vBNG / BRAS

PPPoE and IPoE termination on commodity x86.

Subscriber sessions, RADIUS AAA with CoA, hierarchical QoS and QinQ — one XDP data plane on one server. No appliance, and no per-subscriber licence tied to hardware.

ACCESS · QinQ Line 1S:100 C:11 · PPPoE Line 2S:100 C:12 · IPoE Line 3S:201 C:07 · PPPoE vBNG / BRAS SESSION TERMINATION · IN KERNEL PPPoE · PAP / CHAP IPoE · DHCP / option 82 hQoS · per-sub shaping RADIUS AAA auth · acct · CoA CoA Uplink BGP · 802.3ad SESSION TABLE · LIVE SUBSCRIBER STATE ADDRESS PLAN SINCE line1@isp up 100.64.0.11 200/50 04:12:08 line2@isp up 100.64.0.12 500/100 19:44:31 line3@isp up 100.64.2.07 100/20 02:07:55 50 Mpps · ALL FEATURES ENABLED sessions survive an in-service upgrade — no re-authentication

50 Mpps

per box with PPPoE, IPoE, CGNAT, hierarchical QoS and ACLs all enabled

< 1 s

session-plane upgrade — no re-authentication, same identities

1,000 / 1,000

sessions preserved through an in-service upgrade

0

per-subscriber licence tied to hardware

One subscriber session, start to finish

From the first PADI to the Accounting-Stop, and what lands in the data plane at each step. Against the RADIUS you already run.

    Test this on your own RADIUS →

    BNGSOFT BNG/BRAS Feature List & Highlights

    Every feature below runs on the same forwarding path, on one commodity server. Expand a group to see what is implemented today — protocols, scale limits and the behaviour under load.

    • Dual Stack IPv4 and IPv6
    • IPv6 auto-configuration
    • IPv4/IPv6 tunneling
    • IPv4/IPv6 filteting
    • Network address translation
      • BGP4, BGP4+, MP-BGP with RPKI for secure, scalable routing.
      • IS-IS, IS-ISv6, OSPFv2, OSPFv3 for robust link-state routing.
      • RIPv1, RIPv2, RIPng for simple distance-vector routing.
      • Static Routes with path monitoring and support for multiple routing tables.
      • BGP Multi-Path (ECMP) for efficient load balancing.
      • Policy-Based Routing (PBR) for granular traffic control. 
      • MPLS and Segment Routing (SR) for advanced traffic engineering. 
      • Bidirectional Forwarding Detection (BFD) for rapid fault detectio

    High-Capacity and Secure Routing Features:

    • 5M Route RIB/FIB capacity for extensive routing scalability. 
    • Support for 6PE, GRE, IPSec for flexible and secure tunneling. 
    • Comprehensive IPv4 and IPv6 support. 
    • Virtual Routing and Forwarding (VRF) for network segmentation.

    Advanced Traffic Management & QoS

    • Per-Interface Rate Limiting with precise control
    • Hierarchical QoS (H-QoS) for multi-level traffic shaping
    • Token Bucket Filter with extended burst capabilities

    Intelligent Traffic Classification & Remarking:

    • Classification based on ToS, IP Precedence, DSCP, VLAN, and ACLs (L3/L4)
    • Support for IPv4/IPv6 ACLs, Class-Map, and Policy-Map configurations
    • Committed Access Rate (CAR) for guaranteed bandwidth allocation

    Optimized Queuing & Forwarding:

    • Priority Queuing with Class-Based Weighted Fair Queuing (CBWFQ)
    • Express Forwarding, Best Effort, and 4 Additional Priority Levels for granular traffic prioritization
    • DNS server
    • NTP
    • Token bucket filter with extended burst
    • RADIUS and Local AAA
    • Multi-RADIUS failover or load
      balancing
    • HTTP / HTTPS Redirect
    • Captive Portal and Walled
      Garden
    • Radius specified Access
    • Public & Vendor RADIUS Attributes
    • RADIUS set QoS profiles and
      service attributes (IP, MTU,
      Bandwidth)
    • RADIUS COA, DMCOA
    • VLAN (802.1Q, QinQ)
    • LAG (802.3ad, LACP)
    • Ethernet brigde
    • ACLs (stateless & stateful)
    •  BGP FlowSpec (IPv4, IPv6)
    • Secure Access & Monitoring:
      • SSHv2 for encrypted, secure remote access
      • CLI for intuitive, command-line control
      • SNMP for streamlined network monitoring
      • Syslog for real-time system logging and diagnostics

    Network Discovery & Flow Analysis:

    • 802.1ab (LLDP) for efficient device discovery
    • IPFIX / NetFlow v10 for granular traffic flow analysis

    Integration & Automation:

    • API support for seamless third-party integrations
    • Telegraf for advanced metrics collection
    • NOC-ready for centralized network operations

    Comprehensive DHCPv6 & IP Management:

    • Prefix Delegation with advanced configuration
    • Support for DHCP Options 60 & 82
    • Local or Proxy DHCP server capabilities
    • Full IPv6 NDP support with Stateful and Stateless auto-configuration
    • Robust IP Address Pool Management
    • Separate pools for IP addresses, prefixes, and delegation requests
    • Flexible Dynamic or Static IP Assignment with Framed-IP and Framed-Route

    Security & Compliance:

    • Built-in support for Lawful Intercept
    • Comprehensive Traffic Classification and Remarking based on ToS, IP Precedence, DSCP, VLAN, and Layer 3/4 ACLs.

    • Full support for IPv4/IPv6 Access Control Lists (ACLs).

    • Flexible Class-Map and Policy-Map configurations for tailored traffic policies. 

    • Committed Access Rate (CAR) for precise bandwidth management. 

    • Priority Queuing integrated with Class-Based Weighted Fair Queuing (CBWFQ) for optimized traffic flow. 

    • High-performance Express Forwarding and Best-Effort handling, plus four additional priority levels for granular control.

    • Comprehensive PPPoE/IPoE Support
    • Broadband Forum Compliance:
      Adheres to TR-101, TR-146, TR-177, TR-178, TR-203, TR-300, TR-345, and TR-459 standards.
    • Advanced Subscriber Management:
      • RADIUS Authentication with dynamic Subscriber Identification
      • Dynamic Policy Management for flexible service control
      • Per-Subscriber Policing, Classification, and Queuing for optimized traffic handling
    • Robust DHCP/DHCPv6 Capabilities:
      • DHCPv6 Prefix Delegation with support for Options 60 & 82
      • Local or Proxy DHCP configurations
      • Full IPv6 NDP support with Stateful and Stateless Auto-Configuration
      • IP Address Pool Management with separate pools for addresses, prefixes, and delegation requests
      • Flexible Dynamic or Static IP Assignment using Framed-IP and Framed-Route
    • Security & Compliance:
      • Built-in Lawful Intercept capabilities
    • CLI
    • BNGSOFT GUI
    • IPFIX
    • REST APIs
    • SNMPv1, v2c, v3
    • SSHv2
    • Syslog
    • NTPv4
    • Packet Capture
    • IEEE 802.1Q, IEEE 802.1QinQ
    • PPP over Ethernet (RFC 2516)
    • IPoE, including VLAN per subscriber with IP unnumbered support
    • Link Aggregation (LACP)
    • IPv4 (including ARP, proxy ARP, ICMP, DHCP)
    • IPv6 (including ICMPv6, DHCPv6( in Beta
    • Ethernet: 1Gbit/s, 10 Gbit/s, 40 Gbit/s, 100 Gbit/s
    • Up to 120 Gbit/s at ~280-byte average frames — 50 Mpps with PPPoE, CGNAT, hierarchical QoS and ACLs all enabled. Packet rate is the limit, so bandwidth follows your frame size: 33.6 Gbit/s at 64-byte worst case, ~144 Gbit/s at IMIX. (Performance depends on the hardware platform — CPU, NIC, RAM.)
    • VRRP
    •  N+1 Redundancy with PADO and
      DHCP Delay (for BNG)
    • Control Plane Hot Standby
    • MPLS Support (RFC 3031)
    • Label Edge Router (LER) and Label Switch Router (LSR) functionality
    • Label Distribution Protocol (LDP) for efficient label management
    • Supports both Static and Dynamic Label Switched Paths (LSPs)

    Flexible Subscriber Session Management & Authentication

    Session Termination Protocols:

    • PPPoE and IPoE for versatile subscriber session handling
    • L2TP support for tunneling and VPN integration

    Robust Authentication & Accounting:

    • RADIUS authorization with PAP and CHAP support
    • Full RADIUS Accounting for detailed session tracking
    • Web and Circuit-Based Authentication for flexible access control

    Standards-Compliant Protocol Support:

    • Fully RFC-compliant for PPPoE, LCP, IPCP, PAP, CHAP, and IP Address Pools
    • Advanced features: PADO Delay, PADI Rate Limiting, and Change of Authorization (CoA)

    Comprehensive IP & DHCP Management:

    • Support for IPoE/DHCP, PPPoE, and L2TP
    • DHCPv4, DHCPv6, and DHCPv6 LDRA for advanced lease and relay configurations
    • Flexible addressing options: IPv4, IPv6, and Dual-Stack

    Advanced Network Models:

    • Layer 3 (L3) Routing, IP Host mode, and Leased-Line configurations
    • Full-cone or Symmetric
    • Static and dynamic NAT44
    • Application-level gateways (ALG) for TFTP, PPTP, FTP, SIP
    • AIM and EIF Support
    • Session Logging for Compliance
    • Dynamic Session allocation
    • NAT Fragmentation protection

    Why operators run vBNG / BRAS on BNGSOFT

    Subscriber termination, CGNAT, hierarchical QoS and ACLs run in one XDP data plane on a commodity x86 server — 50 Mpps per box with every feature enabled. No appliance to buy, no per-subscriber licence tied to hardware, and in-service upgrades that keep every session.

    Software Flexibility

    Innovative flexible software-based solution with fast integration and excellent adaptivity in new features.

    Cost Effectiveness

    Effective solution for different locations in one platform. Reasonable pricing for maximum flexibility.

    High - valuable technology

    Highly valuable technology for any service provider. This is why BNGSOFT stands out among solutions as a platform that will scale with your users and workload, and allow you to painlessly extend your services.

    No hardware vendor-lock

    Can be installed on any supported hardware equipment that meets the minimum requirements.

    QoS

    Enforces quality of service policies

    Greater scalability

    High–performance networking software with highly valuable technology for any service provider. As the ISP`s network grows, its performance and bandwidth resources are exhausted. No matter how much bandwidth you provide, the evolving telecom market will need more as there are more and more devices and applications used every day. In addition, it complicates administrations, increases electricity bills, and requires more space to install the equipment.

    AAA Integration

    BNGSOFT BNG seamlessly integrates with AAA servers to authenticate subscribers and manage session accounting. With full RADIUS support, it ensures real-time synchronization with billing systems, enabling precise identity authentication, service authorization, and charge calculations. Configurable internet access controls and detailed session management provide refined operational services, while comprehensive statistics collection ensures transparent, efficient subscriber management.

    High Security

    Own high security OS.

    High -performance

    High - performance networking software

    L2/L3 protocols

    802.1Q, 802.1AD, L2TP, LACP, VxLAN, GRE, IPSec, OSPF, BGP, IS-IS (and lots more)

    Easy management and control

    Unified CLI for management and NOC

    Traffic management

    Traffic Accounting and filtering

    365 / 24 / 7

    Full support all around the world.

    FAQ

    Common questions

    1. Scalability: Designed to scale horizontally, BNGSOFT BNG SOLUTION accommodates the growing number of subscribers and increasing bandwidth demands as ISPs expand their customer base.

    2. Quality of Service (QoS): BNGSOFT BNG SOLUTION plays a crucial role in implementing QoS policies, ensuring a consistent and reliable internet experience for subscribers.

    3. Security Features: BNGSOFT BNG SOLUTION integrates robust security features, including firewalls and intrusion detection systems, enhancing the overall security of ISP networks.

    4. IPv6 Support: With IPv4 addresses depleting, BNGSOFT BNG SOLUTION supports the transition to IPv6, providing a larger address space for the growing number of connected devices.

    5. Billing Integration: BNGSOFT BNG SOLUTION integrates integrate with billing systems, simplifying billing processes, ensuring accurate invoicing, and supporting various billing models.

    6. Reliability and Redundancy: BNGSOFT BNG SOLUTION contributes to network reliability by supporting redundancy and failover mechanisms, minimizing downtime for ISPs.

    7. Efficient Resource Allocation: BNGSOFT BNG SOLUTION optimizes network resource utilization, ensuring bandwidth is allocated efficiently for a responsive and high-performance network.

    8. Analytics and Reporting: BNGSOFT BNG SOLUTION provides valuable analytics, offering insights into user behavior, network performance, and usage patterns, aiding in data-driven decision-making.

    9. Regulatory Compliance: BNGSOFT BNG SOLUTION assists ISPs in complying with industry regulations and standards related to data privacy, retention, and network management.

     

    Benefits for Telcos:

    1. Subscriber Management: BNGs enable telcos to manage and control subscriber sessions securely, offering personalized services.

    2. Scalability: BNGs accommodate the growing number of subscribers and increasing bandwidth demands, supporting telcos as they expand their customer base.

    3. Quality of Service (QoS): BNGs play a crucial role in implementing QoS policies, ensuring a consistent and reliable internet experience for subscribers.

    4. Security Features: BNGs integrate robust security features, including firewalls and intrusion detection systems, enhancing the overall security of telco networks.

    5. IPv6 Support: BNGs support the transition to IPv6, providing a larger address space for the growing number of connected devices in telco networks.

    6. Billing Integration: BNGs integrate with billing systems, simplifying billing processes, ensuring accurate invoicing, and supporting various billing models for telcos.

    7. Reliability and Redundancy: BNGs contribute to network reliability by supporting redundancy and failover mechanisms, minimizing downtime for telcos.

    8. Efficient Resource Allocation: BNGs optimize network resource utilization, ensuring bandwidth is allocated efficiently for a responsive and high-performance network.

    9. Analytics and Reporting: BNGs provide valuable analytics, offering insights into user behavior, network performance, and usage patterns, aiding in data-driven decision-making.

    10. Regulatory Compliance: BNGs assist telcos in complying with industry regulations and standards related to data privacy, retention, and network management.

     

    It depends on your busy-hour throughput, your subscriber count and which features you enable. As a starting point: an 8-core box with a dual-10G X710 covers a small edge site, 16 cores with a dual-100G E810 covers around 100 Gbps, and a 2U dual-socket with two E810s covers about 200 Gbps. Reference builds and the full adapter matrix are on the Products page — or send us your peak throughput and we will size it against your own telemetry.

    BNGSOFT solutions are billed on a traffic-based or scriber-based, depending on the customer. 

    The prices depend  on customer care and support needs.

    The customer can choose by bank or via card online.

    BNGSOFT engineers in a server room planning a vBNG / BRAS and CGNAT deployment

    Contact Us

    support@bngsoft.com

    One data plane does termination, translation, shaping and filtering.

    Our Services

    Solutions & Focus Areas

    Six things the subscriber edge has to do, and one forwarding path that does all of them — the same XDP data plane on the same commodity server, with no separate appliance per function.

    vBNG / BRAS

    PPPoE and IPoE termination with RADIUS AAA, CoA applied to the live forwarding plane, QinQ access and per-subscriber hierarchical shaping.

    XDP CGNAT

    Port-block NAT44 in the forwarding path — no per-flow connection tracking, one log record per block, and idle reclaim that tightens as the pool fills.

    IPTV / OTT

    White-label streaming platform: CMS and playout, apps for Android and Android TV, VOD and live channels, visible and forensic watermarking.

    BGP border router

    Transit forwarding with eBGP and FRR as the routing authority, on the same commodity server. Design complete and reviewed — not yet running in a network.

    Internet acceleration

    Transparent caching and local peering for the traffic that is still cacheable — HTTP objects and P2P — billed on the upstream traffic it saves you.

    OrionOS — hardened carrier image

    Kernel, forwarding path and BNG daemon built from source into one signed artefact that boots to a RAM root. No package manager, no shell, no drift.

    The briefs behind this page

    Seventeen technical briefs cover the platform, sizing and scale in detail.

    Hardware requirements for vBNG / BRAS

    Minimum HARDWARE REQUIREMENTS:

    32 GB RAM minimum (64 GB at 40G, 128 GB at 100G) with all memory channels populated | INTEL / AMD x86-64 | Intel X710 / XL710 / E810 or NVIDIA ConnectX-6 Dx (i40e, ice, mlx5 drivers) | Linux kernel 5.10 or newer | USB Flash / SATA DOM

    About BNGSOFT

    Ten people who wrote the data plane

    There is no support tier between you and the engineers who built the forwarding path. When you report something in the data plane, it reaches the person who wrote that code path. More about how we work →

    Need Solution?

    Contact us if you need a solution.