PacketController

Product Features

PacketController represents the new generation of bandwidth management in policy enforcement. It provides all the features you need to control the amount of bandwidth with ultra-low latency performance.

Industry-leading Performance

  • Hardware Accelerated ASIC Chip
  • 100G and 400G network support
  • 1GE, 10GE, 25GE, 40GE, 100GE and 400GE ports
  • Up to 520Gbps on one single hardware appliance
  • Up to 750M concurrent sessions on one single hardware appliance
  • N+M Clustering to support 4TB throughput
  • 128 parititions on one single hardware appliance to provide multitenancy
  • "Pay-as-you-grow" license on hardware, from 200Mbps to 520Gbps

    • Networking

  • Layer 2/Layer 3 support
  • BGP+
  • BGP Multi-path (ECMP)
  • IS-IS v4/v6, OSPF v2/v3
  • RIP v2/ng
  • VLAN (802.1Q, QinQ)
  • BFD
  • Static routes & path monitoring
  • Policy based routing (PBR)
  • Link aggregation (802.1AX), LACP
  • VXLAN
  • NVGRE
  • IPv4 NAT/NAPT
  • IPv6 NPAT
  • ACL
  • Port mirroring

    • Flexible Deployment Options

    The PacketController operates as a Layer 2 switch (transparent mode) or a Layer 3 gateway (route mode). In either of the deployment modes, the PacketController device has a dedicated Ethernet management interface, different from the Ethernet data interfaces. You can assign an IPv4 address and/or an IPv6 address to the management interface.

  • L3 Gateway Mode

    • PacketController deployed as L3 gateway between Edge Router and Core Switch, one typical installation is to use dynamic routing protocols to redistribute the NAT pool. OSPF is used between the aggregation router and the PacketController device; BGP is configured between the BGP peering router and the PacketController device. The BGP peering router injects a default route towards the PacketController device and the PacketController device injects the configured NAT pool subnets.

  • L2 Switch Mode

    • It is pretty standard L2 switch transparent deployment; You can set up bridge on single Ethernet ports or a trunk which is a set of multiple ports configured as a single logical link.

  • Integrated with External Bypass Switch

    • PacketController supports built-in failover (Gigabit Networks) and external failover with bypass switch (10G/40G/100G/400G networks).

    Clustering and Scaleout

    PacketController supports N+M Clustering and Scaleout deployment.

  • N+M Clustering

    • PacketController supports VRRP N+M high availability configuration, arbitrary N+M deployment supported where N is the number of active devices, and M is the number of standby devices. It simplifies the configuration of multi-system redundancy and allows up to eight PacketController AP devices to serve as mutual backups. Both active-standby and active-active mode supported.

  • Scaleout

    • Scaleout is a solution where multiple PacketController AP devices form a cluster to provide the same set of services as a single infrastructure. The Scaleout technology enables QoS/CGN services to be provided across multiple devices for load distribution and better scalability. The services provided by one or more NAT pools can be spanned across multiple devices that form a Scaleout cluster. Scaleout supports dynamically adding or removing devices to the cluster. When the number of devices in the cluster changes, the traffic gets rebalanced automatically.

    DPI (Deep Packet Inpsection) and QoS

  • Deep Packet Inspection (DPI) engine to classify over 3,000 applications across more than 40 categories.
  • Leveled Fairness Control to curb excessive bandwidth usage by heavy users, ensuring fair and effective use of communication bandwidth. The source and destination IP addresses, as well as the application type identified using DPI, can be specified to limit the uplink and downlink communication bandwidth and number of connections.
  • Web Filtering (GEO and Websites)
  • Rate limit on throughput, packet per second, connections

    • User-Level QoS with Radius Accounting Message Integration

    By using the Radius attributes of accounting message form external Radius server, AP series supports identity-aware traffic shaping and it automatically maps user identity to its currently assigned IP address (either IPv4 or IPv6 or both).

    Carrier-class Gi/SGi Firewall

    Protect subscribers and shield mobile core infrastructure from cyberattacks at the Gi/SGi and RAN to ensure uninterrupted operations. Consolidating security functions and CGNAT helps efficient operation and enables optimized performance.

    Subscriber Management System

    PacketController provides simple yet powerful subscriber management to enable service providers to manage subscribers effectively and profitably.

    Subscriber

  • Subscriber is defined by IP address IPv4 or IPv6 addresses
  • Idle timeout settings per subscriber
  • Support multiple IP addresses/subnet for one subscriber
  • Groups to support corporate subscriber with multiple accounts
  • Subscriber bandwidth management is automatically managed by plans
  • Flexible plans including service plan, quota plan, time plan

    • Quotas

  • Flexible monthly quota with 3 levels of service plan switching
  • Built-in daily quota and billing cycle date
  • Exclusion period quota to support free zone
  • Detailed quota status reports

    • Limit Policy

  • Inbound/Outbound/Total bandwidth definition
  • Burst support
  • Connection limit
  • Packet Per Second

    • Time Plan

  • Up to 5 time options to switch the bandwidth speed
  • Days support

    • Subscriber Insight
    Subscriber analysis provides proactive subscriber quality monitoring, and it can enable helpdesk people quickly and efficiently diagnose and solve subscriber network issues.

    Visibility

  • Per subscriber realtime and historic reports drilling down protocol usage
  • Active connections tracking per subscriber
  • Live bandwidth usage graph per subscriber

    • Subscriber Self-Help Portal

  • Subscriber self-help web portal where the subscribe can logon to view reports and graphs for real-time and long-term stats.

    • API/Billing/Radius/Misc

  • Comprehensive API for external system like Radius to get the full control of subscriber management system
  • 6 minute period subscriber usage statistics
  • Automatic subscriber QoS policy generation
  • Complete backup/restore subscriber configuration

    • Subscriber Management Reports

  • Subscriber List Report
  • Subscriber/Group Usage Report
  • Export to Excel,PDF,CVS

    • DDoS Protection

  • Flood attack protection: SYN cookies, TCP/UDP/ICMP flood protection, DNS/HTTP flood protection
  • Protocol attack protection: invalid packets, anomalous TCP flag combinations, packet size validation (ping of death)
  • Resource attack protection: slowloris, slow POST, sockstress,fragmentation

    • Management/Monitoring

  • Dedicated management port (CLI, Telnet, SSH, WUI)
  • Dedicated management routing table
  • Dedicated control CPU
  • SNMP v1/2/3
  • RBAC with AAA (LDAP, Radius, TACACS+ support)
  • 802.1ab LLDP
  • sFlow/IPFIX/Netflow v9
  • Syslog