Protect Your IP Network Borders

Oracle Communications Session Border Controller is the ideal choice for telecommunications carriers to protect their IP network borders. As networks evolve towards 5G and cloud, Oracle can provide a wide range of protocol support, programmability, and manageability in all types of IP networks.

Business Solution

5G technology requires a reliable, high capacity network with ultra low-latency to deliver the multi-Gbps peak data speeds to meet the high performance requirements. With Oracle Communications Session Border Controller, you can deploy trusted, carrier grade real-time communications across IP network access borders and IP interconnect borders, including fixed line and mobile services.

Oracle Communications Session Border Controller runs as a single software application that supports purpose-built hardware platforms and virtualized deployments in both private and public clouds. It offers a unique combination of performance, capacity, high availability, and manageability.

You can deploy Oracle Communications Session Border Controller on Oracle Cloud Infrastructure for maximum scalable performance. The hardware underlying Oracle Cloud Infrastructure provides the networks and computing power necessary for controlling session-based communications without adding latency, jitter, or delay to the bidirectional media flows that constitute such communications.

Description of the illustration sbc-platform-arch.png

Highlights of the Business Solution

1. Enterprise grade, software-defined Session Border Controller (SBC) for telco networks
2. Cost-effective, scalable infrastructure and platform for SBC deployment
3. Rapid deployment strategy for SBC to meet the expansion of 5G network function roll-out
4. Manageable and monitorable SBC infrastructure
5. Business continuity of SBC network function

Technical Solution

Oracle Communications Session Border Controller and Oracle Cloud Infrastructure (OCI) are a perfect match for a telco provider's highly secure and reliable voice, video, and unified communication services.

The following is a high-level technical summary to implement the business solution:

1. Deploy Oracle Communications Session Border Controller in multiple availability domains in an OCI Tenancy.
2. Implement OCI Security Best Practices when deploying Oracle Communications Session Border Controller.
3. Rapidly deploy an Oracle Communications Session Border Controller cluster by using OCI DevOps with Terraform scripting with a golden image of a configured Oracle Communications Session Border Controller image.
4. Deploy Oracle Communications Session Border Controller in multiple regions for business continuity and disaster recovery.
5. Use OCI DevSecOps for network security policy updates for Oracle Communications Session Border Controller.

Workflow

The following is a high-level overview of the steps needed to rapidly deploy a scalable and secure Oracle Communications 5G NaaS Cloud Service network.

In this architecture, the Oracle Communications Session Border Controller instances are distributed across two availability domains and different regions to demonstrate the maximum availability of SBC Network Functionality.

1. Deploy Oracle Communications Session Border Controller multiple availability domains

   Use Terraform scripts and Oracle Cloud Infrastructure (OCI) DevOps service to deploy multi-availability domain Oracle Communications Session Border Controller Cluster.

   Products: Oracle VM, Oracle Cloud Guard, OCI DevOps, OCI Object Storage, OCI Block Volumes

2. Scale out SBC deployment to multiple availability domains

   Scale out the SBC Cluster.

   Products: Oracle VM, Oracle Cloud Guard, OCI DevOps, OCI Object Storage, OCI Block Volumes

3. Update SBC VM image

   Demonstrate CI/CD SBC VM updates.

   Products: OCI DevOps

4. Deploy and configure a standby for high availability and disaster recovery

   Deploy SBC Cluster in 2nd region, setup replication, demonstrate DR.

   Products: Oracle VM, Oracle Cloud Guard, OCI DevOps, OCI Object Storage, OCI Block Volumes

5. Update SBC Security Policies

   Update Security Policies in SBC Cluster.

   Products: OCI DevOps

6. Add Monitoring and Load Balancing across SBC clusters

   Deploy Oracle Session Delivery Management Cloud Service and Oracle Communication Subscriber-Aware Load Balancer for monitoring and load balancing.

   Products: Oracle Session Delivery Management Cloud Service and Oracle Communications Subscriber-Aware Load Balancer.

This workflow supports the following components:

• VM System

  Oracle Cloud Infrastructure VM (virtual machine) is a "computer made of software" that you can use to run any software you'd run on a physical computer. Like a physical machine, a virtual machine has its own operating system, storage, networking, configuration settings, and software, and it is fully isolated from other VMs running on that host. A VM system provides secure and elastic compute capacity in the cloud for workloads ranging from small development projects to large-scale, global applications such as real-time communication platforms. Flexible shapes enable you to optimize VM resources with customized processor and memory values for improved price-performance.

• Cloud Guard

  You can use Oracle Cloud Guard to monitor and maintain the security of your resources in Oracle Cloud Infrastructure. Cloud Guard uses detector recipes that you can define to examine your resources for security weaknesses and to monitor operators and users for risky activities. When any misconfiguration or insecure activity is detected, Cloud Guard recommends corrective actions and assists with taking those actions, based on responder recipes that you can define.

• OCI DevOps

  OCI DevOps is a continuous integration/continuous delivery (CI/CD) service that automates the delivery and deployment of software to Oracle Cloud Infrastructure (OCI) compute platforms for developers to simplify and automate their software development lifecycle.

• Block volume

  With block storage volumes, you can create, attach, connect, and move storage volumes, and change volume performance to meet your storage, performance, and application requirements. After you attach and connect a volume to an instance, you can use the volume like a regular hard drive. You can also disconnect a volume and attach it to another instance without losing data.

• Object storage

  Object storage provides quick access to large amounts of structured and unstructured data of any content type, including database backups, analytic data, and rich content such as images and videos. You can safely and securely store and then retrieve data directly from the internet or from within the cloud platform. You can seamlessly scale storage without experiencing any degradation in performance or service reliability. Use standard storage for "hot" storage that you need to access quickly, immediately, and frequently. Use archive storage for "cold" storage that you retain for long periods of time and seldom or rarely access.

• Oracle Session Delivery Management Cloud Service

  Oracle Session Delivery Management Cloud provides a cloud native service framework for the management and monitoring of Oracle Communications network functions.

• Oracle Communications Subscriber-Aware Load Balancer

  Oracle Communications Subscriber-Aware Load Balancer enables linear, non-disruptive scaling of capacity to two million subscribers from a single Session Initiation Protocol (SIP) Internet Protocol (IP) address. It supports the delivery of any IP Multimedia Subsystem (IMS), Rich Communications Services (RCS), or next-generation network (NGN) service as well as any SIP application -- voice, video, presence, messaging, and multimedia -- over any mobile or fixed line access network, including the internet.