Key Events and Updates
Throughout the year, we have continued to actively enhance our products and are eager to highlight the key updates.
Release of SSG 13.2
In 2024, we released an updated version of SSG 13.2, featuring significant improvements and new capabilities.
Development of BNG Components
- Subscriber Activity Control: In IPoE mode, we added the ability to manage sessions with or without termination, reducing the risk of public IP address attacks and optimizing address space usage.
Learn more on the Wiki: https://wiki.vasexperts.com/doku.php?id=dpi:bras_bng:bras_l2_options:subs_activity - RADIUS Proxy: Load balancing across multiple RADIUS servers, supporting up to 16 servers simultaneously, improves system resilience.
- Local DHCP Server: Support for IPv4 and IPv6 enables local address allocation for subscribers.
- SHCV Functionality: Accelerates IP address release and subscriber deannouncement, particularly for inactive users.
Support for PPP over L2TP Authorization
This new feature allows clients to receive two IP addresses: one for the main interface and one for the L2TP tunnel, making SSG a versatile tool for heterogeneous network operations.
DNS Functionality Integration in DPI
- DNS Response Substitution: Operators can now distribute traffic across servers for a single domain, improving system resilience and reducing latency. Support for IPv4, IPv6, and wildcard records makes configuration simple and flexible.
- DNS Tunnel Detection: A signature mechanism has been introduced to identify illegitimate DNS traffic used for tunneling, enhancing network protection.
- Improved SNI Detection: Updated analysis algorithms ensure high accuracy in domain identification under challenging data transmission conditions.
Monitoring Systems
- SNMP-D and Syslog: New monitoring tools collect and transmit system state data.
Learn more on the Wiki: https://wiki.vasexperts.com/doku.php?id=dpi:dpi_components:platform:mon_stat:snmpd - VASE-CLI: A new command-line interface for centralized system component management.
Learn more on the Wiki: https://wiki.vasexperts.com/doku.php?id=dpi:dpi_components:utilities:vase_cli
TACACS+ Authorization Support
We implemented TACACS+ support for administrator access management, considering roles and permissions. This enhances transparency and security.
Learn more on the Wiki: https://wiki.vasexperts.com/doku.php?id=dpi:dpi_components:utilities:vase_cli
Launch of Stingray PCEF — A New Solution for Mobile Operators
Stingray PCEF, our new product for mobile operators, facilitates tariff management, traffic analysis, and personalized service offerings.
Event Participation
We actively participated in key telecom events, including:
- ABRINT in Brazil
- EXPO ISP in Colombia
These events enabled us to build new connections, showcase our achievements, and learn more about market trends.
Plans for 2025
BNG
- Support for Single Session for IPv4/IPv6
- Support for SLAAC for IPv6
- Development of Active-Active and Active-Standby redundancy schemes for BNG DHCP, PPPoE, VRRP
- Subscriber quota support with logic to switch tariff plans based on time-of-day (using fastPCRF logic)
- Dynamic service interfaces (access points) creation for Dot1Q and Q-in-Q ranges with specified connection types
- L3VPN implementation
- L2TP authorization development
- ICMP rate-limit and ARP rate-limit support
DPI
- Support for different IPv6 prefix lengths (currently fixed sizes like /64, /56, /48)
- Custom signature service development
- VLAN traffic mirroring
NAT
- NAT64 support to enable single-stack IPv6 usage and avoid routing table overflow
Conclusion
2024 has been a year of significant updates and functional expansions. We focused on enhancing authorization tools, improving system resilience, and integrating new monitoring and security mechanisms.
We look forward to the opportunities and projects that 2025 will bring.