Arista 7388X5 Series

4RU modular platform at 25.6 Tbps with an optional per-port MACsec on 100G and 200G interfaces for high-density secure data center switching.

Ports: 64x 400G QSFP-DD (MACsec) | 64x 400G QSFP-DD (no MACsec) | 128x 200G QSFP-DD Capacity: 25.6 Tbps Pps: 10.66 Bpps Form Factor: 4RU modular Latency: 825 ns

Arista Products

Arista 7388X5 Series

Arista 7388X5 Series
64x 400G QSFP-DD (MACsec), 25.6 Tbps, 825 ns latency

DCS-7388X5-64D
Our Price: Request a Quote

Get a Quote

Arista 7388X5 Series
64x 400G QSFP-DD (no MACsec), 25.6 Tbps, 825 ns latency

DCS-7388X5-64DR
Our Price: Request a Quote

Get a Quote

Arista 7388X5 Series
128x 200G QSFP-DD, 25.6 Tbps, 825 ns latency

DCS-7388X5-128-BND
Our Price: Request a Quote

Get a Quote

Arista 7388X5 Series
80x 200G + 24x 400G QSFP-DD, 25.6 Tbps, 825 ns latency

DCS-7388X5-80C-24DR
Our Price: Request a Quote

Get a Quote

Arista 7388X5 Series
32x 200G + 48x 400G QSFP-DD, 25.6 Tbps, 825 ns latency

DCS-7388X5-32C-48DR
Our Price: Request a Quote

Get a Quote

See all 6 models below

The Arista 7388X5 Series is a modular 400G switch platform distinguished by hardware IEEE 802.1AE MACsec encryption on every QSFP-DD 400G port, operating at full line rate without throughput penalty. Available in 4-slot (7388X5-4) and 8-slot (7388X5-8) chassis populated with 36x QSFP-DD 400G line cards (7388X5-LC-36DD), the series provides up to 230.4 Tbps of encrypted switching capacity, matching the equivalent 7368X4 AI fabric chassis in port density and total bandwidth, with encryption added as a hardware capability rather than as an external inline appliance or software slowpath process.

Deployment scenarios for the 7388X5 include encrypted data-centre spine and core positions in regulated industries, data-centre interconnect (DCI) gateways where MACsec encrypts inter-site dark-fibre or DWDM links, and carrier-edge aggregation points requiring line-rate 400G encryption under PCI DSS, HIPAA, FedRAMP, or national data-sovereignty regulations. Beyond MACsec, the platform supports full L2/L3 switching, MPLS, Segment Routing, EVPN-VXLAN, and BGP with the same EOS software feature set as the rest of the 7300/7388 modular family.

MACsec at 400G Line Rate

IEEE 802.1AE MACsec in both AES-128-GCM and AES-256-GCM modes operates at full 400G line rate on every QSFP-DD port without any forwarding throughput reduction. The hardware encryption engine is integrated directly into each line card's forwarding ASIC rather than being an add-on co-processor, eliminating the latency penalty and throughput ceiling that characterise external encryption appliances.

Regulatory Compliance at Scale

Hardware MACsec on every port makes it practical to enforce encryption for every inter-rack, inter-DC, or inter-region link across a large infrastructure without designing around the per-port cost of dedicated encryption appliances. This positions the 7388X5 for regulated-industry data centres (financial services, healthcare, defence, and government) where data encryption at rest and in transit is a compliance requirement rather than a best-practice recommendation.

DCI Gateway with Integrated Encryption

The 7388X5 operates as a data-centre interconnect gateway over dark-fibre or DWDM links between sites, performing both the routing/EVPN tunnelling and the MACsec encryption of the inter-site path in a single device. Eliminating a separate encryption appliance from the DCI path reduces the number of failure domains, lowers port count, and removes a proprietary management domain from the operations workflow.

Full EOS Feature Parity

The 7388X5 runs the same EOS version as the 7368X4, 7358X4, and 7300X3, supporting L2 bridging, L3 routing, MPLS, SR-TE, EVPN-VXLAN, BGP, and all EOS management interfaces (eAPI, OpenConfig, NETCONF, gNMI). Organisations can standardise on a single software release, unified automation tooling, and common network telemetry across both encrypted and non-encrypted switching tiers without per-platform operational specialisation.