The document discusses a session border controller called ALOE Transit SBC rev. 1 that provides security, reliability, and interoperability for intercarrier cooperation. It delivers functions like secure network entry, network topology hiding, centralized media traffic management, and protocol and codec interworking. The product combines security, media management, and transcoding services in a scalable device designed to intelligently interconnect partners at network borders while anchoring media to maximize bandwidth utilization.
The Future of Software Development - Devin AI Innovative Approach.pdf
Providing Security, Simplicity, Reliability, and Ultimate Interoperability
1. Providing Security, Simplicity,
Reliability, and Ultimate Interoperability
to Intercarrier
Cooperation
*
The product functionality will be further enhanced in 2012
ALOE Transit SBC revision 1 *
As most global telecommunications
service providers are steadily
ALOE Transit SBC rev.1
switching to IP due to its delivers the following functions:
price-to-quality features and a wide Secure entry point into the carrier’s VoIP network
variety of services, the role of session Network topology hiding
border controllers is rapidly growing, Centralized media tra c management
as well as the scope of their functions. Maintaining SIP-related NAT bindings
Access control
Today an interconnect SBC is an
Protocol and codec interworking
important part of the carrier’s
network, responsible for secure and
controlled IP connections across IP
Peering
network borders, media processing, partners IP carrier’s
call routing, signaling manipulation, network
etc. Thus, a modern interconnect SBC
incorporates network management,
interconnection, and control
functions.
Peering exchange Internet
ALOE TRANSIT SBC rev.1 combines
security, media management, and
transcoding services in a single,
highly scalable device. It is
designed to be placed at the
Key bene ts:
border of carrier's networks and Network security
provide an intelligent Network topology hiding. E cient hiding of the carrier’s network
topology from peering partners to enable information security (IP
interconnection between partners,
address, etc).
at the same time performing Call authorization by IP address or user name and password based on
media anchoring thus maximizing data from internal system’s con gurations.
bandwidth utilization. Ability to control CPS/RPS value from the carrier’s network
2. Privacy support (presentation/screening indicators, Distributed architecture with centralized
RFC3325/RFC4497/Cisco Remote-Party-Id) management
NAT traversal Single management point for geographically distributed
Dynamic transcoding system
Call-by-call transcoding (no need to transcode all calls of
a trunk to the same codecs).
resources and increases overall reliability of the system
Ability to set codec attributes to be able to interoperate
better with vendor’s and customer’s equipment.
network access
Access control Protocol interworking
vendor’s and customer’s equipment to access the network Multi-protocol support (SIP, H.323) for seamless interop-
thus protecting the internal code and work from outside eration with multi-vendor and multi-protocol VoIP
ence or any malicious attacks. It allows the carrier to let equipment.
only intended customers, vendors and data inside the Protocol repair for smooth interworking between
network.
Media anchoring Advanced routing
Dynamic and static routing between interconnect peers
knowledge of the RTP quality by anchoring RTP to intercon- based on a diversity of parameters (ASR, gateway/route
load, day of week, time of day, caller ID etc).
carrier’s network while hiding IP address of the far endpoint. Routing based on received SIP 300/302 redirect messages.
Technical features
Topology Hiding
All-in-one: Signaling + media, SIP, H.323 On signaling and media layer, NAT by means of OS
Session Control Functionality Server Brand/Type
B2BUA Standard IA server (e.g. 2X Intel Xeon 2, 8Gb RAM)
Media Transcoding Routing Intelligence
G.729 (plain, A,B, AB), G.723.1, G.711A-Law, G.711 mU-Law, Incoming and outgoing call number, origination equipment,
G.726, Speex, AMR NB, iLBC, GSM FR – transcoding. time-of-day/days-of-week/month, dial-peer priority/ statistics
H.261, H.263, H.264 – pass through. (QoS, ASR, etc.), incoming SIP 300/302 redirect messages, LRQ,
relative/absolute gateway workload, codecs, CPC, other call
proxying, without codec conversion etc.) parameters
Load Balancing Service assurance
Using hunt, round-robin, least busy, proportional distribution or QoS measurement (packet loss, latency, and jitter), real-time
least-busy balancing methods, statistics-based balancing (ASR-, -
QoS-oriented, etc.)
by CPS
Calls Per Second/BHCA
Call/Session Admission Control
BHCA 10 mln. Restrictions by CPS, RPS, CC, registered/static gateway
Concurrent Calls Scalability Using Multiple Systems
Near-linear scalability by adding servers and entry points due to
50, 000 per cluster modular architecture
Call Detail Records High Availability/Redundancy
CDRs in the DB, interim CDR reports, statistics keeping, Cluster system with the capability of entry point shifting among
schedule-based CDR import and export (to ftp, etc.) the cluster servers and a plurality of entry points, load balancing,
Protocol Support
SIP, H.323 Product Design
Software with modular architecture
Access Control Lists
CPS/RPS restrictions across IP networks and by registered/static Operating System
gateways Debian Lenny/Squeeze