apkt productoverview 111017 compressed
DESCRIPTION
APKT ProductOverview 111017 CompressedTRANSCRIPT
Acme Packet Product OverviewThe leader in session delivery network solutions
Acme PacketAcme Packet Acme Packet product overview
APKT session delivery network solutions now encompass 8 product categories
Applications& services
IP transport network
Devices
phones, tablets,
PCs, TVs, sensors, etc.
1. Session border controller controls sessions at borders
2. Session manager manages subscriber access & interfaces application servers (SBC + IMS CSCFs + BGCF)
3. Multiservice security gateway secures FMC session delivery (data & voice) over untrusted networks
4. Policy exchange controller enables LTE data & voice session roaming
5. Session-aware load balancer scales session control at borders
6. Session routing proxy routes sessions to/from access & interconnect borders
7. Application session controller empowers Web 2.0 applications to control sessions
8. Session recorder provides session recording utility for SDN
Session delivery network (SDN)
2
Acme PacketAcme Packet
Internet
Acme Packet product overview
APKT session delivery network architecturefor mobile & fixed line service providers
SIP
FTTxWiMAX 3GGSM/CDMA
4GLTE/M-WiMAX
FemtoRAN WiFi
DSLSIP trunk
Leased lineCable
Coretransport network
Edgerouter
PSTN
Edgerouter
LTE
Business
Diameter
Other IP networks
CMTS BRASGGSN EPCAGW
Service &application
data centers
Web 2.0 (REST, WSDL, etc.)
Policy Exchange Controller
Session Border Controller (includes Session-awareLoad Balancer (SLB) and SIP Multimedia-Xpress (SMX)
Multiservice Security Gateway Session Routing Proxy
Interactive Session Recorder Application Session Controller
3
Acme PacketAcme Packet
• SBC – session border controller- SIP trunking - SIP & H.323 interoperability - Remote site & worker connectivity
via Internet- VoIP & UC security – internal &
external networks- Data center disaster recovery- Remote site survivability- Contact center virtualization
• ASC – application session controller- Communications-enabled business
processes via Web 2.0 application control of communications sessions
- Click-to- call/see/chat, outbound notifications, voice blast/drop
• ISR – interactive session recorder- Regulatory compliance for recording all
sessions – voice, video, IM, document sharing/collaboration
Acme Packet product overview
APKT session delivery network architecture for enterprises
Data centers
Contact center, audio/video conferencing,
IP Centrex, etc.PSTN
IP users/subscribers
Outside world Hosted services
Serviceproviders
Recordings
CEBP
IP PBX/UC
SIP trunks
SIP
Tele-worker
Nomadic/ mobile user
H.323
Regionalsite
SIP
Remotesite
HQ/ campus
Remotesite
Private network Internet
4
Acme PacketAcme Packet Acme Packet product overview
Net-Net hardware platforms – unparalleled scale and flexibility
Licensed session capacity range 150 – 8K 500 – 32K 4K – 120K 500 – 210K
System throughput 5Gbps 5Gbps5Gbps or 20Gbps
35Gbps
Network interfaces (# active) (4) 1Gbps (4) 1Gbps(8) 1Gbps or (2) 10Gbps
(28) 1Gbps
IPsec tunnel capacity 120K 200K 400K 2800K
Transcoding session capacity 0 – 7,200 0 – 7,200 0 – 24,000 Planned
Local route table capacity (# of routes)
1M 2M 1M or 2M 28M
5
Note 1: Capacity can vary by signaling protocol, call flow, codec, configuration, feature usage and SPU and NPU options
Net-Net 45001
Net-Net 92001
Net-Net 38201
Net-Net 140001
5
Acme PacketAcme Packet Acme Packet product overview
Acme Packet multi-processor hardware architecture
IPsec &TLS set-up hardware acceleration
Signaling messageprocessing
Packet classification, admission, modification, forwarding & DoS prevention
Packet flow policing, queuing,shaping & copying
RTP+RTCP measuring & monitoring
IPsec / SRTP encryption / decryption
Network processor memory updates &
counter polls
6
Acme PacketAcme Packet
Session border controllers (integrated or decomposed), session-aware load balancers, multiservice security gateways, session routing proxies SIP, H.323, MGCP/NCS, H.248, RTSP, MSRP, H.239; H.248 border gateway control Net-SAFE: SBC DoS/DDoS protection, access control, topology hiding, VPN separation, privacy; virus & SPIT protection; service and application infrastructure DoS prevention; fraud prevention; monitoring & reporting; IDP/IDR; encryption – IPsec, TLS, SRTP NAT traversal; IP address translation – private-public, OLIP/VPN bridging, IPv4-IPv6; number & URI manipulation; signaling message header manipulation; protocol interworking – signaling, transport & encryption protocols, SIP/SIP-I/SIP-T; response code translations; transcoding & transrating; SDP & DTMF manipulation admission control – signaling & bandwidth constraints per user, network or session agent; signaling overload control; transport control – QoS marking/VLAN mapping, peer-peer media release; policy control; QoS & ASR routing & reporting; network element (L3 router, registrar, session agent) failure discovery, re-routing &/or load balancing; QoE reporting accounting; routing – source or destination-based, LCR, ENUM, by codec; CNAM; service theft protection – bandwidth policing, QoS marking; session timers; service core normalization lawful intercept & emergency services – E911 & GETS; session replication for recording checkpointing of media, signaling, IPsec tunnel & config state ensures no loss of active sessions, or state required for NAT traversal, session handling (transfer/hold, etc.) or accounting EMS, RMC, CLI, HTTPS, XML, telnet, FTP, SFTP, RADIUS, SNMP, syslog, secure management
Acme Packet product overview
Acme Packet Net-Net OSis function and feature rich
Session border controllers (integrated or decomposed), session-aware load balancers, multiservice security gateways, session routing proxies SIP, H.323, MGCP/NCS, H.248, RTSP, MSRP, H.239; H.248 border gateway control Net-SAFE: SBC DoS/DDoS protection, access control, topology hiding, VPN separation, privacy; virus & SPIT protection; service and application infrastructure DoS prevention; fraud prevention; monitoring & reporting; IDP/IDR; encryption – IPsec, TLS, SRTP NAT traversal; IP address translation – private-public, OLIP/VPN bridging, IPv4-IPv6; number & URI manipulation; signaling message header manipulation; protocol interworking – signaling, transport & encryption protocols, SIP/SIP-I/SIP-T; response code translations; transcoding & transrating; SDP & DTMF manipulation admission control – signaling & bandwidth constraints per user, network or session agent; signaling overload control; transport control – QoS marking/VLAN mapping, peer-peer media release; policy control; QoS & ASR routing & reporting; network element (L3 router, registrar, session agent) failure discovery, re-routing &/or load balancing; QoE reporting accounting; routing – source or destination-based, LCR, ENUM, by codec;
Configurations
Multi-protocol
Management
High availabilityRegulatory
SLA assuranceService reach
Interoperability
Security
Recording
7
Acme PacketAcme Packet Acme Packet product overview
Net-Net OS architecture
8
Acme PacketAcme Packet
Net-Net Central• Configuration, fault, performance, and security
management for Acme Packet product line
• Scalable, extensible framework
• High availability & ease of use for enterprises & service providers
• Facilitates flow-through provisioning, OSS integration, and network-wide management
• Key feature/functionality:- Server clustering- Flexible configuration views- Open, standard interfaces- Integration of management application add-ons- Dashboard summary view for “at-a-glance” device status
and key performance indicators
Acme Packet product overview 9
Acme PacketAcme Packet
Acme Packet in 3GPP release 10• Access border functions
- P- & E-CSCF – SIP control- IMS AGW – media control - ATCF & ATGW for LTE-3G
fallback (R10)
- ePDG – IPsec tunnel termination for untrusted IP access
- Femtocell SeGW - IPsec tunnel termination
- SMX – I- & S-CSCF equivalent - SLB –SBC load balancing- DRA (PEC) – access network
policy scaling
• Interconnect border functions- IWF –signaling interworking- I-BCF – SIP control - TrGW – media control- DRA (PEC) – roaming
policy control
• Core routing functions- BGCF – external
interconnect selection
Acme PacketAcme Packet Acme Packet product overview
Proven widespread interoperability
11
Product categories and configurations
Acme PacketAcme Packet Acme Packet product overview
Session border controllers (SBC)
• Session – real-time, interactive communications—voice, video & multimedia—using SIP, H.323, MGCP/NCS, H.248, RTSP
• Border – IP-IP network borders1. Interconnect/peering:
between service providers
2. Subscriber access: enterprise, residential or mobile services
3. Data center: retail or wholesale services
4. Enterprise: intra- & extra-enterprise
• Control 1. Security 2. Service reach maximization3. SLA assurance 4. Revenue & cost optimization5. Regulatory compliance
Serviceprovider
Service provider
Fixed &mobile
InternetEnterprise
13
Acme PacketAcme Packet Acme Packet product overview
Net-Net SBC – flexible deployment & configuration options across markets
Use cases
Enterprise Government
Contact Center Service Provider
Deployment options
Enterprise data center Service provider access
Service provider interconnect Clustered (w/ Net-Net SLB)
SBC configurations
Net-Net SD Net-Net SF Net-Net BG
Solution-specific configurations
Net-Net SMX Net-Net Transcoding Gateway
Net-Net 4500
Net-Net 9200
Net-Net 3820
Net-Net 14000
3rd party server
14
Acme PacketAcme Packet Acme Packet product overview
Net-Net SIP Multimedia-Xpress – SBC-integrated service delivery core• IMS alternative for voice, RCS, FMC & multimedia services
- Initial roll-outs evolving to large scale deployments- Path to Smart Border IMS; SBC investment preserved
• Access and service core delivery functions- P-CSCF, E-CSCF, IMS-AGW & SIP firewall- SIP registrar & core session control functions- Optional interconnect SBC (I-BCF, IWF, TrGW)- Optional session routing (BGCF)
• IMS SIP, Diameter & ENUM interfaces- HSS, ENUM or local subscriber database- Application server (AS) ISC reference interface- PCRF, OCS & RACS (Rx, Rf)- NASS/CLF (e2)- PSTN break-in/break-out (Mj)
• CAPEX and OPEX savings- OPEX – simplified signaling model, easier to maintain
& troubleshoot- CAPEX – fewer systems to certify, deploy & maintain- Single SMX cluster supports millions of subscribers
Backbone
Data centers
PSTN
IP peer
Mobile Fixed lineDSL/cableFTTX
15
Acme PacketAcme Packet Acme Packet product overview
Net-Net Transcoding Gateway (TG) – dedicated transcoding/transrating• High-capacity Net-Net 9200 TG offloads
expensive functionality from distributed SBCs or other elements
• Net-Net 9200 transcoding units (TCUs)
- Modular, 1:N redundant- High-performance transcoding for
up to 8,000 simultaneous sessions
• Supported functions/features
- Wide range of wireline & wireless codecs- DTMF interworking- Static ACLs- IPv4 or IPv6 address translation- QoS marking and VLAN mapping- Media timers & policing- Router & SIP session agent monitoring
and re-routing- QoS measurement & reporting- Load balancing- Accounting
16
Acme PacketAcme Packet Acme Packet product overview
Acme Packet enterprise SBCs (E-SBC)securely enable VoIP, video and UC&C
• VoIP & UC security
• SIP trunking
• SIP & H.323 interoperability
• Data center disaster recovery
• Remote site survivability
• Contact center virtualization
• Remote site & worker connectivity via the Internet
• Regulatory compliance – recording & privacy
17
Acme PacketAcme Packet Acme Packet product overview
Session-aware load balancers
• Distribute SIP signaling traffic across Net-Net SBC cluster
• Linearly scale capacity to millions of subscribers
• Mitigate network impact of adding and removing capacity
• Reduce number of IP addresses for endpoints to discover
• Overcome limitations of DNS and L3/4 load balancer approaches
SBC cluster
IPv4 IPv6VPN
Any service, any application
Internet
3G LTE WiMAX DSL FTTx Cable
Leased lines
Voice
Enterprise
IMS RCS NGN
Mobile
Presence
Telepresence
FMC
Any access network
Residential
Video conferencing
Residential EnterpriseMobile
Content & video share
UCC
IM & messaging
18
Acme PacketAcme Packet Acme Packet product overview
Net-Net Session-aware Load Balancer (SLB)• Supports up to 2M subscribers per SBC cluster
- Single IP address- Simplifies subscriber
address management- Edge discovery problem reduced- Eliminates external dependencies
(e.g. DNS, STUN, etc)
• Preserves subscriber association with SBC in route table indefinitely
• SLB assigns subscriberto optimal SBC based upon origination address or least busy
• Transparently add SBCs without requiring changes to subscriber installation procedure
• Preserves benefits of Acme Packet SBCswhile providing the appearance of a centralized signaling architecture
SLB
SLB
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SLB
SLB
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
SBC
2M SubscriberCo-located Cluster
SignalingMediaSignalingMedia
SBC
SBC
SBC
SBC
SLB
GeographicallyDistributed Cluster
19
Acme PacketAcme Packet Acme Packet product overview
Multiservice security gateways
• Multiservice – voice, video & data for dual-mode handsets or femtocells using SIP or UMA
• Security – securely tunnel voice and data over untrusted IP networks
• Gateway – between fixed or mobile core network & broadband Internet
Enterprise Residential
Service provider
core
Internet
FemtocellWiFiWiFi Femtocell
20
Acme PacketAcme Packet Acme Packet product overview
Net-Net Security Gateway (SG)
• Industry-leading IPsec tunnel capacity- 200K capacity per 1 RU MSG- Up to 4.8M fully protected tunnels per 7 foot
telco rack (high availability configuration)
• High performance IPsec processing- Two-level hardware acceleration for IPsec tunnel
setup and IPsec traffic encryption/decryption
• Integrated hardware/software-based DoS/DDoS protection
- Proven SIP session & layer 3 / 4 protection capabilities in large tier 1 access deployments extended to IPsec
• Carrier-class high availability - Proven architecture leveraged for MSG configurations
• Virtualized MSG & SBC capabilities- Centralizes resources for reduced capex & opex
• Industry-leading, tightly integrated SBC functionality
Net-Net 4500
Net-Net 14000
21
Acme PacketAcme Packet Acme Packet product overview
Policy exchange controllers (PEC)
• Policy – authorization, location, charging and service profile information using Diameter signaling
• Exchange – policy information sent between network elements in a network or across network boundaries
• Control – security, interoperability, routing & aggregation of Diameter signaling messages
Standards-compliant
• RFC 3588 Diameter agent
• 3GPP Diameter Routing Agent (DRA)
• GSMA Diameter Edge Agent (DEA)
IPX
LTE
EPC
IMS
LTE
EPC
IMS
22
Acme PacketAcme Packet Acme Packet product overview
Net-Net Policy Director (PD)
• Performance density & price/performance
• Net-SAFE security framework
• Comprehensive interoperability
• Flexible & scalable routing policies
• SBC integration Charging
QoS
Authentication
Roaming
Mobility
Authorization
Charging
QoS
Authentication
Roaming
Mobility
Authorization
IPX /roaming hubs
IPX /roaming hubs
Other MNOsOther MNOs
Home NetworkHome Network
Net-Net 4500 Net-Net 1400023
Acme PacketAcme Packet Acme Packet product overview
Session routing proxies (SRP)
• Session – SIP-based real-time, interactive communications for voice, video & multimedia traffic
• Routing – function in which optimal forwarding paths for session traffic to SIP destinations are provisioned locally or from external databases via ENUM, SIP, XML or DNS queries
• Proxy – stateless and transaction stateful routing of SIP sessions on behalf of other SIP elements (SS, MGW, IMS core elements, etc.) within and between service provider mobile, fixed-line and transit networks
Serviceprovider
core
RatesheetsLCRE911LERGCNAMLNP
Fixed line IP
IPinter-
connectPSTN3G/4G
IP2G/3GTDM
24
Acme PacketAcme Packet Acme Packet product overview
Open Session Routing architecture with service provider interconnect
• Session-stateful Interconnect SBCs• Stateless/transaction-stateful SRPs• Best-of-breed telephony databases
• Call Accounting – CDR collection, mediation & call analysis
• Media gateways – PSTN break-in/out
IP
Wireless accessWireline accessresidential & business
PSTN interconnect
2G/3G
TDM3G/4G
IPFemtoRAN WiFi
Internet PSTN IP
MSC
IP peering &SIP trunking
Telephonydatabases
RegistryENUM
LERGCNAMLNP Rate sheets
CarrierENUM
LCR E911 DNS
IMScore
SIPENUMDNSRADIUS & Diameter
Legend
Billing Mediation
Call
Accounting
Analysis
CDRCollection
SSC4
IMScore
SSC5
MSC
IP core network
25
Acme PacketAcme Packet Acme Packet product overview
Acme Packet Open Session Routing (OSR) solution
• Net-Net Session Router (SR)- High-performance session routing proxy- Open, flexible & interoperable- Extensive routing control with stateless or
transaction-stateful operation- Choice of proven, carrier-class platforms- Carrier-class high availability- Integrates into IMS architecture (BGCF)- Choice of locally-provisioned or external routing
databases from variety of partners
• Net-Net Central Route Manager- Automated route management, distribution- Net-Net EMS application
• Flexible routing database options- On-board- Acme Packet OSR product and service partners
Net-Net 9200
Net-Net 3820
Net-Net 4500
Net-Net 14000
26
Acme PacketAcme Packet Acme Packet product overview
Application session controllers
• Integrates Web applications with IP communications
• Shields complexity of communications infrastructure- Bundle APIs, media services and protocol interworking
• Deliver high-availability communications services to business-critical applications
• Deploy on Intel x86 servers, including virtual machines
27
Acme PacketAcme Packet Acme Packet product overview
• Software platform integrating Web applicationsand business processes with IP communications
• Adds voice, video and chat toWeb 2.0 applications
• Shields developers from complexities of the underlying infrastructure
• Interoperates with communicationsinfrastructure and Web applicationsfrom hundreds of vendors
• Applications
- Click-to-call
- Voice drop/blast
- Automated outbound notifications
Net-Net Application Session Controller (ASC)
IP CommunicationsInfrastructure
Web 2.0Business Applications
Web ServicesAPIs
CommunicationsProtocols
28
Acme PacketAcme Packet
Session recorders
• Overcome limitations of traditional call recording
• Use Web services APIs to control recordings
• Offer flexible storage options – premise, cloud, remote archive
• Support multi-tenant recording for cloud-based services
• Integrate media server to reduce hardware complexity
• Affordable per session pricing (50% less than call recording)
• Business application and infrastructure vendor agnostic- Any business application, any IP communications environment
- Leverages Acme Packet session delivery network expertise
Acme Packet product overview 29
Acme PacketAcme Packet
Net-Net Interactive Session Recorder (ISR)
• Software solution that captures, secures, archives and manages IP session recordings
• Large scale recording for regulatory compliance
• Next-generation architecture twice as scalable as competing solutions
• Simple to use Web services APIs to start, stop, tag and store recordings
• Flexible storage options – premise, cloud, remote archive
Acme Packet product overview
IP communicationsinfrastructure
Web 2.0 applications
NAS / SAN
Record & index
Store
Connect
30
Acme PacketAcme Packet Acme Packet product overview
Acme Packet management provides comprehensive, flexible solutions• Extensive management data and controls accessible via
Acme Packet Net-Net Central and OSS applications
• Applications, tools, and interfaces used for service fulfillment, service assurance, and billing
31
Acme PacketAcme Packet Acme Packet product overview
Net-Net
• Complete product family – platforms, software, management• Supports current and next generation networks, services and applications
- Compliant with industry standards; proven interoperability- Mobile and fixed line networks- Variety of peering and access applications- Wide range of services and applications
• Delivers on all functional requirements
- Fixed line service providers- Mobile service providers- Over-the-top service providers- Enterprises- Contact centers- Governments
Net-Net CentralNet-Net 3820 Net-Net 9200Net-Net 4500 Net-Net 14000
32
The leader insession delivery network solutions