PRX G-SEriEs

Data shEEt

IPv6 rea dy

NEtworK INtElligENcE aNd ENforcEmENt

The ipoque PRX G-Series product line is a carrier-class network policy enforcement and data intelligence system deployed as either an integrated or standalone solution. The PRX identies all trafc on the operator network and provides an extensive suite of capabilities to monitor, manage, and monetize application trafc. Network operators using the ipoque PRX G-Series reduce the cost of operating their network as well as identify and eliminate revenue leakage. It allows them to introduce new application-based revenue services that subscribers are demanding in an all-IP world.

INtEgratEd or staNdaloNE The PRX offers seamless integration with thirdparty policy control and quota management systems, supports traffic redirection to valueadded service (VAS) platforms, and provides real-time data to accounting and billing systems. The solution supports carrier-defined business goals of per-application and per subscriber monetization or QoS policy rules to increase revenues and reduce the total cost of operating the network regardless of access type. All PRX G-Series include management and reporting functions. DEploYmENt ArchitEcturE The ipoque PRX G-Series supports a variety of network deployments and access network types. The PRX is typically installed in-line

with the network traffic, close to subscriber for maximum application usage visibility and intelligent policy enforcement. Options include deploying the PRX between the network gateway (e.g. GGSN, PGW, BRAS, or CMTS) and the edge/distribution router or optionally a location higher or lower in the network (such as the Gn network) using IP over Ethernet within our without tunneled/labelled traffic. The PRX provides proven carrier-grade performance, availability and deep packet inspection precision required for such a critical in-line infrastructure element. As an integrated solution, the PRX sends statistical data to a policy management system and receives real-time subscriber policy information updates. As either a standalone or integrated solution, the PRX provides both a graphical user interface (GUI) and provisioning interface for system setup and management in addition to per-element configurations.

HIGhLIGhTS Carrier-grade performance, visibility and application accuracy Access network agnostic subscriber and network-level bandwidth and policy management Support for all wireline and wireless network access types (3G/4G, DSL, FTTx, Cable MSO, Mixed/Hybrid, WiFi, etc) Unified and seamless integration with third-party policy, usage accounting, and charging systems PRX G-Series models offer throughput performance that scales both up and down in a carrier network 3GPP compliant

www.ipoque.com

SuBscriBEr PolicY INtErfacE The PRX G-Series offers a high-performance policy interface to external policy management systems such as a PCRF and OCS or similar systems at the network operator. The PRX Subscriber Policy Interface is equivalent to the Gx interface in a 3GPP environment or similar standards in TISPAN and PacketCable environments. The following policy rules are supported on a per-subscriber, per-application, or per-protocol group basis: Bandwidth limitations Bandwidth guarantees Priorities Redirecting traffic Usage data messaging frequency (time- or volume-triggered) SuBscriBEr aNd NEtworK UsagE INtErfacE The PRX G-Series products include the ipoque Policy Enforcement Messaging Interface (PEMI) for tracking application usage by bytes and/or time on a per subscriber or network basis. PEMI is a very high performance binary interface that provides integrated subscriber usage data for external systems. This data can be used for a variety of decisions supporting subscriber and network policy, quota management, billing and detailed usage reporting. PEMI includes integrated support for common telco and 3GPP messaging capabilities such as:

New Subscriber Activity (Context Create) Subscriber Inactivity (Context Delete) Application Session Start: initial per subscriber traffic consumption Application Traffic Report: per subscriber traffic consumption report for
report for an application or application group an application or application group either triggered by configured time or consumed traffic volume Application Session End: final per subscriber traffic consumption report for an application or application group once all corresponding connections are terminated Connection Session Start: initial per subscriber traffic consumption report for a TCP/UDP flow Connection Traffic Report: per subscriber traffic consumption report for a flow either triggered by configured time or consumed traffic volume Connection Session End: final per subscriber traffic consumption report for a flow once the connection was terminated Traffic REroutiNg PRX G-Series supports data traffic rerouting to external service platforms for value-added services (VAS). This includes capabilities for URL filtering, caching, optimization and manipulation, and parental controls. Individual subscriber application flows can be rerouted by the ipoque PRX through select third-party VAS systems and triggered by application protocol, subscriber identity, IP address, service port or any policy-defined combination of these in real-time.

DEploYmENt

BSS

2G/3G Network

SGSN PRX Traffic Manager

GGSN

PCRF

OCS

4G Network

SGW PRX Traffic Manager IPDSLAM BRAS CMTS

PGW PRX Traffic Manager

Internet

DSL/ Cable

VAS

Normal Traffic Usage Policy & Charging Redirected Traffic

High AVailaBilitY PRX G-Series all feature a failover architecture to support high availa bility requirements. The PRX-10G hardware platform supports a fully redundant configuration within a single NEBS-compliant chassis. If one of the internal components fails, backup hardware automatically takes over. There is no information loss in case of soft failover, i.e., the restart of a component. For a hard failover, i.e., one component fails due to a hardware fault, the worst-case information loss is determined by the length of the application traffic report interval of the Messaging Interface.

www.ipoque.com

ComprEhENsiVE Traffic VisiBilitY aNd ENforcEmENt

Statistics, LoggiNg, AccouNtiNg aNd REportiNg

Support for ipoques complete protocol application library, even elusive

and deliberately-concealing protocols (See Protocol Support) All standard protocols for Web, e-mail and file transfer, etc. Close to 100% detection and regulation accuracy for all supported protocols All important protocols for P2P file sharing, Internet telephony, media streaming, instant messaging, tunneling, online gaming , etc. Custom protocol definitions by network operator Application traffic usage and management for MPLS-labeled, VLANtagged and DSCP-labeled traffic Tunnel decapsulation for L2TP, GRE, IP-in-IP and GTP-U tunnels Integrated QoS management and available Lawful intercept modules IPv6 support on all hardware platforms

Graphical usage statistics per link, subscriber group, application and

application class for configurable time intervals ranging from real-time to one hour to one year Predefined reports issued to regain control over the network, detailing the network usage from different perspectives All statistical data automatically exported at different aggregation levels (i.e. per link, per subscriber, per user group) for subsequent processing in external accounting systems Finegranular service usage information through optional applicationlevel connection logging to an external syslog server

PRX-10G For UltimatE PErformaNcE

Prx-5g, aNd -2G: ipoQuEs Mid-raNgE Traffic MaNagErs

Optimized to meet the performance

requirements of even the most demanding network environments Performance scales up to fully loaded 10 gigabit Ethernet links and beyond Packet latency <100 microseconds Scalability and high availability Active-active integrated chassis load balancing 14 packet processing blades with automatic failover Redundant switch, power, hotpluggable packet-processing blades and other hardware components

Optimized to meet the performance

requirements of even the most de manding network environments Certified high performance (EANTC test) Asymmetric traffic support Gigabit Ethernet and 10 Gigabit links ranging from 400 Mbit/s to 8 Gbit/s Integrated hardware bypass Optional flow-based subscriber reporting

www.ipoque.com

PRX PLATFOrMS

Performance Throughput Number of Active Connections Concurrent Subscribers Interfaces Network Ports (Int./Ext.) Hardware Bypass Management Port Console Port Hardware Size (WxHxD in mm) Weight Power

PRX-10G 75 Gbit/s 100 Million 5.6 Million

PRX-5G 8 Gbit/s 4 Million 400.000

PRX-2G 4 Gbit/s 2 Million 100.000

20 x 10GE (SFP+) n/a 2 x 10/100/1000Base-T integrated KVM switch

8 x 1GE (1000Base-T/SFP) or 2 x 10GE (SFP+) Yes (1000Base-T) 2 x 10/100/1000Base-T Serial RJ-45

2x 10/100/1000Base-T and optional: 4x 10/100/1000Base-T or 4xSFP Yes (1000Base-T) 2 x 10/100/1000Base-T Serial RJ-45

9U rack mount, NEBS-3 compliant: 12U 60150 kg Up to 4 redundant, AC 200-240V, 2000W, optional: DC -48 to -60V optional: NEBS Level 3

2U rack mount 430 x 88 x 560 18 kg Redundant, AC 100-240V, 600W, optional: DC -48 to -60V FCC, UL, CE, CCC and RoHS

1U rack mount 430 x 44 x 500 10 kg 100-240V, 50/60Hz, 250W

Certications Options Reporting Management

CE approval, FCC Class A, UL

enables export of reporting data including: per application, per subscriber statistics, top talker statistics for applications and subscribers GUI-based PRX network policy rule conguration

IpoQuEs FlExiBlE Support aNd SErVicEs

Worldwide 24/7 support with 4 hours reaction time Regular protocol signature updates E-mail, phone and remote installation support Customization services for specific requirements not available in off-the-shelf products

ipoque GmbH, Neumarkt 29-33, 04109 Leipzig, Germany Phone: +49 341 59403 0 Fax: +49 341 59403 019

www.ipoque.com info@ipoque.com

2013 ipoque GmbH PRX-1302