APKT ProductOverview 111017 Compressed

Acme Packet Product OverviewThe leader in session delivery network solutions

Acme PacketAcme Packet Acme Packet product overview

APKT session delivery network solutions now encompass 8 product categories

Applications& services

IP transport network

Devices

phones, tablets,

PCs, TVs, sensors, etc.

1. Session border controller controls sessions at borders

2. Session manager manages subscriber access & interfaces application servers (SBC + IMS CSCFs + BGCF)

3. Multiservice security gateway secures FMC session delivery (data & voice) over untrusted networks

4. Policy exchange controller enables LTE data & voice session roaming

5. Session-aware load balancer scales session control at borders

6. Session routing proxy routes sessions to/from access & interconnect borders

7. Application session controller empowers Web 2.0 applications to control sessions

8. Session recorder provides session recording utility for SDN

Session delivery network (SDN)

2

Acme PacketAcme Packet

Internet

Acme Packet product overview

APKT session delivery network architecturefor mobile & fixed line service providers

SIP

FTTxWiMAX 3GGSM/CDMA

4GLTE/M-WiMAX

FemtoRAN WiFi

DSLSIP trunk

Leased lineCable

Coretransport network

Edgerouter

PSTN

Edgerouter

LTE

Business

Diameter

Other IP networks

CMTS BRASGGSN EPCAGW

Service &application

data centers

Web 2.0 (REST, WSDL, etc.)

Policy Exchange Controller

Session Border Controller (includes Session-awareLoad Balancer (SLB) and SIP Multimedia-Xpress (SMX)

Multiservice Security Gateway Session Routing Proxy

Interactive Session Recorder Application Session Controller

3


• SBC – session border controller- SIP trunking - SIP & H.323 interoperability - Remote site & worker connectivity

via Internet- VoIP & UC security – internal &

external networks- Data center disaster recovery- Remote site survivability- Contact center virtualization

• ASC – application session controller- Communications-enabled business

processes via Web 2.0 application control of communications sessions

- Click-to- call/see/chat, outbound notifications, voice blast/drop

• ISR – interactive session recorder- Regulatory compliance for recording all

sessions – voice, video, IM, document sharing/collaboration


APKT session delivery network architecture for enterprises

Data centers

Contact center, audio/video conferencing,

IP Centrex, etc.PSTN

IP users/subscribers

Outside world Hosted services

Serviceproviders

Recordings

CEBP

IP PBX/UC

SIP trunks

SIP

Tele-worker

Nomadic/ mobile user

H.323

Regionalsite

SIP

Remotesite

HQ/ campus

Remotesite

Private network Internet

4


Net-Net hardware platforms – unparalleled scale and flexibility

Licensed session capacity range 150 – 8K 500 – 32K 4K – 120K 500 – 210K

System throughput 5Gbps 5Gbps5Gbps or 20Gbps

35Gbps

Network interfaces (# active) (4) 1Gbps (4) 1Gbps(8) 1Gbps or (2) 10Gbps

(28) 1Gbps

IPsec tunnel capacity 120K 200K 400K 2800K

Transcoding session capacity 0 – 7,200 0 – 7,200 0 – 24,000 Planned

Local route table capacity (# of routes)

1M 2M 1M or 2M 28M

5

Note 1: Capacity can vary by signaling protocol, call flow, codec, configuration, feature usage and SPU and NPU options

Net-Net 45001

Net-Net 92001

Net-Net 38201

Net-Net 140001

5


Acme Packet multi-processor hardware architecture

IPsec &TLS set-up hardware acceleration

Signaling messageprocessing

Packet classification, admission, modification, forwarding & DoS prevention

Packet flow policing, queuing,shaping & copying

RTP+RTCP measuring & monitoring

IPsec / SRTP encryption / decryption

Network processor memory updates &

counter polls

6


Session border controllers (integrated or decomposed), session-aware load balancers, multiservice security gateways, session routing proxies SIP, H.323, MGCP/NCS, H.248, RTSP, MSRP, H.239; H.248 border gateway control Net-SAFE: SBC DoS/DDoS protection, access control, topology hiding, VPN separation, privacy; virus & SPIT protection; service and application infrastructure DoS prevention; fraud prevention; monitoring & reporting; IDP/IDR; encryption – IPsec, TLS, SRTP NAT traversal; IP address translation – private-public, OLIP/VPN bridging, IPv4-IPv6; number & URI manipulation; signaling message header manipulation; protocol interworking – signaling, transport & encryption protocols, SIP/SIP-I/SIP-T; response code translations; transcoding & transrating; SDP & DTMF manipulation admission control – signaling & bandwidth constraints per user, network or session agent; signaling overload control; transport control – QoS marking/VLAN mapping, peer-peer media release; policy control; QoS & ASR routing & reporting; network element (L3 router, registrar, session agent) failure discovery, re-routing &/or load balancing; QoE reporting accounting; routing – source or destination-based, LCR, ENUM, by codec; CNAM; service theft protection – bandwidth policing, QoS marking; session timers; service core normalization lawful intercept & emergency services – E911 & GETS; session replication for recording checkpointing of media, signaling, IPsec tunnel & config state ensures no loss of active sessions, or state required for NAT traversal, session handling (transfer/hold, etc.) or accounting EMS, RMC, CLI, HTTPS, XML, telnet, FTP, SFTP, RADIUS, SNMP, syslog, secure management


Acme Packet Net-Net OSis function and feature rich

Session border controllers (integrated or decomposed), session-aware load balancers, multiservice security gateways, session routing proxies SIP, H.323, MGCP/NCS, H.248, RTSP, MSRP, H.239; H.248 border gateway control Net-SAFE: SBC DoS/DDoS protection, access control, topology hiding, VPN separation, privacy; virus & SPIT protection; service and application infrastructure DoS prevention; fraud prevention; monitoring & reporting; IDP/IDR; encryption – IPsec, TLS, SRTP NAT traversal; IP address translation – private-public, OLIP/VPN bridging, IPv4-IPv6; number & URI manipulation; signaling message header manipulation; protocol interworking – signaling, transport & encryption protocols, SIP/SIP-I/SIP-T; response code translations; transcoding & transrating; SDP & DTMF manipulation admission control – signaling & bandwidth constraints per user, network or session agent; signaling overload control; transport control – QoS marking/VLAN mapping, peer-peer media release; policy control; QoS & ASR routing & reporting; network element (L3 router, registrar, session agent) failure discovery, re-routing &/or load balancing; QoE reporting accounting; routing – source or destination-based, LCR, ENUM, by codec;

Configurations

Multi-protocol

Management

High availabilityRegulatory

SLA assuranceService reach

Interoperability

Security

Recording

7


Net-Net OS architecture

8


Net-Net Central• Configuration, fault, performance, and security

management for Acme Packet product line

• Scalable, extensible framework

• High availability & ease of use for enterprises & service providers

• Facilitates flow-through provisioning, OSS integration, and network-wide management

• Key feature/functionality:- Server clustering- Flexible configuration views- Open, standard interfaces- Integration of management application add-ons- Dashboard summary view for “at-a-glance” device status

and key performance indicators

Acme Packet product overview 9


Acme Packet in 3GPP release 10• Access border functions

- P- & E-CSCF – SIP control- IMS AGW – media control - ATCF & ATGW for LTE-3G

fallback (R10)

- ePDG – IPsec tunnel termination for untrusted IP access

- Femtocell SeGW - IPsec tunnel termination

- SMX – I- & S-CSCF equivalent - SLB –SBC load balancing- DRA (PEC) – access network

policy scaling

• Interconnect border functions- IWF –signaling interworking- I-BCF – SIP control - TrGW – media control- DRA (PEC) – roaming

policy control

• Core routing functions- BGCF – external

interconnect selection


Proven widespread interoperability

11

Product categories and configurations


Session border controllers (SBC)

• Session – real-time, interactive communications—voice, video & multimedia—using SIP, H.323, MGCP/NCS, H.248, RTSP

• Border – IP-IP network borders1. Interconnect/peering:

between service providers

2. Subscriber access: enterprise, residential or mobile services

3. Data center: retail or wholesale services

4. Enterprise: intra- & extra-enterprise

• Control 1. Security 2. Service reach maximization3. SLA assurance 4. Revenue & cost optimization5. Regulatory compliance

Serviceprovider

Service provider

Fixed &mobile

InternetEnterprise

13


Net-Net SBC – flexible deployment & configuration options across markets

Use cases

Enterprise Government

Contact Center Service Provider

Deployment options

Enterprise data center Service provider access

Service provider interconnect Clustered (w/ Net-Net SLB)

SBC configurations

Net-Net SD Net-Net SF Net-Net BG

Solution-specific configurations

Net-Net SMX Net-Net Transcoding Gateway

Net-Net 4500

Net-Net 9200

Net-Net 3820

Net-Net 14000

3rd party server

14


Net-Net SIP Multimedia-Xpress – SBC-integrated service delivery core• IMS alternative for voice, RCS, FMC & multimedia services

- Initial roll-outs evolving to large scale deployments- Path to Smart Border IMS; SBC investment preserved

• Access and service core delivery functions- P-CSCF, E-CSCF, IMS-AGW & SIP firewall- SIP registrar & core session control functions- Optional interconnect SBC (I-BCF, IWF, TrGW)- Optional session routing (BGCF)

• IMS SIP, Diameter & ENUM interfaces- HSS, ENUM or local subscriber database- Application server (AS) ISC reference interface- PCRF, OCS & RACS (Rx, Rf)- NASS/CLF (e2)- PSTN break-in/break-out (Mj)

• CAPEX and OPEX savings- OPEX – simplified signaling model, easier to maintain

& troubleshoot- CAPEX – fewer systems to certify, deploy & maintain- Single SMX cluster supports millions of subscribers

Backbone

Data centers

PSTN

IP peer

Mobile Fixed lineDSL/cableFTTX

15


Net-Net Transcoding Gateway (TG) – dedicated transcoding/transrating• High-capacity Net-Net 9200 TG offloads

expensive functionality from distributed SBCs or other elements

• Net-Net 9200 transcoding units (TCUs)

- Modular, 1:N redundant- High-performance transcoding for

up to 8,000 simultaneous sessions

• Supported functions/features

- Wide range of wireline & wireless codecs- DTMF interworking- Static ACLs- IPv4 or IPv6 address translation- QoS marking and VLAN mapping- Media timers & policing- Router & SIP session agent monitoring

and re-routing- QoS measurement & reporting- Load balancing- Accounting

16


Acme Packet enterprise SBCs (E-SBC)securely enable VoIP, video and UC&C

• VoIP & UC security

• SIP trunking

• SIP & H.323 interoperability

• Data center disaster recovery

• Remote site survivability

• Contact center virtualization

• Remote site & worker connectivity via the Internet

• Regulatory compliance – recording & privacy

17


Session-aware load balancers

• Distribute SIP signaling traffic across Net-Net SBC cluster

• Linearly scale capacity to millions of subscribers

• Mitigate network impact of adding and removing capacity

• Reduce number of IP addresses for endpoints to discover

• Overcome limitations of DNS and L3/4 load balancer approaches

SBC cluster

IPv4 IPv6VPN

Any service, any application

Internet

3G LTE WiMAX DSL FTTx Cable

Leased lines

Voice

Enterprise

IMS RCS NGN

Mobile

Presence

Telepresence

FMC

Any access network

Residential

Video conferencing

Residential EnterpriseMobile

Content & video share

UCC

IM & messaging

18


Net-Net Session-aware Load Balancer (SLB)• Supports up to 2M subscribers per SBC cluster

- Single IP address- Simplifies subscriber

address management- Edge discovery problem reduced- Eliminates external dependencies

(e.g. DNS, STUN, etc)

• Preserves subscriber association with SBC in route table indefinitely

• SLB assigns subscriberto optimal SBC based upon origination address or least busy

• Transparently add SBCs without requiring changes to subscriber installation procedure

• Preserves benefits of Acme Packet SBCswhile providing the appearance of a centralized signaling architecture

SLB

SLB

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SLB

SLB

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

SBC

2M SubscriberCo-located Cluster

SignalingMediaSignalingMedia

SBC

SBC

SBC

SBC

SLB

GeographicallyDistributed Cluster

19


Multiservice security gateways

• Multiservice – voice, video & data for dual-mode handsets or femtocells using SIP or UMA

• Security – securely tunnel voice and data over untrusted IP networks

• Gateway – between fixed or mobile core network & broadband Internet

Enterprise Residential

Service provider

core

Internet

FemtocellWiFiWiFi Femtocell

20


Net-Net Security Gateway (SG)

• Industry-leading IPsec tunnel capacity- 200K capacity per 1 RU MSG- Up to 4.8M fully protected tunnels per 7 foot

telco rack (high availability configuration)

• High performance IPsec processing- Two-level hardware acceleration for IPsec tunnel

setup and IPsec traffic encryption/decryption

• Integrated hardware/software-based DoS/DDoS protection

- Proven SIP session & layer 3 / 4 protection capabilities in large tier 1 access deployments extended to IPsec

• Carrier-class high availability - Proven architecture leveraged for MSG configurations

• Virtualized MSG & SBC capabilities- Centralizes resources for reduced capex & opex

• Industry-leading, tightly integrated SBC functionality

Net-Net 4500

Net-Net 14000

21


Policy exchange controllers (PEC)

• Policy – authorization, location, charging and service profile information using Diameter signaling

• Exchange – policy information sent between network elements in a network or across network boundaries

• Control – security, interoperability, routing & aggregation of Diameter signaling messages

Standards-compliant

• RFC 3588 Diameter agent

• 3GPP Diameter Routing Agent (DRA)

• GSMA Diameter Edge Agent (DEA)

IPX

LTE

EPC

IMS

LTE

EPC

IMS

22


Net-Net Policy Director (PD)

• Performance density & price/performance

• Net-SAFE security framework

• Comprehensive interoperability

• Flexible & scalable routing policies

• SBC integration Charging

QoS

Authentication

Roaming

Mobility

Authorization

Charging

QoS

Authentication

Roaming

Mobility

Authorization

IPX /roaming hubs

IPX /roaming hubs

Other MNOsOther MNOs

Home NetworkHome Network

Net-Net 4500 Net-Net 1400023


Session routing proxies (SRP)

• Session – SIP-based real-time, interactive communications for voice, video & multimedia traffic

• Routing – function in which optimal forwarding paths for session traffic to SIP destinations are provisioned locally or from external databases via ENUM, SIP, XML or DNS queries

• Proxy – stateless and transaction stateful routing of SIP sessions on behalf of other SIP elements (SS, MGW, IMS core elements, etc.) within and between service provider mobile, fixed-line and transit networks

Serviceprovider

core

RatesheetsLCRE911LERGCNAMLNP

Fixed line IP

IPinter-

connectPSTN3G/4G

IP2G/3GTDM

24


Open Session Routing architecture with service provider interconnect

• Session-stateful Interconnect SBCs• Stateless/transaction-stateful SRPs• Best-of-breed telephony databases

• Call Accounting – CDR collection, mediation & call analysis

• Media gateways – PSTN break-in/out

IP

Wireless accessWireline accessresidential & business

PSTN interconnect

2G/3G

TDM3G/4G

IPFemtoRAN WiFi

Internet PSTN IP

MSC

IP peering &SIP trunking

Telephonydatabases

RegistryENUM

LERGCNAMLNP Rate sheets

CarrierENUM

LCR E911 DNS

IMScore

SIPENUMDNSRADIUS & Diameter

Legend

Billing Mediation

Call

Accounting

Analysis

CDRCollection

SSC4

IMScore

SSC5

MSC

IP core network

25


Acme Packet Open Session Routing (OSR) solution

• Net-Net Session Router (SR)- High-performance session routing proxy- Open, flexible & interoperable- Extensive routing control with stateless or

transaction-stateful operation- Choice of proven, carrier-class platforms- Carrier-class high availability- Integrates into IMS architecture (BGCF)- Choice of locally-provisioned or external routing

databases from variety of partners

• Net-Net Central Route Manager- Automated route management, distribution- Net-Net EMS application

• Flexible routing database options- On-board- Acme Packet OSR product and service partners

Net-Net 9200

Net-Net 3820

Net-Net 4500

Net-Net 14000

26


Application session controllers

• Integrates Web applications with IP communications

• Shields complexity of communications infrastructure- Bundle APIs, media services and protocol interworking

• Deliver high-availability communications services to business-critical applications

• Deploy on Intel x86 servers, including virtual machines

27


• Software platform integrating Web applicationsand business processes with IP communications

• Adds voice, video and chat toWeb 2.0 applications

• Shields developers from complexities of the underlying infrastructure

• Interoperates with communicationsinfrastructure and Web applicationsfrom hundreds of vendors

• Applications

- Click-to-call

- Voice drop/blast

- Automated outbound notifications

Net-Net Application Session Controller (ASC)

IP CommunicationsInfrastructure

Web 2.0Business Applications

Web ServicesAPIs

CommunicationsProtocols

28


Session recorders

• Overcome limitations of traditional call recording

• Use Web services APIs to control recordings

• Offer flexible storage options – premise, cloud, remote archive

• Support multi-tenant recording for cloud-based services

• Integrate media server to reduce hardware complexity

• Affordable per session pricing (50% less than call recording)

• Business application and infrastructure vendor agnostic- Any business application, any IP communications environment

- Leverages Acme Packet session delivery network expertise

Acme Packet product overview 29


Net-Net Interactive Session Recorder (ISR)

• Software solution that captures, secures, archives and manages IP session recordings

• Large scale recording for regulatory compliance

• Next-generation architecture twice as scalable as competing solutions

• Simple to use Web services APIs to start, stop, tag and store recordings

• Flexible storage options – premise, cloud, remote archive


IP communicationsinfrastructure

Web 2.0 applications

NAS / SAN

Record & index

Store

Connect

30


Acme Packet management provides comprehensive, flexible solutions• Extensive management data and controls accessible via

Acme Packet Net-Net Central and OSS applications

• Applications, tools, and interfaces used for service fulfillment, service assurance, and billing

31


Net-Net

• Complete product family – platforms, software, management• Supports current and next generation networks, services and applications

- Compliant with industry standards; proven interoperability- Mobile and fixed line networks- Variety of peering and access applications- Wide range of services and applications

• Delivers on all functional requirements

- Fixed line service providers- Mobile service providers- Over-the-top service providers- Enterprises- Contact centers- Governments

Net-Net CentralNet-Net 3820 Net-Net 9200Net-Net 4500 Net-Net 14000

32

The leader insession delivery network solutions

Documents

APKT ProductOverview 111017 Compressed