Dialogic BorderNet Virtualized Session Border Controller
Carrier Class In The Cloud SBC Functionality

Overview:

The Dialogic BorderNet Virtualized SBC makes networks easier to connect through carrier class in the Cloud functionality, rapid deployment, and low TCO. 

The BorderNet Virtualized Session Border Controller (SBC) brings carrier class SBC functionality to the cloud and enables service providers and enterprises to take advantage of flexibility and cost savings opportunities from virtualization. The BorderNet Virtualized SBC can interconnect IP networks securely and seamlessly, with unmatched ease of use and low total cost of ownership (TCO) to help secure mission critical infrastructure and reduce the cost of delivering services.

The BorderNet Virtualized SBC can operate in public and private cloud environments to address complex service delivery challenges including security, device interoperability, media handling, reliability and service assurance. Along with a comprehensive array of SBC features it includes a Web 2.0 based real-time dashboard, powerful user management and reporting capabilities, and menu driven configuration and provisioning tools to make interworking and SIP header manipulation easier and more intuitive.

Examples of Applications

The BorderNet Virtualized SBC leverages virtualized computing environments making it well suited for Network Functions Virtualization (NFV) applications. Other example applications for the BorderNet Virtualized SBC include:

• Interconnecting IP Multimedia Subsystem (IMS), Voice over LTE (VoLTE), and IPX networks
• Interconnecting diverse SIP and H.323 mobile and fixed networks
• Detecting and reducing fraud
• IPv4 to IPv6 migration initiatives
• Managing multiple peering partners
• Traffic cost optimization and improved service quality
• Data center provider Infrastructure as a Service (IaaS) opportunities

BorderNet Virtualized Session Border Controllers can provide scalable, elastic session control in service provider and enterprise environments to deliver UC services 

Enabling Your IMS Network Transformation

The BorderNet Virtualized SBC can connect VoIP peers, IMS networks, and your VoIP customers with your core IMS applications and services, and it integrates seamlessly with Dialogic's Media Gateway Control Function (MGCF), the ControlSwitch System Class 4 softswitch, to provide IP-to-IP and IP-to-TDM connectivity. BorderNet SBCs are part of Dialogic's comprehensive portfolio of IMS transformation solutions to help you take your network to the next level.

Feature Rich, High Performance Software SBC Solution

The BorderNet Virtualized SBC brings carrier class functionality to virtualized environments and can be deployed in a standalone or redundant (High Availability) configuration. Each instance of the BorderNet Virtualized SBC can support up to 8,000 simultaneous sessions at a rate of 30 sessions per second.

Advanced Security Features

SBCs provide a first line of defense against fraud and malicious attacks in service provider networks. The BorderNet Virtualized SBC helps protect network integrity and service quality from being compromised by providing a set of layered security capabilities that include the following:

• Customizable signaling and media topology hiding
• Built-in firewall capabilities
• Dynamic access control lists
• Automated rate limiting to protect against DoS attacks and DDoS
• Real-time inspection of message syntax and semantics
• Protection against malformed messages
• Encryption, including TLS, IPsec, SRTP pass-through and HTTPS
• Message flood protection
• Dynamic Black Listing
• Media-related security, including pin-hole management, rogue RTP detection and bandwidth control
• Adaptive overload controls for the delivery of high priority and emergency traffic

Real-time Dashboard, User Management and Reporting Capabilities

The BorderNet Virtualized SBC features WebUI technology that is also available with the BorderNet 4000 SBC. This WebUI provides a realtime view into the activities on the BorderNet Virtualized SBC in the form of an operator dashboard to monitor key aspects of the SBC. The configuration and provisioning tasks related to the Virtualized SBC are performed through the highly intuitive WebUI.

In addition to typical OAM&P functions, the WebUI also provides feature-rich analytics and reporting. The analytics available from the WebUI include traffic statistics, usage summary, and a comprehensive set of performance and traffic reports to help manage network and service activity. The BorderNet Virtualized SBC’s WebUI includes a role-based user administration function to secure and control access to various system views involving configuration and provisioning of the SBC. Additional tools are included in the WebUI to make license management, data archiving, historical reporting, regulatory compliance and network troubleshooting easy and streamlined.

Powerful and Easy-to-Use Management, Interworking and Configuration Tools for Low TCO

Service providers need to securely connect their networks with other operators to deliver business and consumer services to their customers; however, not all SIP implementations are the same. Dialogic has developed the SIP Profiler for the BorderNet SBCs - including the Virtualized SBC - to help reduce the complexity of this process. The SIP Profiler is a powerful configuration tool that can help reduce the time and effort to implement interconnection in multi-vendor, multi-application environments across networks and enterprise end points with different SIP behaviors.

The SIP Profiler can be used to define behavior at the ingress and egress ports of the BorderNet Virtualized SBC and enable customized routing to help optimize and control SIP message flows. The SIP Profiler is accessed through the Virtualized SBC’s WebUI, or through the use of XML scripts. Types of operations that can be performed using the SIP Profiler include:

• Add, modify or delete SIP headers, SIP bodies and SDP parameters and adaptively impact message sequence and flows
• Store information from header fields for later access
• Inspect SIP messages for specific content
• Use customized response codes when, for example, rejecting messages

A Media Profiler extends the core features of the powerful SIP Profiler framework to the SDP, media attributes, and the codecs used in the bearer plane. The Media Profiler provides the ability to:

• Control and reorder the offered codec list
• Control media attributes
• Manage and manipulate contents of ISUP, QSIG and other non-SDP message bodies

The BorderNet Virtualized SBC’s WebUI can simplify operational tasks associated with configuring and maintaining the integrity of a peering and access environment. The profile-based provisioning capabilities through the BorderNet Virtualized SBC WebUI allow users to define common sets of service, security, VoIP parameter, and media attributes that describe the behavior of a connected endpoint through the use of templates. The template-based provisioning approach can significantly reduce the time needed to turn up service and also the system knowledge required to do so. These powerful configuration features can also help lessen TCO and accelerate service delivery by reducing the complexity traditionally involved in establishing interworking and access connectivity.

The BorderNet Virtualized SBC includes both IP level and session level tracing, media capture and recording. It also includes SOAP/XML and bulk loading of interface configurations along with a northbound API for integration with existing BSS/OSS applications. System software upgrades can be easily accomplished through the WebUI, with the ability to roll back to an earlier software release version if needed.

Features and Benefits:

Features	Benefits
Carrier Class in the Cloud SBC features	High performance full featured software SBC with VMware hypervisor support Virtualized High Availability (HA) mode SBC security includes DoS protection, encryption, overload protection, and threat mitigation to protect “mission critical” infrastructure and services
Rapid deployment and low TCO	Modern Web 2.0 UI with real time dashboard, alarming and analytics for fast and intuitive configuration and system management Operational consistency with the BorderNet 4000 SBC and interoperable with the Dialogic ControlSwitch System to help reduce OPEX Flexible licensing options for cost effective scalability Open Virtualization Format (OVF) compliant for fast deployment and implementation

Solutions:

BorderNet Session Border Controllers

The Dialogic BorderNet 4000 SBC is the highest capacity SBC offered by Dialogic and provides security and session management for peering and access applications in both mobile and fixed environments. Available in a carrier class, “five-nines” reliability configuration, the BorderNet 4000 SBC provides comprehensive session security and control, native software transcoding without the need for additional hardware, interworking and border management functions that enable operators to offer high quality SIP and H.323 peering services over IPv4 and IPv6 networks. The access features enable rapid deployment of SIPconnect 1.1 compliant SIP Trunk, Unified Communications, hosted PBX, contact center, mobility and business and consumer VoIP services. Comprehensive security features include topology hiding, firewall, overload protection, dynamic black listing, and multiple encryption options for protecting service and network integrity.

The powerful routing capabilities and SIP interworking tools built into the BorderNet 4000 SBC can lower service delivery costs through simplified operations and fast, error-free interconnection of diverse IP endpoints. The Web 2.0 based WebUI of the BorderNet 4000 SBC provides full FCAPS capabilities with a real-time dashboard and easy-to-use configuration management, reporting, alarming and trouble-shooting tools.

The Dialogic BorderNet Virtualized SBC brings carrier class to the cloud and enables service providers and enterprises to take advantage of flexibility and cost savings from virtualization. The BorderNet Virtualized SBC can interconnect IP networks securely and seamlessly with unmatched ease of use and low TCO to help secure mission critical infrastructure and reduce the cost of delivering services.

The BorderNet Virtualized SBC is designed to operate in virtualized public and private cloud environments to address complex service delivery challenges including security, device interoperability, media handling, reliability and service assurance encountered in today’s demanding service provider and enterprise networks.

The BorderNet Virtualized SBC shares the same code base with the BorderNet 4000 SBC so it boasts the same carrier class features including native software transcoding, a Web 2.0 based real-time dashboard, powerful user management and reporting capabilities, and menu driven configuration and provisioning tools to make network interworking and SIP header manipulation easier and more intuitive.

SIP Trunking and Hosted Services

A SIP trunking service can offer significant cost-savings opportunities to enterprises by allowing them to use very cost-effective SIP trunks in place of traditional PSTN trunks. Instead of dedicated TDM connections delivered by the service provider to businesses, a SIP trunk allows traditional fixed PSTN lines to be replaced with connectivity via an IP connection.

The BorderNet Family of SBCs can play a critical role for service providers wanting to deliver a business service involving SIP trunking, as well as enterprise customers wanting to take advantage of the reduced costs and added features of these SBCs.

On the service provider side, the highly scalable BorderNet 4000 SBC in the service provider’s central office or data center can terminate the SIP trunks from customers and provide support for access features for consumer and business VoIP services. BorderNet 4000 SBC features include access security, registration caching, far end NAT traversal, encryption and support for call flows involved in the delivery of advanced unified communications for high value customers. The BorderNet 4000 SBC is SIPconnect 1.1 compliant and has also been validated by BroadSoft to interoperate with its BroadWorks suite of VoIP application services that integrate video, fax, voice and email communications for businesses and consumers. For lower density access SBC requirements, the BorderNet Virtualized SBC also delivers mission critical access enabling features like the BorderNet 4000 SBC and can be rapidly and economically deployed in an industry standard hypervisor environment.

At the enterprise edge, the BorderNet Virtualized SBC provides SIPconnect 1.1 compliant functionality for enterprise and contact center customers that want carrier class SBC solutions for their mission critical communications infrastructure. With the BorderNet Virtualized SBC and the BorderNet 4000 SBC, customers now have options to best match their SBC scalability requirements and infrastructure operating environment with the best solution since both BorderNet SBCs can be used in enterprise premise locations to provide:

• SIP security
• Transcoding
• SIP message interoperability
• Service provider network demarcation, and
• Remote performance visibility

IP Packet Exchange (IPX) and Wholesale IP Services

IPX and wholesale providers find themselves in an extremely competitive market. IPX operators are being called upon to deliver high-value, low-cost solutions that can quickly and securely connect their demanding customer base of wireline, wireless and internet service providers. To deliver competitive value at the right price point, wholesale providers look for network infrastructure that supplies high reliability and high voice quality, as well as impeccable security and operational features such as monitoring.

Dialogic offers a comprehensive solution for the next generation of VoIP providers that features the BorderNet 4000 SBC to enable the end-toend delivery of voice services at a low cost. Paired with the powerful Dialogic ControlSwitch System softswitch to enable the intelligent routing and connectivity to the PSTN, the BorderNet 4000 SBC can support a wide array of security, interworking (SIP, SIP-I/T, H.323), protocol repair, and transcoding features to enable the end-to-end delivery of services over disparate IP peer networks.

In addition to its strong capabilities for wholesale and IPX applications, the BorderNet 4000 SBC can also seamlessly integrate with the ControlSwitch System and act as a security gateway for both SIP and H.323 traffic. Unlike standalone SBCs, management of the BorderNet 4000 SBC is integrated into the Dialogic ControlSwitch Element Management System (EMS). This integration allows, for example, ControlSwitch System IP trunk group provisioning to be done through the BorderNet 4000 SBC using the ControlSwitch EMS, which can improve operational consistency and significantly reduce the complexity of managing IP peering connections.

Interconnect for Peering

Peering offers many benefits for service providers, including the ability to deliver improved service because of increased redundancy, capacity, and routing control; to obtain better performance with fewer potential bottlenecks; and to take advantage of lower cost routing and termination charges. But as peering opportunities grow, so do network complexity and the need to provide reliable and secure network interconnect.

The BorderNet 4000 SBC provides the first line of defense against fraud and malicious attacks with its extensive set of layered security capabilities that can keep networks and service quality uncompromised. In addition to its security features, the BorderNet 4000 SBC is capable of delivering comprehensive session control, interworking, and media management functions like transcoding at the network border to enable service providers to offer high-quality SIP and H.323 peering services. The powerful routing capabilities and browser-based SIP interworking tools built into the BorderNet 4000 SBC can contribute to lower service delivery costs and reduced time required to interconnect diverse IP endpoints in increasingly complex interworking situations.

Specifications:

Technical Specifications
Protocol Interworking	Signaling SIP, SIP-I, SIP-T, H.323 Other VLAN, IPv4, IPv6, UDP, TCP, RTP, RTCP Network IPv4, IPv6, overlapped IP networks
Security Features	Access Control List Signaled pinhole media firewall Network topology hiding for both signaling and media Encryption support: TLS, IPsec, HTTPS, SSH, SRTP pass-through NAT traversal DoS and overload protection Rate limiting Dynamic black listing
Media Security Features	Media profiling Rogue RTP detection Packet rate monitoring, and limiting Bandwidth determination and enforcement
IMS, IPX and VoLTE	Inteconnect Border Control Function (I-BCF) Transition Gateway (TrGW) (RFC 4117), e.g., with Dialogic I-Gate 4000 PRO Media Gateway Integrated Border Function (I-SBC) Interworking Function (IWF) SIP and SIP-I/SIP-T Interworking
Session Admission Control	License control Inbound, outbound and aggregate call control Session rate limit on per Peer and Interface level
Routing	Signaling: Static Routing: Interface-Interface and Peer/Interface SIP Invite/3xx SIP redirect server routing Integration with other routing engines through SOAP and bulk routing Policy-based routing SIP Message-based routing Local DNS for URI to IP Address and Port mapping Routing resolution through external DNS (SRV, A, NAPTR) Load-balancing and priority-based routing RFC 4904 Trunk Group Routing support Emergency services call routing and call prioritization SIP URN routing Dynamic SIP REFER processing Media: Optional media termination Separation of signaling and media over VLANs Media NAT traversal Media tromboning
QoS	QoS metrics: Packets lost, jitter inter-arrival, and latency Policy enforcement: DSCP and ToS marking Traffic statistics: Total packets and octets transferred
Media Interworking	Transcoding support for the following codecs: Audio: G.711, G.722, G.723.1, G.726, G.729a, G.729b, AMR-NB, AMR-WB, iLBC Fax: G.711 fax, T.38 Tones: G.711 tones, SIP INFO, RFC 2833
Scalability - Base Configuration – per instance
Maximum Session Attempts Capacity	30 sessions per second (signaling and media)
Maximum Sessions	8,000 sessions
VLANS	128
IP Addresses	128 (signaling and media)
SIP interfaces	64
Management
Management	Integrated web-based management (https) and real-time dashboard and analytics SNMP traps Historical and real-time statistics and reports Business and engineering reports including report filtering and multi-format data export Session Detail Records Role-based User Management Integrated Wireshark packet and session tracing Northbound API interface based on web technology (SOAP/XML) Bulk provisioning interface Dialogic ControlSwitch System integration Integrated configuration and provisioning Integrated alarms and reporting Unified Call Detail Record (CDR) End-to-end session tracing EMS platform manages both BorderNet Virtualized SBC and ControlSwitch System
Interfaces (Virtual)
Signaling and Media	Two (2) 1 Gigabit Ethernet Interfaces
Management	One (1) Gigabit Ethernet
High Availability	One (1) Gigabit Ethernet
Hypervisor
Hypervisor	VMWare vSphere 5.0 or higher
Minimum Hardware Specification for Virtual Machines
Base Configuration	Server CPU: 2.4 GHz x86 64-bit Processor, 300 GB storage Per instance – up to 2 instances Cores: 2 4GB RAM 80GB Storage Four (4) 1 Gigabit Ethernet Interfaces

Documentation:

Download the Dialogic BorderNet Virtualized Session Border Controller Datasheet (.PDF)