CASE STUDY
this architecture makes the Gi-LAN more
complex and inflexible.
Instead of a traditional monolithic
architecture, the provider investigated the
value of a scaleout architecture with NFV.
NFV provides many advantages in the
virtualisation of network functions and the
ability to develop infrastructures that are
more flexible and scalable with a lower TCO.
Consolidating its Gi-LAN service functions,
including firewall and CGNAT and leveraging
both physical and virtual infrastructure,
would drastically improve agility, reduce
latency and deliver greater performance.
The service provider engaged in a rigorous
proof of-concept test to determine whether
a scaleout architecture and A10 Networks
Thunder CFW (Convergent Firewall) met
its stringent performance requirements.
Ultimately, the company chose Thunder CFW
for its throughput, scalability and flexibility of
the virtualised and physical platforms.
THE COMPANY HAD LONG RELIED
ON ANOTHER VENDOR TO PROVIDE
FIREWALL AND CARRIER-GRADE
NETWORK ADDRESS TRANSLATION
(CGNAT) SERVICES FOR THE GILAN
SEGMENT OF ITS MOBILE NETWORK.
BUT AS TRAFFIC VOLUMES STEADILY
CLIMBED, THE PERFORMANCE OF THE
FIREWALLS BEGAN TO LAG.
The provider uses other A10 Networks
solutions, including offering A10 Networks
vThunder Virtual Appliance to customers as
part of its cloud service.
Solution
Thunder CFW consolidates Gi/SGI firewall,
CGNAT, application visibility and intelligent
traffic steering, which enables the service
provider to provide carrier-class security
while also improving operational efficiency.
The virtualised Thunder CFW solution
delivers 100 Gbps of performance,
far higher than similar solutions. The
ultra-high performance and hyperscale
Gi/SGi firewall has a rich set of features
to protect subscribers and shield mobile
networks. High-performance CGNAT
enables the provider to protect its
investment in its IPv4based infrastructure
while transitioning to IPv6.
Layer 7 application visibility enables granular
policy enforcement and control, enabling
the service provider to support different
customer service levels. Intelligent traffic
steering also supports differentiated services.
Support for GPRS Tunneling Protocol (GTP)
protects the mobile core against GTP-based
attacks initiated from the radio access
network or IP exchange networks.
The engineering and operations team uses
the A10 Networks Harmony Controller
to centrally manage its Thunder CFW
physical appliances and virtual instances.
With Harmony Controller, the team can
automate the deployment and operations
of application services and simplify
troubleshooting and management.
Integrated analytics help the team visualise
the GiLAN security posture for enhanced
operational efficiency.
A10 Networks professional services
worked side-by-side with the service
provider’s architecture and engineering
team. The A10 team has a deep
understanding of the customer’s needs
and environment based on previous
engagements. The professional services
team is highly skilled not only in A10
Networks solutions but others too, making
the migration to A10 Networks smooth.
Results
Deploying Thunder CFW in a scale-out
approach enabled the service provider to
optimise the performance, security and cost
of its 4G mobile network and to meet its
aggressive plans for 5G. It can add capacity
as needed simply by spinning up additional
virtual instances. It didn’t need to make
a large upfront CAPEX investment now to
accommodate its throughput needs five
years in the future. Those savings can be
reinvested in innovation.
With Thunder CFW, the provider has a
consolidated and secure Gi-LAN solution
that provides comprehensive mobile core
infrastructure and an effective shield against
attacks. With a scale-out approach, Thunder
CFW enables the provider to deliver superior
performance to support ultrahigh bandwidth
5G applications and services. And superior
levels of visibility can help the team optimise
the network.
Success and next steps
As the provider aggressively rolls out 5G
in the Middle East while maintaining its
excellent 4G subscriber experience, it
can count on Thunder CFW for a highperformance,
scalable way to protect
its mobile infrastructure, delivering an
exceptional mobile experience for consumers
and businesses alike. •
62 INTELLIGENTCIO www.intelligentcio.com