE Ethernet 10/25Gb 2-port SFP28 BCM57414 OCP3 Adapter
Storage
HPE Alletra Storage MP 2U rack
Dell PowerScale A300 4U
Dell PowerScale F900 2U rack
Dell PowerScale H700 4U
Dell PowerStore 500T 2U rack
Dell PowerScale F200 1U rack
Optics
QSFP-100G-SR4 Arista 100GBASE-SR4 QSFP28 Optical Transceiver
SFP-25G-SR Arista 25GBASE-SR SFP28 Optical Transceiver
QSFP-100G-SR4-S Cisco 100GBASE-SR4 QSFP28 Optical Transceiver
Hyperconverged cluster
Plan at least two 25GbE ports per node to two switches; all-NVMe clusters often move to 100GbE.
HCI nodes
HPE SimpliVity 325 Gen10 Plus v2 1U rack
HPE SimpliVity 380 Gen10 G 2U rack
HPE SimpliVity 325 Gen10 1U rack
HPE SimpliVity 380 Gen10 2U rack
Adapters for the server
P08443-B21 HPE Ethernet 10/25Gb 2-port SFP28 BCM57414 Adapter
P10111-B21 HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter
P10112-B21 HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACHT Adapter
P10115-B21 HPE Ethernet 10/25Gb 2-port SFP28 BCM57414 OCP3 Adapter
Optics
QSFP-100G-SR4 Arista 100GBASE-SR4 QSFP28 Optical Transceiver
SFP-25G-SR Arista 25GBASE-SR SFP28 Optical Transceiver
QSFP-100G-SR4-S Cisco 100GBASE-SR4 QSFP28 Optical Transceiver
Plan and size it
- Draw this setup in the topology planner mrplanb.com
- Add up rack power and space rack-density.com
- iSCSI explained mrplanb.com
- Virtualization storage Ledger: scored storage platforms mrplanb.com
- Network monitoring tools compared mrplanb.com
- HPE SPOCK (HPE storage compatibility) hpe.com
Check compatibility with HPE
Before you buy, confirm the exact configuration against the vendor's own lists: firmware levels, operating systems, adapters and optics that HPE has tested with the HPE Aruba CX Aruba CX 10000.
- Compatibility HPE SPOCK (storage, SAN and host compatibility)
- Part lookup HPE PartSurfer (spare and option part numbers)
- Support HPE Support Center
Equivalent models from other brands
FAQ
How does the CX 10000 eliminate firewall hair-pinning?
By inspecting and enforcing firewall policies directly on the switch port where the server is cabled, lateral east-west traffic never has to traverse the core to reach a dedicated security appliance.
What protocols does the DPU offload?
Stateful packet filtering, flow logging, IPSec encryption, and real-time telemetry streaming are offloaded to the Pensando Elba DPU silicon.
Buying or selling Aruba CX 10000?
New, refurbished or used. Tell us the quantity and condition and we connect you with a vetted reseller in your region, usually within one working day.
Sources
- HPE Aruba CX 10000 QuickSpecs (Aruba CX 10000 Distributed Services Switch QuickSpecs), checked 2026-10-27
- HPE Aruba CX 10000 Overview and Technical Specifications, checked 2026-10-27