Unified QoS Shaping/Security/Subscriber Management Solution
PacketController provides unified subscriber management and service provisioning solutions for ISP. Our expertise allows Internet Service Providers (ISPs) to focus on their core business: developing and delivering innovative, competitive and profitable services to its customers.
-
Problems
ISPs make money by carrying traffic and it is natural that heavy users are goint to pay more. However, in some situations like shared circuit whereby a number of consumers access an internet connection in one shared bandwidth pool and the cost of that connection is shared between them, fairness in real-time is critical.
For instance, 10 residential subscribers share 10Mbps bandwidth pool, chances are there will always be some heavy users among them by using P2P or whatever, the result is that those heavy users are going to eat up the bandwidth pool and it brings other subscriber speed down.
-
Limit the bandwidth of heavy users ONLY
PacketController's bandwidth control solution helps reduce excessive bandwidth consumption by heavy users, promoting fair and efficient utilization of communication bandwidth. Administrators can define specific source and destination IP addresses, along with the application type detected via DPI, to restrict bandwidth, packets per second, connections per second, and concurrent connections.
-
Powerful DPI
PacketController's next-generation Deep Packet Inspection (DPI) and classification engine that recognizes over 3000 protocols and applications for complete, real-time visibility into network traffic (including encrypted and evasive traffic), and gain a detailed understanding of network transactions and user behavior.
-
Hierarchical Rate Limiting
Hierarchical rate limiting introduces greater flexibility and structure to bandwidth management by operating at multiple levels. It enables applying one set of limits to an individual subscriber's traffic, while a second set of limits governs the combined traffic from all subscribers.
For example,
1.Each subscriber limited to 10Mbps
2.For each subscriber, Web traffic: 5Mbps; Social network traffic; 2Mbps; All other traffic: 3Mbps
3.For each subscriber, TikTok and Fackbook blocked.
-
Problems
-
Solutions
-
Differentiate your brand and increase revenue
No matter you are ISP with 100s or 10,000s subscribers, ISPs are constantly facing fierce competition. The service provisioning tool is critical for ISPs to win customers through flexible and highly efficient bandwidth management at reasonable cost of link capacity.
-
-
True QoS Shaping Tool
PacketController alleviates drops and retransmission from the network by its unique congestion managment. Unlike the competitors, it effectively pace traffic without the need to queue traffic. The result is to support more subscribers with less link capacity. More
-
Control bandwidth for each subscriber by CIDR/Application
Subscriber bandwidth management can be tedious since you need to set up QoS rules per subscriber based on its CIDR,MAC,VLAN and Application etc.
-
-
Simple yet powerful subscriber management
PacketController enables ISP to manage both dedicated and shared subscriber service provisioning effectively and profitably with unified interface. More
-
Improve customer satisfaction through tiered and quota package
Data caps are provider-imposed limits on the amount of data subscribers are able to transfer daily/monthly.However ISP stills need to manage the throttling of quota-based subscriber.
-
-
Tiered Quota Management
PacketController imposes 3 levels of speed throttling based on the quota usage with advanced options like built-in daily quota and billing cycle date, exclusion period quota to support free zone. More
-
Application-aware package to deliver the Quality of Experience
ISP struggles to stay within budget while achieving acceptable service performance for certain applications like VOIP or online streaming per subscriber. For enterprise subscribers, it is critical for ISP to maintain optimal accessibility and utilization of business-critical applications and information.
-
-
Application Plans based on powerful DPI
PacketController built-in DPI makes it possible to micro manage the applications per subscriber. You could set up different SLA for different applications per subscriber, one instance, one 10Mbps subscriber can utilize 2Mbps on VOIP with highest priority, 3Mbps for netflix, 5Mbps for other applications and p2p blocked. More
-
URL Filtering per subscriber to block malware and porn sites
ISPs requirs highly effective URL filtering to protect subscribers against web-borne threats, for instance, some subscribers like school requires tailored URL filtering against porn websites. Or enterpreise subscribers need to block some online gaming sites.
-
-
High performance URL filtering per subscriber
With PacketController URL filtering it is simple to enforce tailored URL filtering policies per subscriber in a cost effective way. And it is possible to manage thousands of websites per subscriber without performance overhead. More
-
Day and Night Internet SLA
To gain a competitive edge, some ISPs offer no data caps on their service, this can be significant for ISP to manage the bandwidth. Day and Night internet SLA can help on this scenario without too much investment on link capacity.
-
-
5 Levels of Time Plans
PacketController supports up to 5 levels of The flexible subscriber speed switching based on day/time. For instance, the day & night internet plan will give the subscribers 1Mbps at daytime and 2Mbps at night. More
-
User-Level QoS with Radius Accounting Message Integration
By using the Radius attributes of accounting message form external Radius server, PacketController supports identity-aware traffic shaping and it automatically maps user identity to its currently assigned IP address (either IPv4 or IPv6 or both).

1. Users interacts with radius server(s), in most deployment, on authentication
2. Radius servers authenticates users and send Radius accounting message to PacketController, the account message type can be the following types:
Accounting Start (1)
Accounting Stop (2)
Interim-Update (3)
Accounting-On (7)
3. PacketController parses the value of derived RADIUS attributes per subscriber and stores them in the RADIUS session. The regular expression is used to extract the first matched sub-string from the value of the derived attribute.
4. QoS policies can be configured to limit the throughput for an associated subscriber or group.
-
DDoS Mitigation
PacketController helps you detect and mitigate Distributed Denial of Service (DDoS) attacks. Its IP anomaly filtering can protect against numerous types of attacks.
-
Hardware Acceleration
PacketController offloads common attack vectors to specialized hardware for highly scalable packet processing and hardware DDoS protection capabilities.
-
The Challenge
As service providers transition to all-IP networks like 4G LTE, their systems grow increasingly susceptible to breaches and cyberattacks. To maintain continuous network availability, they must persistently guard against security risks. However, this ongoing defense drives up expenses and operational overhead, while also degrading network performance and diminishing the subscriber experience.
-
The Solution
The PacketController Gi/SGi-FW employs a stateful firewall to safeguard both subscribers and LTE service providers against DDoS attacks and data manipulation. It also allows mobile carriers to attain high connection rates and throughput from their firewall. The firewall can be deployed alongside Carrier Grade NAT (CGN), which serves as an IP-based interface connecting the EPC (including GGSN, PGW-U, or SGW-U) or the 5GC (with UPF) to a public data network. In such a CGN deployment, the firewall's main role is to protect mobile subscribers and service providers from cyberattacks and data tampering. Additionally, it allows mobile carriers to achieve high firewall connection rates and throughput.
-
Specialized ASIC for realizing ultra-low latency
The AP Series delivers industry-leading performance through PacketController's unique architecture to load-balance common TCP communications with ultra-low latency and low jitter with specialized ASIC.
-
Carrier-Grade Performance
1.Up to 520Gbps on one single hardware appliance
2.Up to 750M concurrent sessions on one single hardware appliance (4 x 400GbE QSFP-DD)
3.N+M Clustering to support 4TB throughput
-
Scaleout Solution
Scaleout is a solution where multiple PacketController AP devices form a cluster to provide the same set of services as a single infrastructure. The Scaleout technology enables QoS/CGN services to be provided across multiple devices for load distribution and better scalability. The services provided by one or more NAT pools can be spanned across multiple devices that form a Scaleout cluster. Scaleout supports dynamically adding or removing devices to the cluster. When the number of devices in the cluster changes, the traffic gets rebalanced automatically.
-
Real Time Connections Per Subscriber
See active connections per subscriber to identify the bandwidth hogs and attacks instantly. More
-
Subscriber Insight
Subscriber analysis provides proactive subscriber quality monitoring, and it can enable helpdesk people quickly and efficiently diagnose and solve subscriber network issues. More
-
Subscriber Portal
Subscriber self-help web portal where the subscribe can logon to view reports and graphs for real-time and long-term stats.
-
Overall Application Usage
The built-in DPI engine is totally customizable for ports, protocls, IP list and web sites.
How would you like to get started?
-
Download Datasheet
Get the detailed information you need on PacketController QoS products. Datasheets include features, specifications, and more.
-
Schedule a Demo
Join a PacketController engineer to gain an in-depth understanding about features and see how our QoS solutions can be used to meet your objectives.
-
Get Quote
Which solution is right for you? Receive a custom quote based on your unique bandwidth management needs.