Securing, Connecting & Optimizing your Network
Internet Service Provider plays a major role in this internet-based world. CORUS INFOTECH support our clients to build their infrastructure to provide internet services to customers in a good quality. We prefer a scalable and cost effective solutions which never compromise quality.
Our DNS Server is an open-source tool that can be used for self-hosting a local DNS server for privacy & security. It works out-of-the-box with no or minimal configuration and provides a user-friendly web console access.
Nobody really bothers about domain name resolution since it works automatically behind the scenes and is complex to understand. Most computer software uses the operating system’s DNS resolver that usually queries the configured DNS server using UDP protocol. This way works well for most people but, ISP can see and control what website you can visit even when the website employs HTTPS security. Not only that, some ISPs can redirect, block or inject content into websites you visit even when you use a different DNS provider like Google DNS or Cloudflare DNS. Having our DNS Server configured to use DNS-over-TLS or DNS-over-HTTPS forwarders, these privacy & security issues can be mitigated very effectively.
With a fully configurable DNS server running on your local server, you can configure not just simple A records (for IP address) but, also configure other types of records like CNAME or MX, etc. This allows you to have more control and power when you want to do testing that simulates the exact configuration that you have running on production.
CORUSvBNG powered by TheRouter
This is an application that successfully implements Network Function Virtualization
concepts. This vBNG is primarily designed to solve problems facing broadband Internet
access providers and digital services operators who work directly with significant amounts
of subscribers and process large volumes of traffic at speeds from 10 to 80 Gbit per second.
The use of modern approaches and best algorithms allows our vBNG efficiently use
affordable and widely available x86-based server equipment thereby replacing high-cost
proprietary equipment.
Benefits
usage of standard x86 servers
• sufficient cost cutting (up to -70%)
• simplified delivery and deployment
• improved flexibility and scalability: scaled up and down elastically
• pay-as-you go model: you purchase the only product and volume of service you need
Specifications
Physical interfaces
Ethernet: 1Gbit/s, 10 Gbit/s, 40 Gbit/s, 100 Gbit/s
Performance
Up to 80 Gbit/s, up to 40Mpps.
Performance depends on a hardware platform (CPU, NIC, RAM)
Ethernet :
IEEE 802.1Q, IEEE 802.1QinQ, PPP over Ethernet (RFC 2516), IPoE,
DHCP, Link Aggregation (LACP)
IPv4
IP unnumbered, ARP, proxy ARP, ICMP, VRRP
IPv6
ICMPv6, Neighbor Discovery Protocol, Duplicate address detection,
Neighbor Unreachability Detection, MLD v1, MLD v2, SLAAC, VRRP v3
Routing protocols
Multiple Routing Tables, Static routes, PBR, BGP (ipv4, ipv6), OSPF
(ipv4, ipv6), IS-IS (ipv4, ipv6) RIP, RIPv2
IPoE BRAS/BNG
Ipv4 support, IPoE L2 and L3 connected subscribers, QoS and HQoS:
Policing (token bucket filter with extended burst value), Shaping, RED,
DHCP relay, DHCP option82 rewrite function, subscribers traffic
redirection based on multiple routing tables and PBR, Radius/CoA,
Radius accounting, CoA
Support up to 80000 subscribers
PPPoE BRAS/BNG
IPv4 and IPv6 support, RADIUS authorization (PAP and CHAP), RADIUS
accounting, Profiles, Multi Radius, PADO delay, limit PADI rate, CoA, QoS
and HQoS: Policing (token bucket filter with extended burst value),
Shaping, RED, TCP MSS FIX, subscribers traffic redirection based on
multiple routing tables and PBR, Full RFC-compliant support PPPoE, LCP,
IPCP, PAP, CHAP, IP address pools
support up to 80000 subscribers
Security :
ACL, Stateful and stateless firewall (NPF)
Network address translation
Address and Port-Dependent Mapping, Endpoint Independent Mapping,
Deterministic NAT, up to 10M translations, Paired IP address pooling, ALG
support: ICMP, PPTP
Statistic
Flow accounting (IPFIX), NAT events logging (IPFIX, Netflow v9)
Configuration and management
CLI, SSH
Carrier Grade NAT
SNAT44, DNAT44
EIM, Endpoint Independent Mapping
NAT session/translation limit per host
Deterministic address and port selection
Bison Router software-based, or virtual BNGs are designed to deliver unmatched performance and scalability on low-cost white box servers. It brings the flexibility and agility operators need to quickly address opportunities in today’s changing market defined by an ever-increasing demand for bandwidth and a growing complexity of application handling. The BNG establishes and manages subscriber sessions by acting as the authentication point through which subscribers connect to a carrier’s broadband network. It aggregates subscriber traffic from the access network and handles several important management functions, including authentication, authorization and accounting , IP address assignment ,Quality of service (QoS), and Policy of management.