Session border control: CONTROL for service providers to make money from IP IC services Kevin Klett VP, Product Management

Border control – protecting the “goods” inside Transportation Geo-political Socio-economic IP data web/Int**net IP IC voice, video, multimedia New requirements New requirements Health

Free PC- PC Calls Mobile Services Evolution of IP interactive communications Opportunity Business Services Trunking Residential Services Int’l Toll Bypass Internet Offload Time Phase 1 Free Phase 2 Lower transport costs Phase 3 Valuable services $$$ PSTN-IP IP-IP

Breaking boundaries to end-to-end IP interactive communications IP Centrex Gaming Presence & IC VoIP origination/termination/transit Residential services Video conferencing Multimedia collaboration Pay per view video Business Residential Wired Wireless SecurityService assurance - SLA - Revenue - Profit Law enforcement Distance learning

Service provider issues ─ Control service access based upon L5 addresses – names & telephone #s ─ Protect service infrastructure from DoS attacks Hide softswitches, gateways, application & media servers Protect against IP attacks, call overload ─ Hide customers from suppliers, suppliers from customers Customer/subscriber issues ─ Utilize private CPE addresses with global reachability ─ Enable data firewall traversal without CPE or changes Security requirements between IP networks PSTN Transit & O&T HIP IC Services O&T HIP IC Services

SLA assurance requirements across IP networks Session admission control on access/transit links ─ Guarantee session capacity & quality on oversubscribed links ─ Gracefully reject sessions above capacity limits QoS mediation ─ Ensure high-quality QoS-based backbone transport without trusting QoS markings set by endpoints or other networks QoS-based routing to transit/termination networks QoS reporting - per session ─ Problem alerting & isolation ─ Admission control ─ SLA reporting PSTN MPLS NONE VLAN-2 NONE VLAN-2/TOS DiffServ-3 T1/E1 Frame DSL

Revenue & profit assurance requirements for IP service networks PSTN SIP H.323 SIP H.323 MGCP SIP SIP MGCP Service reach ─ Interwork signaling protocols to extend network reach & value Service theft ─ QoS theft - eliminate need to trust endpoint QoS markings ─ Bandwidth theft - prevent voice call to become high-bandwidth video call without authorization Service cost ─ Least cost routing to transit or termination networks Service accounting ─ Session activity including quality ─ Terminate & identify sessions set-up or ending improperly to minimize reconciliation costs

Law enforcement requirements for IP access networks Replicate and deliver specific sessions to multiple authorized law enforcement agencies transparently ─ Signaling messages ─ Media flows PSTN Transit & O&T HIP IC Services O&T HIP IC Services

Session border control required for high-quality interactive communications New product category enables high quality interactive communications across IP network borders Session – real-time, interactive communications using SIP, MGCP, H.323, Megaco/H.248 Border – IP-IP network border ─ Service provider-customer/subscriber ─ Service provider-service provider Control ─ Security ─ SLA assurance ─ Revenue & profit assurance ─ Legal intercept

Session border controller applications Peering VoIP providers PSTN O&T IP Transit Voice ASP services Calling card Directory Messaging Customer care centers Hosted IP IC services Voice & video Unified messaging Conferencing Presence & IC Multimedia collaboration Gaming IP PBX transport Residential Services Business Services IP Transit & PSTN O&T Calling card PSTN Origination & Termination PSTN Termination Directory PSTN Security Service assurance - SLA, revenue, profit Service assurance - SLA, revenue, profit Law enforcement

Session border controller applications Peering VoIP providers PSTN O&T IP Transit Voice ASP services Calling card Directory Messaging Customer care centers Hosted IP IC services Voice & video Unified messaging Conferencing Presence & IC Multimedia collaboration Gaming IP PBX transport Residential Services Business Services IP Transit & PSTN O&T Calling card PSTN Origination & Termination PSTN Termination Directory PSTN Security Service assurance - SLA, revenue, profit Service assurance - SLA, revenue, profit Law enforcement

VoIP trunking network peering B IP A $.03Europe 2Europe 1$.05 SIP H.323 SIP PSTN USA SIP-T, H.323, SIP-H.323 interworking, MGCP B2BGW Security - protect softswitch and gateways ─ Access control & topology L3 & L5 ─ DoS protection including call rate limiting ─ Overlapping address spaces SLA assurance ─ Call admission control - transit link bandwidth &/ observed quality ─ QoS reporting Revenue & profit assurance ─ Accounting & session timers ─ Routing – least cost, ToD, ASR, etc.

Hosted IP IC services – business & residential Security ─ Access control & network topology hiding ─ DoS protection including call rate limiting ─ Hosted NAT traversal ─ CPE address preservation SLA assurance ─ Session admission control - access & aggregated link bandwidth ─ QoS marking – 802.1p & q (VLAN) ToS, DiffServ, MPLS ─ QoS reporting Revenue & profit assurance ─ SIP, MGCP & H.323-SIP IWF ─ Bandwidth & QoS theft protection ─ Accounting & session timers Legal intercept PSTN Internet IP O&T or Transit PSTN Termination SIP MGCP SIP H.323 SIP & MGCP T1 DSL Frame SIP MGCP

Voice ASP services - calling card, directory services, messaging Security ─ Data center topology hiding & access control ─ DoS protection including call rate limiting ─ Hosted NAT traversal SLA assurance ─ App/media server load balancing ─ All call set up & media handled by Net-Net SD ─ Session admission control - access link bandwidth ─ L2 QoS marking p & q ─ QoS reporting Revenue & profit assurance ─ SIP, H.323 & SIP-H.323 interworking ─ Remote Net-Net SDs eliminate media backhaul costs ─ Routing – cost, quality, media profile, etc. ─ Accounting & session timers Legal intercept SignalingMedia Data Center SIP PSTN SIP H.323 Database(s) Accounting Call 1 Call 2

Under the hood - three technology architectures Back-to-Back Session Agent (B2BSA) Application Layer Gateway (ALG) MIDCOM

SIP B2BUA, H.323 B2BGK/GW, MGCP B2B GW/CA Breaks session into two segments for complete control Terminates and reinitiates signaling message & SDP with unique session IDs CAN respond to and initiate signaling messages e.g. REDIRECTs, reINVITEs, BYEs Back-to-Back Session Agent (B2BSA) architecture B2BSA Segment 1 Segment 2

Maintains single session through system Modifies addresses in signaling messages & SDP as they pass thru system CAN NOT respond to or initiate signaling messages e.g. REDIRECTs, reINVITEs, BYEs Application Layer Gateway (ALG) architecture ALG

MIDCOM architecture “Softswitch” for signaling – intelligent master Middlebox for media control – dumb slave MIDCOM protocol between for communication Middlebox support for signaling requires complex configuration Softswitch can be B2BSA or proxy Signaling arrives with L3 NAT completed by Middlebox, but L5 NAT incomplete Segment 1 Segment 2 MIDCOM MB

Comparing advanced features & benefits - B2BSA vs. ALG vs. MIDCOM B2BSAALGMIDCOM (w/ B2B signaling)

Net-Net Extending network reach is critical to increasing value Extending reach introduces new border control challenges ─ Security ─ Service assurance – SLA, revenue & profits ─ Law enforcement Session border controllers give service providers the CONTROL to deliver high quality and make money

Delivering peak performance for premium interactive communications across IP network borders