Protect Your IP Network Borders
Oracle Communications Session Border Controller is the ideal choice for telecommunications carriers to protect their IP network borders. As networks evolve towards 5G and cloud, Oracle can provide a wide range of protocol support, programmability, and manageability in all types of IP networks.
Business Solution
Oracle Communications Session Border Controller runs as a single software application that supports purpose-built hardware platforms and virtualized deployments in both private and public clouds. It offers a unique combination of performance, capacity, high availability, and manageability.
You can deploy Oracle Communications Session Border Controller on Oracle Cloud Infrastructure for maximum scalable performance. The hardware underlying Oracle Cloud Infrastructure provides the networks and computing power necessary for controlling session-based communications without adding latency, jitter, or delay to the bidirectional media flows that constitute such communications.
![Description of sbc-platform-arch.png follows Description of sbc-platform-arch.png follows](img/sbc-platform-arch.png)
Description of the illustration sbc-platform-arch.png
Highlights of the Business Solution
- Enterprise grade, software-defined Session Border Controller (SBC) for telco networks
- Cost-effective, scalable infrastructure and platform for SBC deployment
- Rapid deployment strategy for SBC to meet the expansion of 5G network function roll-out
- Manageable and monitorable SBC infrastructure
- Business continuity of SBC network function
Technical Solution
The following is a high-level technical summary to implement the business solution:
- Deploy Oracle Communications Session Border Controller in multiple availability domains in an OCI Tenancy.
- Implement OCI Security Best Practices when deploying Oracle Communications Session Border Controller.
- Rapidly deploy an Oracle Communications Session Border Controller cluster by using OCI DevOps with Terraform scripting with a golden image of a configured Oracle Communications Session Border Controller image.
- Deploy Oracle Communications Session Border Controller in multiple regions for business continuity and disaster recovery.
- Use OCI DevSecOps for network security policy updates for Oracle Communications Session Border Controller.
Workflow
The following is a high-level overview of the steps needed to rapidly deploy a scalable and secure Oracle Communications 5G NaaS Cloud Service network.
In this architecture, the Oracle Communications Session Border Controller instances are distributed across two availability domains and different regions to demonstrate the maximum availability of SBC Network Functionality.
- Deploy Oracle Communications Session Border Controller multiple
availability domains
Use Terraform scripts and Oracle Cloud Infrastructure (OCI) DevOps service to deploy multi-availability domain Oracle Communications Session Border Controller Cluster.
Products: Oracle VM, Oracle Cloud Guard, OCI DevOps, OCI Object Storage, OCI Block Volumes
- Scale out SBC deployment to multiple availability domains
Scale out the SBC Cluster.
Products: Oracle VM, Oracle Cloud Guard, OCI DevOps, OCI Object Storage, OCI Block Volumes
- Update SBC VM image
Demonstrate CI/CD SBC VM updates.
Products: OCI DevOps
- Deploy and configure a standby for high availability and disaster
recovery
Deploy SBC Cluster in 2nd region, setup replication, demonstrate DR.
Products: Oracle VM, Oracle Cloud Guard, OCI DevOps, OCI Object Storage, OCI Block Volumes
- Update SBC Security Policies
Update Security Policies in SBC Cluster.
Products: OCI DevOps
- Add Monitoring and Load Balancing across SBC clusters
Deploy Oracle Session Delivery Management Cloud Service and Oracle Communication Subscriber-Aware Load Balancer for monitoring and load balancing.
Products: Oracle Session Delivery Management Cloud Service and Oracle Communications Subscriber-Aware Load Balancer.
This workflow supports the following components:
- VM System
Oracle Cloud Infrastructure VM (virtual machine) is a "computer made of software" that you can use to run any software you'd run on a physical computer. Like a physical machine, a virtual machine has its own operating system, storage, networking, configuration settings, and software, and it is fully isolated from other VMs running on that host. A VM system provides secure and elastic compute capacity in the cloud for workloads ranging from small development projects to large-scale, global applications such as real-time communication platforms. Flexible shapes enable you to optimize VM resources with customized processor and memory values for improved price-performance.
- Cloud Guard
You can use Oracle Cloud Guard to monitor and maintain the security of your resources in Oracle Cloud Infrastructure. Cloud Guard uses detector recipes that you can define to examine your resources for security weaknesses and to monitor operators and users for risky activities. When any misconfiguration or insecure activity is detected, Cloud Guard recommends corrective actions and assists with taking those actions, based on responder recipes that you can define.
- OCI DevOps
OCI DevOps is a continuous integration/continuous delivery (CI/CD) service that automates the delivery and deployment of software to Oracle Cloud Infrastructure (OCI) compute platforms for developers to simplify and automate their software development lifecycle.
- Block volume
With block storage volumes, you can create, attach, connect, and move storage volumes, and change volume performance to meet your storage, performance, and application requirements. After you attach and connect a volume to an instance, you can use the volume like a regular hard drive. You can also disconnect a volume and attach it to another instance without losing data.
- Object storage
Object storage provides quick access to large amounts of structured and unstructured data of any content type, including database backups, analytic data, and rich content such as images and videos. You can safely and securely store and then retrieve data directly from the internet or from within the cloud platform. You can seamlessly scale storage without experiencing any degradation in performance or service reliability. Use standard storage for "hot" storage that you need to access quickly, immediately, and frequently. Use archive storage for "cold" storage that you retain for long periods of time and seldom or rarely access.
- Oracle Session Delivery Management Cloud Service
Oracle Session Delivery Management Cloud provides a cloud native service framework for the management and monitoring of Oracle Communications network functions.
- Oracle Communications Subscriber-Aware Load Balancer
Oracle Communications Subscriber-Aware Load Balancer enables linear, non-disruptive scaling of capacity to two million subscribers from a single Session Initiation Protocol (SIP) Internet Protocol (IP) address. It supports the delivery of any IP Multimedia Subsystem (IMS), Rich Communications Services (RCS), or next-generation network (NGN) service as well as any SIP application -- voice, video, presence, messaging, and multimedia -- over any mobile or fixed line access network, including the internet.