In one of our previous publications, we analyzed the reasons behind Sandvine’s exit and the main risks for operators. Now, we will focus on comparing the functionality of Sandvine (AppLogic Networks) and Stingray Service Gateway (SSG) from VAS Experts.
In this article, we will explain why Stingray Service Gateway is a worthy alternative to Sandvine and its advantages, as well as present a real migration case. For objectivity, we have chosen criteria based on operators’ requirements, deployment experience, and typical SLAs.
Solution Comparison: Sandvine vs Stingray Service Gateway
| Function | Sandvine | Stingray Service Gateway |
| IP and subscriber mapping DPI correctly handles subscribers using multiple logins or IP addresses. |
Yes | Yes – SSG supports binding multiple logins and IP addresses. Mapping is done via RADIUS, GTP, BGP. |
| Advanced policy management DPI allows combining various actions and variables through attributes to implement advanced, dynamic policies. |
Yes | Yes – SSG can manage policies based on subscriber profile, tariff, additional service packages, session state (e.g., location, roaming), time of day, day of week; detect and limit tethering traffic; create policies for content filtering/caching; control traffic quotas at subscriber and application level. Supports RADIUS and DIAMETER protocols. |
| Customizable analytics and reports API for external management and integration with OSS/BSS systems. The API makes analytics highly customizable, enabling tailored reports for specific operator needs. Reports may cover operational as well as marketing analytics for various operator departments. |
Yes – Provides an open API based on SOAP protocol. | Yes – Provides a REST API. VAS Experts also offers a QoE module that collects metadata from DPI. QoE is based on Clickhouse — the fastest analytics database in the world. Analytics supports a simple SQL API accessible to any customer. |
| Global reporting Allows operators to see subscriber and application behavior across the entire network. |
Yes | Yes – Built-in reports and flexible filters enable generating any type of report, with the option to send by email. |
| Asymmetric traffic The solution includes algorithms to correctly handle asymmetry when the operator has multiple data centers with distributed traffic. |
Yes | Yes – SSG uses two algorithms to handle asymmetry. The first mirrors only outbound traffic from one node to another to clarify sessions. Suitable for 2–3 data centers. The second transfers only metadata between DPI clusters. Used when more than three data centers are involved. |
| Redundancy and load balancing Each solution component is duplicated. Bypass ensures high availability. Load balancing is used when building a large DPI cluster. |
Yes – N+1 redundancy scheme is offered. | Yes – N+X redundancy. Load balancing enables flexible rule application and reduces CAPEX and OPEX costs for the operator. |
| DPI cluster scaling | Yes – Virtual Switch Cluster scales the solution up to 8 Tbps. | Yes – The solution works without virtualization. Installation on bare-metal servers ensures high performance and simple management. SSG scales up to 4.6 Tbps. |
| Advanced traffic detection DPI combines signature-based and behavioral analysis, allowing detection of even encrypted or complex protocols and minimizing false positives. |
Yes | Yes – SSG contains over 6000 signatures, including popular services, messengers, and VPNs. Regular updates ensure high accuracy in traffic recognition. The current list of protocols is available on our wiki. |
| Tethering detection DPI uses heuristic analysis with an extended set of rules. The algorithm is accurate enough to minimize false positives. |
Yes | Yes – SSG analyzes subscriber behavior and their device, providing high accuracy in detection. |
| Customizable signatures Most localized applications can be identified by IP or URL. The proposed solution allows quick creation of such signatures for fast support of local services. |
Yes | Yes – VAS Experts has a global probe network and an API for creating custom signatures. |
| Flexibility and ease of deployment DPI works as an L2 bridge. The solution does not require routing changes or complex configuration. Scaling is possible by simply adding equipment. |
Yes | Yes |
Additional advantages of Stingray Service Gateway
DPIUI2 Web Interface
Management and analytics via web browser without the need to install separate applications.
FilterUI Web Interface
For managing policies on multiple DPI systems simultaneously.
QoE Module on ClickHouse
Fast report generation. Flexible aggregation storage to save disk space.
Online reports with aggregation up to 5 seconds
Enable quick identification of subscriber or network issues during initial troubleshooting.
Report filtering and export
Creating reports for any use case with flexible filters and settings, export to XLSX, CSV, PDF, PNG, sending on schedule or triggers via email, Telegram, and other third-party services.
Custom protocols
Ability to add up to 4096 custom signatures based on IP, SNI, ASN, as well as grouping them.
GUI – Custom Protocols section
Compatibility Features with Sandvine
Stingray Service Gateway is fully compatible with Sandvine functionality:
- Support for IP-to-subscriber mapping (RADIUS, GTP, BGP);
- Flexible policy management (profile, tariff, VAS, roaming, tethering, scheduling);
- Creation of custom signatures for local applications;
- Integration with OSS/BSS via REST API;
- Compatibility with IPv6, CG-NAT, BNG;
- Support for CUPS (control/user plane separation);
- 24/7 technical support in Russian and English.
Real Migration Case
One Middle Eastern operator, faced with Sandvine’s departure, chose SSG as a replacement.
Goal: Replace Sandvine DPI, scale infrastructure, improve analytics.
Project stages
- Confirm compliance with requirements (per RFP);
- Sizing and architecture design;
- Equipment delivery;
- Implementation and testing on traffic mirror;
- Localization (e.g., development of signatures for regional applications);
- Client personnel training;
- Pilot launch on live traffic;
- Full transition and commissioning.
Results
- More than 100 new cloud and embedded signatures created for popular regional services.
- Additionally, the client independently added over 500 custom protocols via GUI.
- Added ability to edit protocol groups: add new, rename standard, change their composition.
- Developed VoIP reports detailing subscribers, applications, and minutes.
- QoE reports adapted to customer needs, including automated distribution.
- Successful migration preserving all critical parameters and improving analytics.
VoIP report – Distribution of subscribers, calls, and minutes by protocols
Conclusion
The departure of Sandvine (AppLogic Networks) created a need for an alternative, but also provided an opportunity to upgrade infrastructure: to move to a platform with a more flexible architecture, enhanced analytics capabilities, and improved performance.
Stingray Service Gateway by VAS Experts offers:
- Installation on any x86 server without virtualization
- Performance up to 4.6 Tbps and proven stability
- Full compatibility with existing infrastructure.
- Flexible scaling, adapting to traffic growth and changing requirements
- Fast and accurate analytics
- Tools for policy migration and operator team training
- Solution tested in large real-world projects
Contact us to learn more about Stingray Service Gateway when migrating from Sandvine.
