Licensing [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:licensing [2025/07/01 05:56] – elena.krasnobryzhen:dpi:licensing [2025/08/27 15:08] (current) – [Features] elena.krasnobryzh
    Line 1: Line 1:
     +====== Licensing ======
     +{{indexmenu_n>12}}
     +  * Stingray Service Gateway (SSG) liceinsing depends on the bandwidth and its features. 
     +  * The license is time-unlimited.
     +  * [[en:dpi:techsupport_info|Technical support]] is not included in the license and is paid separately.
     +===== SSG licensing =====
     +==== Bandwidth ====
     +
     +Licenses grading of the bandwidth: **SSG-6/10/20/40/60/80/100/120/240**. [[en:dpi:dpi_brief:dpi_requirements|Pay attention to the hardware requirements!]]\\
     +Depending on [[en:dpi:dpi_brief:install_point_ssg|the installation scheme]], the following restrictions are assumed:\\
     +=== 1. When installing "in line" scheme ===
     +
     +  * SSG-6 corresponds to 6Gbps total (upload+download) traffic
     +  * SSG-10 corresponds to 10Gbps total (upload+download) traffic
     +  * SSG-20 corresponds to 20Gbps total (upload+download) traffic
     +  * SSG-40 corresponds to 40Gbps total (upload+download) traffic
     +  * SSG-60 corresponds to 60Gbps total (upload+download) traffic
     +  * SSG-80 corresponds to 80Gbps total (upload+download) traffic
     +  * SSG-100 corresponds to 100Gbps total (upload+download) traffic
     +  * SSG-120 corresponds to 120Gbps total (upload+download) traffic
     +  * SSG-120 corresponds to 240Gbps total (upload+download) traffic\\
     +<note important>Licensing includes ISP traffic asymmetry. Usually, the incoming traffic is three times more than the outgoing one.\\
     +**For example, Incoming - 6G, Outgoing - 2G. License - SSG-10.**</note>
     +
     +===  2. When installing using the "mirror" scheme ===
     +
     +  * SSG-6 corresponds to 6Gbps of total mirror traffic
     +  * SSG-10 corresponds to 10Gbps of total mirror traffic
     +  * SSG-20 corresponds to 20Gbps of total mirror traffic
     +  * SSG-40 corresponds to 40Gbps of total mirror traffic
     +  * SSG-60 corresponds to 60Gbps of total mirror traffic
     +  * SSG-80 corresponds to 80Gbps of total mirror traffic
     +  * SSG-100 corresponds to 100Gbps of total mirror traffic
     +  * SSG-120 corresponds to 120Gbps of total mirror traffic
     +
     +==== Features ====
     +Licences grading of the features: **BNG/BASE/COMPLETE**\\
     +/*{{ :en:dpi:licensing:licenses.png?nolink&1200 |}}*/
     +
     +^ Options                                                                              ^  BNG  ^  BASE  ^  COMPLETE  ^
     +| Bypass, On-stick, LAG Support                                                        |  :y:  |  :y:   |  :y:       |
     +| Statistics by protocols and directions in IPFIX format collection and export         |  :y:  |  :y:   |  :y:       |
     +| Traffic priority marking depending on the application protocol and direction         |  :o:  |  :y:   |  :y:       |
     +| Channel policing and session policing, traffic priorities per channel                |  :o:  |  :y:   |  :y:       |
     +| Subscriber channel policing and session policing, traffic priorities per subscriber  |  :y:  |  :n:   |  :y:       |
     +| Allow Lists and redirecting to Captive Portal                                        |  :y:  |  :n:   |  :y:       |
     +| BNG/BRAS L3 (IPoE), Dual Stack IPv4/IPv6, RADIUS with CoA                            |  :y:  |  :n:   |  :y:       |
     +| BNG/BRAS L2 (PPPoE, DHCP, L2TP), Dual Stack IPv4/IPv6                                |  :o:  |  :n:   |  :y:       |
     +| Router with BGP, OSPF, VRF support                                                   |  :o:  |  :o:   |  :y:       |
     +| Carrier Grade NAT with NAT Flow export in IPFIX format                               |  :o:  |  :o:   |  :y:       |
     +| Mini-Firewall for blocking by ports                                                  |  :o:  |  :o:   |  :y:       |
     +| Automatic protection against DDoS attacks                                            |  :o:  |  :o:   |  :y:       |
     +| DNS requests control                                                                 |  :o:  |  :o:   |  :y:       |
     +
     +^ Regulatory Compliance                                 ^  BNG  ^  BASE  ^  COMPLETE  ^
     +| Filtering by blocked Internet sites and blacklisting  |  :o:  |  :y:   |  :y:       |
     +| Lawful Interception (LI), metadata export by IPFIX    |  :o:  |  :o:   |  :y:       |
     +
     +^ Additional modules and services                  ^  BNG           ^  BASE  ^  COMPLETE  ^
     +| URL Classifier Local version                     |  :o:           |  :o:   |  :o:       |
     +| URL Classifier Cloud version                     |  :y:           |  :y:   |  :y:       |
     +| Graphical User Interface Base version            |  :y:           |  :y:   |  :y:       |
     +| GUI (Graphical User Interface) FilterUI version  |  :o:           |  :o:   |  :o:       |
     +| Quality of Experience Module Base version        |  :y:           |  :y:   |  :y:       |
     +| Quality of Experience Module Standard version    |  :o:           |  :o:   |  :o:       |
     +| SDK — DPI Tool kit for protocols customization   |  Subscription                      |||
     +| VAS Cloud custom protocols                       |  Subscription                      |||
     +
     +^ Standby                                                                                                                        ^  BNG                                         ^  BASE  ^  COMPLETE  ^
     +| **Active-Standby:** the stand-by SSG is installed on an alternative route, passing no more than 5% of traffic in standby mode  |  25% from main License                                           |||
     +| **Active-Active:** traffic is shared between two SSG platforms                                                                 |  100% from Main License and Support License                      |||
     +
     +:y: Yes\\
     +:o: Optional\\
     +:n: No
     +
     +==== License Exceeding ====
     +If the bandwidth license parameters are exceeded, SSG will process traffic [[en:dpi:dpi_brief:dpi_requirements#recommended_requirements|until the platform reserves are exhausted]]. Once the platform capacity is exhausted, processing errors will occur and traffic degradation will occur. You can limit the bandwidth yourself by polysizing: [[en:dpi:dpi_options:opt_shaping|]], this is only relevant when the total port throughput exceeds the license bandwidth parameters.
     +
     +VAS Experts reserves the right to refuse technical support or project maintenance to customers who do not comply with license terms, including those who exceed the allowed traffic (including according to the built-in error monitoring system).
     +
     +==== Reserve SSG license ====
     +For the purpose of increasing the fault tolerance of the solution, we recommend backing up the main SSG server.
     +Redundancy schemes and descriptions for [[en:dpi:bras_bng:general_setup#fastdpi_l3_bras_setup|BRAS L3]] and [[en:dpi:bras_bng:general_setup#fastdpi_l2_bras_setup|BRAS L2]]. \\
     +Terms of use of the reserve license:
     +  - Use only for backup purposes of the main server
     +  - Constant traffic transmission no more than 5% of the license volume, in order to monitor the health of the backup server
     +  - Processing of all traffic of the main server only in case of an accident or maintenance of the main server
     +
     +===== QoE licensing =====
     +^ Options                                                                                                                                                                                                      ^  BASE  ^  STANDARD  ^
     +| DPI-based Full NetFlow and ClickStream statistics visualization                                                                                                                                              |  :y:   |  :y:       |
     +| Built-in TOP reports on Full NetFlow: high RTT and retries, by speed and traffic volume, by application protocols, by AS, by subscriber AS, by traffic classes and DSCP, by access and aggregation switches  |  :y:   |  :y:       |
     +| Built-in ClickStream-based reports: URLs, hosts, subscribers, devices, IP resources                                                                                                                          |  :y:   |  :y:       |
     +| Custom filters by catigories of web resources, protocols, protocol groups, subscribers, AS, IP                                                                                                               |  :y:   |  :y:       |
     +| Reports export in *.xlsx, .*csv, *.pdf and *.png                                                                                                                                                             |  :y:   |  :y:       |
     +| API support for integration with external systems                                                                                                                                                            |  :y:   |  :y:       |
     +| Uplinks quality monitoring and cyberthreats detection                                                                                                                                                        |  :y:   |  :y:       |
     +| Online reports by specific IP, Login, Host IP                                                                                                                                                                |  :y:   |  :y:       |
     +| NAT Flow statistics collection, compression, custom filters                                                                                                                                                  |  :o:   |  :y:       |
     +| DNS Flow statistics collection, compression, custom filters                                                                                                                                                  |  :o:   |  :y:       |
     +| GTP Flow statistics collection, compression, custom filters, map view                                                                                                                                        |  :o:   |  :y:       |
     +| Setting triggers and actions for events, notification by email and telegram with a set frequency                                                                                                             |  :o:   |  :y:       |
     +| DDoS and BotNet attacks detection and mitigation (blackhole and flowspec). SSG BASE version is requiered for mitigation                                                                                      |  :o:   |  :o:       |
     +
     +:y: Yes\\
     +:o: Optional