Start here
2New to BNGSOFT? These two first.
Satellite & fixed wireless
3LEO ground segment and long-RTT access networks.
Satellite CGNAT Cost per Subscriber
Ground Segment TCO
Satellite Ground-Segment BNG and CGNAT for LEO Operators
Satellite ground-segment BNG and CGNAT for LEO operators: one XDP data plane kills gateway bufferbloat and serves millions at ~$0.30 per subscriber.
Satellite Latency
Why the Gateway Queue Beats the Orbit
Comparisons & benchmarks
4Measured against the alternatives.
CGNAT & IPv4
19Address exhaustion, translation, and open NAT.
BNG, CGNAT and Edge Security on a Single Node
Carrier-Grade BNG and CGNAT Without the Carrier Price Tag
Carrier-grade BNG and CGNAT without the carrier price tag: one XDP data plane, up to ~64k subscribers per commodity server at about $0.30 per subscriber.
CGNAT Abuse
Stop One Subscriber Blocklisting the Shared IP
CGNAT and Open NAT
Why Gaming Still Breaks Behind CGN
CGNAT Conntrack Memory Sized to Real Session Counts
CGNAT conntrack memory sized to real session counts: a BPF arena faults memory in on demand instead of pre-reserving two worst-case tables. In validation.
CGNAT Logging for Lawful Intercept
IP:Port to Subscriber
CGNAT Migration
Replace a CGN Appliance Without a Flag Day
CGNAT Pool Steering
Shed Pressure Off Blocklisted IPs
CGNAT Software
Carrier-Grade NAT44 on Commodity x86
Full BNG and CGNAT Feature List, With Shipping Status
The full BNG and CGNAT feature list with shipping status on every entry — active, commissioned, conditional or roadmap — plus a sourced vendor comparison.
IPv4 Exhaustion
Four Transition Engines in One Data Path
IPv6 Dual-Stack and DS-Lite at Line Rate in XDP
IPv6 dual-stack and DS-Lite at line rate in XDP: each subscriber carries an IPv4 identity plus a transport /64 and a delegated prefix, both tracked.
IPv6 Rollout Sequence
Turning IPv4 Off Is the Project
MAP-T and MAP-E Border Relay
Stateless IPv4 Sharing
NAT64 and DNS64
Running an IPv6-Only Access Network
One XDP Data Plane
BNG, CGNAT, Edge Security, Fleet Ops
Per-Subscriber CGNAT Troubleshooting in One Command
Per-subscriber CGNAT troubleshooting in one command: public IP, pool, NAT type, port-block usage and a Symptom-Cause-Action verdict. Read-only and safe.
QinQ VLAN Stacking With CGNAT on the Same Box
QinQ VLAN stacking with CGNAT on the same box: 802.1ad subscribers translate natively in the XDP fast path, alongside single-VLAN ones, at line rate.
Standalone CGNAT Software
Carrier NAT Without a BNG
Security & DDoS
11Keeping attack traffic off the subscriber and off the gateway.
Anti-Spoofing and uRPF at the Subscriber Edge in XDP
BGP Border Routing on the Box That Terminates Subscribers
BGP border routing on the box that terminates subscribers: eBGP full tables, firewall, rate control and L4S in one pass. In development; no MPLS or IS-IS.
Block the Attack Without Blocking the Customer
Block the attack without blocking the customer: only the exact destination IP, port and protocol under attack is dropped. Armed and released automatically.
DDoS Protection at the Subscriber Edge
Keep Them Online
Edge Protection Suite
Network Abuse and Subscriber Safety
Interactive Flow Protection
Gaming and Calls on a Full Line
Low-Latency Broadband Suite
AQM, L4S and Flow Protection
Per-Victim DDoS Mitigation Instead of Chasing Source IPs
Per-victim DDoS mitigation instead of chasing source IPs: six attack classes rate-limited per subscriber in XDP, so CDNs and CGNAT egress are spared.
Stop Botnet Traffic at the Subscriber Port, Not the Core
Stop botnet traffic at the subscriber port, not the core: an inbound prefilter and outbound containment rate-limit a compromised CPE where it starts.
Subscriber Line Resale and Abuse Containment at the Edge
Subscriber line resale and abuse containment at the edge: proxy-app traffic is detected in XDP and the line isolated to a penalty IP, sparing the pool.
What Is in the BNG Image and How Fast Security Fixes Ship
What is in the BNG image and how fast security fixes ship: hardened by omission, signed with a RAM root, one reproducible artefact, a patch record.
Latency & experience
6Queueing, buffer control, and what the subscriber actually feels.
Autonomous QoE
a BNG That Learns Each Subscriber's Normal
Bufferbloat
Why a Full-Speed Line Still Feels Slow
Hierarchical QoS per Subscriber With Application Awareness
Hierarchical QoS per subscriber with application awareness: burst-aware speed and reseller aggregate caps in the XDP path, with no separate QoS appliance.
Keeping Broadband Fast Under Load
and Gaming Playable
L4S and AQM on the BNG
Low Latency, Not Just Speed
Subscriber Experience Management at the Broadband Edge
Operations & NOC
16Running the estate: monitoring, automation, day-two work.
Answer “My Internet Doesn’t Work” in One Command
Answer “My Internet Doesn’t Work” in one command: mode-aware checks resolve the IP to the live session and print a single most-likely root cause.
BNG Autopilot
214 Settings You Should Not Have to Tune
BNG Operator Handbook
Thirty Seconds Before the Phone Rings
Config Drift
Your Running Config Is Not What You Think
Is It the Subscriber, the Line, or Us? One-Search Triage
Is it the subscriber, the line, or us? One search on any identifier returns a verdict, the session, reconnect history and a live forwarding-plane read.
ISSU for a Software BNG
Upgrade Without Dropping Sessions
Know Before the Phone Rings
Proactive BNG Operations
Live BNG Console
Watch the Data Plane Run in Real Time
Mobile BNG Operations
Act on the Gateway From a Phone
NOC2
One Control Plane for a Whole BNG Fleet
One Command That Tells You What Is Wrong on the BNG
One command tells you what is wrong on the BNG: correlated checks across licence, RADIUS, CGNAT, QoS and NICs, each reported as Symptom, Cause, Action.
Per-Subscriber Flow Intelligence
Measure, Score, Remediate
Running State vs Config
Healthy and Still Dropping Packets
The Self-Driving BNG
One Box That Tunes Itself
Which Gateway Problem to Fix First
BNG Fleet Triage
Zero-Downtime BNG Upgrade in the Middle of the Afternoon
A zero-downtime BNG upgrade in the middle of the afternoon: sessions survive and addresses are kept — shown with 22,000 translated connections carried.
Platform & scale
15What the BNG is, what it runs on, and how far it goes.
12,000 Subscribers on One Commodity x86 Server
TCO
4,400 Subscribers on One 2016 Server
and Still Idle
BNG NIC and Driver Compatibility
What Actually Works
BNG Performance
Packet Rate Is the Number, Gbps Follows
BNG Resilience
Power Cuts, Fibre Cuts, Reconnect Storms
BNG Server Sizing
Throughput, Subscribers, Power and Cost
bngxdpd Datasheet
XDP BNG Daemon Specifications
Full-Core PPPoE
Every CPU Core Carries Its Share
How a Hyperscale Indian ISP Runs a Software BNG
How a hyperscale Indian ISP would run a software BNG: an illustrative model at ~20M subscribers on commodity servers, ground segment near $0.15 per sub.
How Many Subscribers Fit on One BNG Server? Measured
How many subscribers fit on one BNG server, measured: one runs 8,360 on 1.7 busy cores, another 2,200 on 17.5. CPU does not follow the subscriber count.
How to Compare BNG Platforms
What the Datasheets Hide
RADIUS AAA and CoA for PPPoE and IPoE Subscribers
RADIUS AAA and CoA for PPPoE and IPoE subscribers on one box: a standards-based NAS that writes each authorised plan straight into the XDP fast path.
Serve More Broadband Customers With Fewer Servers
Serve more broadband customers with fewer servers: accelerating the per-packet work cuts power and rack space, latency, and cost per subscriber.
Uplink Sizing Without Contention Ratios
Measured Demand
When the NIC Driver Crashes the Router, We Fix the Driver
When the NIC driver crashes the router we fix the driver: one live crash root-caused, twelve defects hardened across the 10/40/100G family, no downgrade.
More
11Everything else in the library.
Eleven Feature Switches
What Each One Actually Buys You
Air-Gapped BNG Procurement
Nothing Calls Home
BNG Cluster
Scaling Subscribers Across Multiple Nodes
BNG Migration Plan
Moving Subscribers Off the Old Box
Fault Localisation
Not Whether the Line Is Broken, Where
Find the Broken Line Before the Customer Calls
Find the broken line before the customer calls: per-subscriber loss and reorder measured over many windows, raised only when a line stays bad.
OrionOS
a Hardened Carrier Linux That Boots From RAM
QUIC Broke Your Measurements
Three in Four Subscribers
Should You Send a Technician? Decide From the BNG
Decide whether to send a technician from the BNG itself: the line is measured in both directions, so you know which side of the router the loss is on.
Subscriber Attribution
Map a Public IP:Port to a Customer
Wholesale Multi-Tenant BNG
Many Operators, One Platform