BNGSOFT's XDP-Based Solutions: A Game Changer For ISPs and Telcos

A carrier BNG and CGNAT that runs on commodity x86.

PPPoE and IPoE termination, carrier-grade NAT, hierarchical QoS and ACLs — one XDP data plane, 50 Mpps per box with every feature enabled. No appliance. No per-subscriber licence tied to hardware.

SUBSCRIBERS Home AHome BHome C 100.64.0.11100.64.0.12100.64.0.13 PPPoE / IPoE BNGSOFT XDP DATA PLANE · IN KERNEL Session CGNAT hQoS ACL 50 Mpps · all features enabled Internet 203.0.113.7 ~500 nsper packet commodity x86no appliance 50 Mppsall features on

How many boxes does your network need?

Work it against your own traffic rather than our assumptions. Packet size, not gigabits, is what decides the answer.

—
Gbps needed
—
Mpps needed
—
Boxes at 50 Mpps

Everything the subscriber edge needs, on one box.

One data plane does termination, translation, shaping and filtering. No separate CGNAT appliance, no separate edge router, and no per-feature licence to negotiate.

Our Services

Solutions & Focus Areas

Seven jobs the subscriber edge has to do, and one forwarding path that does all of them. Same XDP data plane, same commodity server — termination, translation, traffic management and border routing become configuration, not four more boxes in the rack.

XDP BNG CGNAT

Port-block NAT44 with per-subscriber pressure sensing, plus NAT64 and MAP-T/MAP-E for IPv6-only access.

vBNG / BRAS

PPPoE and IPoE termination, RADIUS AAA with CoA, hierarchical QoS and QinQ — 50 Mpps per box.

OrionOS — hardened carrier image

Built from source into one signed artefact that boots to a RAM root. Every node verifiably runs the same code.

Internet Acceleration

Cache and accelerate at the edge — less upstream transit, faster page loads for subscribers.

IPTV / OTT

TV apps, edge cache, timeshift, VOD and EPG for operator-run television.

Edge security

Anti-spoof, DDoS mitigation and abuse containment at the subscriber edge, before traffic reaches your core.

BGP border router

Border routing on the same box that terminates subscribers — no separate edge router to licence.

Who you will actually talk to

Ten people who wrote the data plane

BNGSOFT is a team of ten. There is no support tier between you and the people who wrote the forwarding path — when a network card driver misbehaves at line rate, the person who answers is the person who fixes it.

That is why security patches ship in days instead of release trains, and why a proof of concept is a conversation with engineers rather than a procurement process.

Need Solution?

Contact us if you need a solution.