Brochures & Datasheets

BNGSOFT at India Tier-1 Scale — A Reference Deployment Model for a Hyperscale ISP

An illustrative reference model: how a hyperscale Indian ISP (JioFiber/Airtel scale, ~20M home/FWA broadband subscribers) would run on BNGSOFT — the fleet of commodity servers, the ground-segment cost at ~$0.15/sub, the low-latency experience for end users, and how the NOC/support team triages faster with per-subscriber telemetry.

BNGSOFT Autonomous QoE — The BNG Learns Each Subscriber's Normal and Fixes the Ones That Drift

BNGSOFT Autonomous QoE learns each subscriber

BNGSOFT CGNAT Abuser Auto-Isolation — Protect Your Shared IP Pool's Reputation

BNGSOFT automatically moves a detected abuser (volumetric flood or fan-out scanner) off the shared CGNAT pool onto a dedicated penalty public IP — so one compromised device can

BNGSOFT CGNAT Arena Engine — Conntrack Memory That Tracks Real Sessions, Not the Ceiling

BNGSOFT

BNGSOFT CGNAT Per-Subscriber X-Ray — One Command Shows Every Detail of a Subscriber's NAT State

BNGSOFT

BNGSOFT Check-Engine — One Command: What's Wrong, Where, and How to Fix It

BNGSOFT

BNGSOFT Edge DDoS Protection — Stop the Botnet at the Subscriber Port, Not After It Floods Your Core

BNGSOFT runs DDoS protection inside the access BNG itself, on an XDP/eBPF data plane — no separate scrubbing appliance, no backhaul to a scrubbing centre, no per-Gbps mitigation licence. It defends both directions: an inbound autoblock prefilter against incoming floods, and outbound botnet containment that catches a compromised home router (Aisuru-class) flooding outward and rate-limits it at the very port it starts from — protecting the BNG and CGNAT state tables, your transit links, your IP reputation, and the neighbours on the same node. Per subscriber, line-rate, on commodity x86. Security brief with a fair comparison to dedicated scrubbing platforms.

BNGSOFT Edge Protection — Anti-Spoof · DDoS · Anti-Abuse · AQM · Interactive Flow Protection

BNGSOFT protects the network and the subscriber experience in one XDP data plane: per-subscriber anti-spoof (BCP38), in-data-plane DDoS protection, outbound anti-abuse quarantine, and L4S/AQM low-latency with Interactive Flow Protection — all at line rate.

BNGSOFT Flow Intelligence — Measure, Scavenge, Score & Remediate Subscriber Experience in the XDP Data Plane

BNGSOFT Flow Intelligence is a closed loop in the XDP data plane: passively measure per-flow download loss and split RTT into access (the line/Wi-Fi) vs transit (the internet), scavenge elephant/bulk flows only under real contention (L4S CE-mark or drop), score per-subscriber QoE 0–100, and auto-remediate suffering subscribers with hysteresis. Default-off, observe-first, integrated with CGNAT/QoS/security — no probes, no CPE agents, no kernel scheduler.

BNGSOFT for Satellite — Make the Link Feel Fast and Serve Millions on Scarce IPv4, at the Gateway

For LEO and GEO satellite ISPs: BNGSOFT runs BNG, carrier-grade CGNAT, per-subscriber QoS and L4S/AQM low-latency in one XDP data plane at the gateway — killing the bufferbloat that doubles satellite latency under load, and serving millions on scarce IPv4 at ~$0.30/subscriber on commodity x86.

BNGSOFT Gaming/RTC-Aware CGNAT — Mapping Stability on Full-Cone + EIF in the XDP Fast Path

BNGSOFT bngxdpd recognizes gaming/RTC flows in the CGNAT data path and keeps their mapping alive through quiet lulls — even on full-cone + EIF pools where every subscriber is already Open NAT. Extended (capped) idle timeout, port-block recycle protection, and steering immunity stop mid-match disconnects and lobby kicks. Also includes Auto Open-NAT promotion for operators running symmetric NAT by default. Default-off, observe→enforce.

BNGSOFT Hardware Sizing & TCO — NIC, Form-Factor, Power & Cost-per-Subscriber

Size an XDP BNG node by its two ceilings — traffic (NIC + PCIe bus) and subscribers (CPU + RAM). Compares Intel X710 / XL710 / E810 and NVIDIA ConnectX-6 Dx across 1U and 2U builds, with power, cost-per-subscriber and a 3-year TCO model.

BNGSOFT Intelligent DDoS Protection — Tell an Attack From a CDN, In-Line at Line Rate

A per-source packet-rate DDoS filter can

BNGSOFT Platform Overview — XDP BNG · CGNAT · Anti-Spoof · DDoS Protection · NOC2 Operations

BNGSOFT is a software Broadband Network Gateway

BNGSOFT Q-in-Q Subscriber CGNAT — Scale Your Access Network with VLAN Stacking, Translated Natively

Q-in-Q (802.1ad VLAN stacking) scales your access network far past the 4094-VLAN ceiling and gives every subscriber clean Layer-2 isolation. BNGSOFT bngxdpd translates Q-in-Q subscribers natively in the eBPF/XDP CGNAT fast path — both PPPoE and IPoE — and carries single-VLAN and Q-in-Q subscribers together on the same box at line rate. Upload SNAT through the full tag stack, download re-encapsulation of the exact S-tag + C-tag + PPPoE frame, bond-aware delivery. One CGNAT, both modes.

BNGSOFT Self-Healing CGNAT — Health-Aware Pool-IP Steering and Automatic Migration

BNGSOFT continuously scores each CGNAT pool public IP

BNGSOFT Subscriber Experience — A Connection That Stays Fast Under Load, and Gaming That Just Works

Two things subscribers actually feel, measured and fixed in the BNG data plane: (1) Responsiveness-under-load — a per-subscriber

BNGSOFT vs Cisco ASR 9000 vs Nokia 7750 SR — Chassis-Class Subscribers Without the Chassis

BNGSOFT vs Cisco ASR 9000

BNGSOFT XDP BNG vs MikroTik RouterOS — Scale, Cost & Latency for Large FTTH/CGNAT

MikroTik is an excellent, affordable router for the access edge — but for a large PPPoE/IPoE BNG with CGNAT, per-subscriber QoS and DDoS protection

BNGSOFT — Satellite Ground-Segment CGNAT for Millions at ~$0.30/Subscriber (LEO CFO Brief)

For LEO operators (Jio, Starlink and others): satellite runs on CGNAT — millions of terminals share scarce IPv4. BNGSOFT runs carrier-grade CGNAT + BNG + QoS in one XDP data plane on commodity x86 at ~$0.30 per subscriber, a fraction of a proprietary carrier-CGNAT chassis at scale.

BNGSOFT — Satellite Latency Is the Gateway Queue, Not the Orbit (LEO Exec Brief)

For LEO operators (Jio, Starlink and others): most satellite

BNGSOFT — The Software BNG: Size It, Compare It, Deploy It on Commodity x86

BNGSOFT is a software BNG that runs CGNAT, per-subscriber QoS, edge security and low-latency in one XDP/eBPF data plane on commodity x86 — up to ~64k subscribers per server at ~$0.30/sub. Size your build with the interactive calculator and compare against MikroTik, Cisco and Nokia.

bngxdpd — Datasheet

Hierarchical QoS · Carrier-Grade NAT · Stateful Firewall · DDoS Pre-Filter

Carrier-Grade Reliability — Surviving Power Cuts, Fibre Cuts & Reconnect Storms

A neighbourhood power cut ends with every subscriber reconnecting at once

CGNAT Migration — Swap Your CGN Appliance with Zero Downtime · BNGSOFT

Edge Security Suite — Executive Overview

Full CGNAT — BNGSOFT BNG + Carrier-Grade NAT in One XDP Data Plane

Interactive Flow Protection (IFP) — Gaming, Calls & ACKs Stay Fast Under Load

L4S/AQM keeps the bulk-traffic queue short. Interactive Flow Protection (IFP) makes sure your latency-sensitive flows never wait behind a bulk download in the first place.

Low Latency Under Load — L4S Dual-Queue AQM for the XDP BNG

Your subscribers already get the megabits you sold them. But the thing that actually makes the internet feel

Native IPv6 & Dual-Stack — Full-Speed v6 Forwarding, DS-Lite, and IPv4-Pool Relief

IPv6 on the BNGSOFT XDP BNG is not a slow-path afterthought. Every subscriber runs IPv4 and IPv6 simultaneously

Network Data-Plane Acceleration — Cost & Performance Guide

Your broadband gateway processes every subscriber's traffic. Accelerating that work means fewer servers, less power and space, lower latency — and a lower cost per subscriber.

NOC2 — The ISP Operations Platform for the XDP BNG Era

NOC2 is the operations platform that turns the BNGSOFT XDP BNG fleet into a single observable, controllable, and customer-facing service — triage, impact, AQM/IFP visibility, public status, bulk actions, self-healing, RPKI hygiene.

Operations Intelligence — One-Command Subscriber Diagnostics & Predictive Capacity Planning

Two operator-facing tools built into the BNGSOFT XDP BNG: one-command subscriber diagnostics

OrionOS — A Hardened, Purpose-Built Carrier OS That Does in One Commodity Box What a Chassis Does in a Rack

OrionOS is BNGSOFT

Performance, Scale & TCO — One Commodity XDP Server Instead of a Chassis BNG

The entire BNG data plane — subscriber forwarding, CGNAT, firewall, per-subscriber QoS and AQM/L4S — runs in XDP at the NIC driver, before the kernel network stack

QoS & App-Aware Traffic Management — Per-Subscriber Shaping, VLAN Groups & Application Policy in XDP

Per-subscriber hierarchical shaping, burst-aware speed, VLAN/reseller aggregate caps, and application-category policy — enforced in the XDP fast path on the same box that does CGNAT and firewalling. No separate QoS appliance, no hairpin, no per-subscriber QoS licence.

Regulatory Compliance — CGNAT Logging, Lawful Intercept & Subscriber Traceability

Data-retention and lawful-intercept mandates require that every

Standalone CGNAT — BNGSOFT Carrier-Grade NAT

Subscriber Experience Management Suite — Executive Overview

Subscriber Management & AAA — PPPoE/IPoE Access, RADIUS, CoA & Per-Plan Policy at Line Rate

PPPoE and IPoE subscribers on the same box

The Low-Latency Suite — AQM + L4S + IFP for the XDP BNG

Zero-Downtime Operations — Hitless In-Service Software Upgrades (ISSU) on Commodity Hardware

Hitless In-Service Software Upgrades (ISSU)