acl-digital-virtual-bras-solution
                     ACL DIGITAL VIRTUAL
B-RAS Solution
Surging broadband subscriber 
base and the advent of more
bandwidth-hungry network 
services haveclearly started
highlighting issues with the 
traditional BRAS - Broadband
remote access server solutions in 
the existing broadband
service deployments. These 
proprietary hardware-based
solutions are not adaptive to the 
fluctuating market
demand for scale, performance 
and newer functionalities.
With the proliferation of 
high-speed internet access and
multimedia demand, it is hightime 
the operators leapfrog
from this expensive monolithic 
ardware-based BRAS to a
future-proof, software-based 
BRAS solution that ACL Digital
can offer.
High-performance fast path processing is achieved using DPDK libraries and drivers, and delivers line rate 
performance on 1G, 10G, and 40G NIC’s. These virtual instances can be provisioned in different compute flavors to
meet the on-demand scale and throughput requirements.
The highly modular architecture of our solution makes it flexible to choose and plug, only the required functional
features, from the superset of many optional features we offer, thereby improving resource utilization. The  
perators need not pay for the functionalities he does not want and does not require the long wait for hardware 
box upgrades. Virtual upgradation of network elements via software decreases hardware obsolescence and is 
easier to implement.
Operators can roll out new software enhancements for improved functionality with no delay of waiting for 
hardware capabilities and life-cycles, thereby accelerating service innovation. The solution works with all the 
standards compliant devices in both (upstream and downstream) directions, thereby allowing it to be 
deployable in both greenfield and brownfield solutions.
CONTENT SE RVERS IP CORE AGGREG ATION ACCESS RESIDENTIAL N ETWORK
Encoder
Internet
DSLAM
Internet
Virtual B RAS L2
Aggregation
Content Core Switch Reside ntal
Rou ter
VoD Server Rou ter
Gateway
System
Softwitch Ethernet
Radius DHCP
PPPOE or IPOE
Like in any Broadband service deployment solutions, our vBRAS - Virtual Broadband remote access server 
- sits at the edge of the service providers’ core network and aggregates user sessions from the access 
networks and has the function of managing all access network traffic and other critical functions - like to 
allow access and authentication for thousands of subscribers, establishing and monitoring their sessions 
management and controlling the user line rate.
This BRAS is effectively the first IP hop from where a subscriber’s IP traffic is processed for onward
routing. A service provider can inject his policy management and QoS in regional and access networks. 
Our solution provides session establishment through two of the most commonly used access 
communication protocols.
PPP over Ethernet (PPPoE): Use the point to point (PPP) protocol
IP over Ethernet (IPoE): Use IP protocol
This dual stack support means, that our solution supports thousands of both IPoE and
PPPoE users to coexist simultaneously.
Value added services VoD-VIDEO ON DEMAND, VoIP,, GAMING,
Corporate VPN
Subscriber management PPPoE, IPoE, AAA - RADIUS, DHCP
Quality of service Time Based, Volume Based, per Subscriber
Marking, metering, shaping and policing
Network awareness and services L3 Routing-static | BGP | OSPF | RIP
Multicast, SNAT, DNAT,Firewall
Network scalability High Subscriber aggregation and density
Highlights
Control plane acceleration to deliver 10,000 to 2,56,000 PPPoE, IPoE subscriber sessions
Data plane acceleration to achieve line rate performance with 1G, 10G and 40Gbps with few
processing cores
Performance scales linearly with the number of processing cores
Dynamic Bandwidth management and Application based QOS at the subscriber level
AAA capabilities for Subscriber Authentication, Authorization and Accounting
Dual stack support for PPPoE and IPoE users coexisting simultaneously
IPv4 and IPv6 addressing schemes with support for Dynamic Routing Protocols
All forms of Network Address Translation (NAT) support at Interface level
High Availability of services in Active-Active or Active-Standby mode
Open, standards based solution
Offers significant CAPEX/OPEX benefit to the service providers
Platform Support
Support for different virtual environments (KVM/Xen)
Deployable on a VM or bare metal on
Intel x86 COTS Platforms
Public cloud platforms (AWS, GCP)
OpenStack orchestrated instances
Virtualization support for VirtIO, SR-IOV, PCI Pass-through
User Access Protocols User Access Protocols
PPP over Ethernet - PPPoE PAP - Password Authentication Protocol
IP over Ethernet - IPoE CHAP - Challenge Handshake Authentication Protocol
User Billing protocol RADIUS - Remote Access Dial In User Service
RADIUS IPv4 Support
DNS client
Policy Protocol
Change of Authorization - COA ICMP
ARP
User Accounting Protocol
DHCP server, client and relay
IPv4 ACL
IPv6 Support Layer 3 routing
DHCPv6 server and client OSPFv2, OSPFv3
NDP - Neighbour Discovery Protocol RIPv1, RIPv2, RIPng
ICMPv6 BGPv4
IPv6 ACL Network Address Translation
SNAT
Dynamic Bandwidth Management
Bandwidth Class and policy with CIR and PIR DNAT
IQoS - Traffic marking based on trTcm(Two Masquerading
Rate Three Colour Meter)
VLAN Stacking
EQoS - Based on DPDK’s hierarchical scheduler 802.1Q
Dropper - Uses Random Early Detection(RED)
or Weighted Random Early Detection(WRED) 802.1AD
for congestion avoidance
Firewall
A pplication based QoS support based on deep IP tuple based
packet inspection
State-full
Management Features
CLI for device configuration Application aware firewall / AVC (Optional)
Extensive logging support and per session logging Layer 3 VPN (Optional)
Site to Site and Remote access
RESTful API’s which can be used by 3rd party tools
IPSec Transport and Tunnel mode
Elegant web based GUI for configuration and 
monitoring
Security (Optional)
Tunnelling (Optional) IPS - Intrusion Prevention System
MPLS IDS - Intrusion Detection System
EoGRE DPI - Deep Packet Inspection
Our Services
Virtual function development, integration and testing
PPP, PPPoE, IPoE, RADIUS, PAP/CHAP, DHCP
OSPF, RIP, BGP, MPLS, IPSec
NAT, Firewall, Subscriber and Application-aware Security enforcement
Dynamic per session QoS management
DPDK based Virtual B-RAS optimization
Data Plane acceleration
Scaling performance proportional to number of cores
Virtual B-RAS orchestration
Openstack based orchestration, Quantum/Neutron integration
Orchestration logic extensions and management framework integration
Orchestration layer integration with OSS/BSS
Virtual B-RAS testing and Test Automation development
Functional, Performance, Load and Stress testing
KVM and Openstack infrastructure staging and orchestration
End-to-End test strategies for NFV architectures
Management framework enhancements
Physical and Virtual appliance aware
SDN Controller integration
NFV/SDN management layer integration with OSS/BSS
Virtual B-RAS sustenance engineering
Bug fixes, Updates and Patch management
Upgrades and Release management
Virtual B-RAS deployment
Telco infrastructure audit, vB-RAS staging in
Telco environment
Set up orchestration services, OSS/BSS
integration RFC COMPLIANCE LIST
End-to-end Service Validation RFC 1661, The Point-to-Point Protocol (PPP)
RFC 1570, PPP LCP Extensions
Service Roll-out management
RFC 1332, PPP IP Control Protocol (IPCP)
Operations Support RFC 1334 PAP PPP Authentication Protocols
Service Desk implementation
RFC 2865 RADIUS
Provisioning & Configuration management RFC 2328 OSPFv2
Service Monitoring & Service Assurance RFC 1058/RFC 2453 for RIPv1/RIPv2 for IPv4
L2/L3 Technical support RFC 2080 RIPng for IPv6
RFC 4271 BGP -4
RFC 2698 for packet metering using trTCM
algorithm
ACL Digital is a design-led Digital Experience, Product Innovation, Engineering and Enterprise IT 
oerings leader. From strategy, to design, implementation and management we help accelerate 
innovation and transform businesses. ACL Digital is a part of ALTEN group, a leader in technology 
consulting and engineering services.
[email protected]  | www.acldigital.com
USA  |  UK  |  France  |  India
Proprietary content. No content of this document can be reproduced without the prior written agreement of ACL Digital.