Service Inspection Gateway (SIG9800)

HUAWEI TECHNOLOGIES CO., LTD.

Service Inspection Gateway (SIG9800)

Product Overview
It has become a trend for communications networks to be integrated with IP networks. The controllability of communications networks, however, goes into deep conflict with the open nature of IP networks. As a result, traditional communications networks have to bear the brunt of IP networks. With the advent of the 3G age, operators have increasing requirements for network optimization, service differentiation, and real-time and online accounting. With the changes in market environment, business transformation has become an inevitable choice for operators. Learning more details about networks helps operators to realize granular operation. The SIG9800 series product (hereinafter referred to as the SIG9800) is a family of high-capacity professional Deep Packet Inspection (DPI) devices developed by Huawei based on mature high-end router hardware platform. The SIG9800 can dynamically manage bandwidths of high-density large-capacity interfaces, such as 10G POS and 10G WAN/LAN interfaces, according to flexible policies. Huawei SIG system supports a maximum of 80 SIG9800s, providing up to 2000 Gbps link bandwidths and meeting the DPI requirements of a large-sized network with 10 million users. The SIG9800, adopting multiple patented inspection technologies, analyzes and processes packets based on a high-performance hardware platform. In addition, the SIG9800 provides intelligent and flexible service control measures to analyze traffic, manage bandwidth, and ensure network security on both wireless and fixed networks. The SIG9800, supporting distributed deployment and centralized management, is easy to scale up. Huawei integrated DPI solution is based on the SIG9800. This
1

Product Series

SIG9810

SIG9820

solution can help operators to meet the challenges brought by network transformation. With service visualization and granular bandwidth management, the DPI solution provides individualized value-added services, helping operators to realize refined network operation.

Service Inspection Gateway (SIG9800)

Product Features
Compatible with 3GPP
The design meets the development trend of the telecom industry and complies with the 3GPP-PCC standard design product architecture. By working with the PCRF, OCS(online charging system), and Other system, the SIG9800 dynamically adjusts bandwidth policies according to traffic, duration, and applications and adopts real-time and flexible charging policies. The SIG9800, in wireless network environment, provides differentiated and individualized services by realizing functions such as network traffic identification, bandwidth management, application-specific realtime charging, and network security guarantee. consumption, thus reducing deployment cost.

Scalable modular architecture design

Adopting the two-level architecture, foreground distributed deployment, and background centralized analysis, the SIG9800 system is easy to scale up to meet operators' requirements brought by increasing services. With the access of new links, the SIG9800 system can be seamlessly upgraded and scaled up. This helps protect customers' existing investments. The SIG9800 provides varieties of interface boards and supports multiple interfaces such as 10G POS, 10G WAN, 10G LAN, and 1 GE interfaces. Later versions will support 20G high-speed interface boards. Upgrade and capacity expansion of links can be implemented by replacing interface boards rather than devices. This extends the life cycles of the SIG9800s.

Industry-leading high-performance hardware platform

The hardware platform of the SIG9800, inheriting excellent architecture design features of Huawei high-end routers, delivers carrier-class and router-level performance and availability. The SIG9800 adopts the ASIC+NP architecture for processing packets and the ASIC+FPGA+multi-core architecture for processing services. A single SIG9800 can support dozens of multi-core processors and process up to 80 Gbps link services. This architecture meets not only the requirements of DPI devices for real-time, highperformance, and low-consumption data processing but also the requirements of telecom services for low network delay and highquality transmission. The SIG9800 overweighs counterpart products in performance. In addition, the modular and high-density hardware architecture design effectively saves space and reduces power

Powerful traffic and protocol analysis capability

Integrating the DPI and Deep Flow Inspection (DFI) technologies, the SIG9800 deeply analyzes the traffic distribution, traffic trend, and traffic direction of different users, areas, links, and AS domains. With the SIG9800, operators can learn the distribution of traffic, protocols, and services on networks. This lays a solid foundation for planning networks, making traffic control policies, and exploring the commercial values of networks. Integrating the heuristic behavior analysis and detection, protocol analysis, and signature matching technology, the SIG9800 can comprehensively analyze data between the network layer and the
2

Service Inspection Gateway (SIG9800)

application layer, and accurately identify hundreds of application protocols such as Point To Point (P2P), VoIP, Instant Message (IM), video, game, and stock protocols. In addition, the SIG9800 supports condition combination detection based on protocol characteristics, traffic patterns, and connection number characteristics.

most damaging URLs and spammers, helping operators to depurate network environment, mitigate loss caused by spams, and launch value-added services.

Intelligent and automatic repository upgrade

The SIG9800 updates the attack signature library, system vulnerability library, and security repository at Huawei security update website in real time. The update does not require user intervention and is easy to operate and manage. In addition, the update process does not interrupt system services.

Granular bandwidth management

Based on comprehensive application identification, user identification, and traffic load and direction identification, the SIG9800 can specify different bandwidth management policies for AS domains, links, VIP users, and common users. The SIG9800 adopts multiple methods such as QoS management and traffic shaping to realize application-specific granular bandwidth control based on the time, domain, and user, thus realizing need-based bandwidth allocation and increasing bandwidth usage.

Professional report function

The Web-based report system of the SIG9800 is a standalone and professional report system based on the B/S architecture. The SIG9800 report system supports output in multiple formats and presentation forms such as trend charts, bar charts, pie charts, and curve charts. This report system provides service-specific real-time statistics analysis report based on links, areas, and users. Using the analysis data stored on the background database, the report system deeply explores and analyzes data, providing operators with data support for launching new services such as user behavior analysis.

All-round network security guarantee

By adopting multiple inspection technologies, such as DPI, signature matching, network rate and concurrent connection number anomaly statistics and analysis technologies, and searching protocol/system security vulnerability libraries and attack signature libraries updated in real time by globally distributed security threat estimation systems, the SIG9800 deeply analyzes network traffic at the application layer, and accurately identifies and blocks malicious traffic from DDoS attacks, worms, and botnets, thus protecting services and users against increasingly severe network attacks. Depending on the perfect URL classification base including more than 29 million URLs as well as the latest and more comprehensive spammer library of Huawei, the SIG9800 is capable of filtering out
3

Service Inspection Gateway (SIG9800)

Typical Networking
Deployment in fixed broadband network environment
In fixed network environment, the SIG9800 can be deployed at the convergence, access, and core layers. To meet the requirements of different application scenarios, the SIG can be connected to the network in in-line and transparent mode and uses internal or external bypass devices to ensure the high reliability of links. By adopting service traffic load and direction analysis, the SIG9800 learns the distribution of users, services, and traffic. According to application types or user types, the SIG9800 conducts QoS management of different levels such as QoS remark, shaping, and priority scheduling. In addition, the SIG9800 can provide multiple value-added services such as differentiated services, green surfing, and self-service bandwidth and services.

Radius Server
Radius Message
Games

IM

Video Web

Internet
VoIP

SIG Background Servers

Radius Message

SIG9800

MAN BRAS

Deployment in fixed broadband network environment

Service Inspection Gateway (SIG9800)

Deployment in wireless network environment

In wireless network application scenario, the SIG9800 can cooperate with the RM9000 (PCRF) and OCS to provide service-specific quota management based on duration, traffic, or their combination. thus meeting the requirements of operators for multiple accounting

modes. In addition, the SIG9800 can conduct QoS control on service traffic and provide users with service, bandwidth, or trafficbased differentiated services, helping wireless operators to launch granular operation.

OCS

IM Games

Video Web

Internet
VoIP

Gy
Radius Message

Radius Server SIG Background Servers

Radius Message

SIG9800

Gx RM9000 Portal SMSC Provisioning System

Gi

GGSN

3G

Deployment in wireless network environment

Service Inspection Gateway (SIG9800)

Product Specifications
Item Processing capability (single device) Physical interface Management interface Service interface Power specifications SIG foreground: 3500W (full configuration) SRU: 80W/board SFU: about 30W/board SPU: about 125W/board LPU: about 150W to 200W/board (determined by actual configurations) Fan: 270W/piece 90 V AC to 275 V AC; 50/60 Hz -75 V DC to -38 V DC 2 1+1 442669886 (20U) Chassis (empty): 65kg Full configuration: 110kg SRU: about 3.8kg/board SFU: about 1.8kg/board SPU: about 3.5kg/board LPU: about 4.8kg/board Power supply: about 9kg/piece Fan: about 5kg/piece Long term: 0C to 45C Short term: -5C to 55C Long term: 5% to 85% Short term: 0% to 95% SIG foreground: 6000W (full configuration) MPU: 50W/board LPU: about 39W to 44W/board (determined by actual configurations) Fan: 100 W/piece 90 V AC to 276 V AC; 50/60 Hz -75 V DC to -36 V DC 2 1+1 4426691600 (36U) GE interface GE, 10 GE, 10G POS GE interface GE, 10 GE, 10G POS SIG9810 SIG9820

Power consumption (full configuration)

Input (AC/DC) Number of power supplies Redundancy Product specifications Dimensions (mm) (WDH)

Full configuration weight

Full configuration: <400kg MPU: about 3kg/board LPU: about 3.5kg/board Power supply: <21kg/piece Fan: about 9.5kg/piece

Working environment Temperature Humidity Long term: 0C to 45C Short term: -5C to 55C Long term: 5% RH to 95% RH, non-condensing Short term: 0% RH to 95% RH, non-condensing

Note: Equipment performance calculated in accordance with the typical configuration, the actual item, in accordance with different types of business, there will be corresponding differences in performance.
6

NO WARRANTY
THE CONTENTS OF THIS BROCHURE ARE PROVIDED AS IS. EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO CASE SHALL HUAWEI TECHNOLOGIES CO., LTD BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, OR CONSEQUENTIAL DAMAGES, OR LOST PROFITS, BUSINESS, REVENUE, DATA, GOODWILL OR ANTICIPATED SAVINGS.

Copyright Huawei Technologies Co., Ltd. 2009. All Rights Reserved. The information contained in this document is for reference purpose only, and is subject to change or withdrawal according to specific customer requirements and conditions.

HUAWEI TECHNOLOGIES CO., LTD. Add: Huawei Industrial Base Bantian Longgang Shenzhen 518129, P.R. China Tel: +86-755-28780808 Version No.: M3-080030-20090416-C-1.0 www.huawei.com