Service Inspection Gateway (SIG9800)

HUAWEI TECHNOLOGIES CO., LTD.

Service Inspection Gateway (SIG9800)

Product Overview Product Series

It has become a trend for communications networks to be
integrated with IP networks. The controllability of communications
networks, however, goes into deep conflict with the open nature of
IP networks. As a result, traditional communications networks have
to bear the brunt of IP networks. With the advent of the 3G age,
operators have increasing requirements for network optimization,
service differentiation, and real-time and online accounting. With
the changes in market environment, business transformation has
become an inevitable choice for operators. Learning more details
about networks helps operators to realize granular operation.
The SIG9800 series product (hereinafter referred to as the SIG9800)
is a family of high-capacity professional Deep Packet Inspection
(DPI) devices developed by Huawei based on mature high-end
router hardware platform. The SIG9800 can dynamically manage
bandwidths of high-density large-capacity interfaces, such as 10G
POS and 10G WAN/LAN interfaces, according to flexible policies.
Huawei SIG system supports a maximum of 80 SIG9800s, providing
up to 2000 Gbps link bandwidths and meeting the DPI requirements
SIG9810 SIG9820
of a large-sized network with 10 million users. The SIG9800,
adopting multiple patented inspection technologies, analyzes and
processes packets based on a high-performance hardware platform.
In addition, the SIG9800 provides intelligent and flexible service
control measures to analyze traffic, manage bandwidth, and ensure solution can help operators to meet the challenges brought by
network security on both wireless and fixed networks. The SIG9800, network transformation. With service visualization and granular
supporting distributed deployment and centralized management, is bandwidth management, the DPI solution provides individualized
easy to scale up. value-added services, helping operators to realize refined network
Huawei integrated DPI solution is based on the SIG9800. This operation.

1
Service Inspection Gateway (SIG9800)
Product Features
Compatible with 3GPP
The design meets the development trend of the telecom industry
and complies with the 3GPP-PCC standard design product
architecture. By working with the PCRF, OCS(online charging
system), and Other system, the SIG9800 dynamically adjusts
bandwidth policies according to traffic, duration, and applications
and adopts real-time and flexible charging policies. The SIG9800,
in wireless network environment, provides differentiated and
individualized services by realizing functions such as network traffic
identification, bandwidth management, application-specific real-
time charging, and network security guarantee.
Industry-leading high-performance hardware
platform
The hardware platform of the SIG9800, inheriting excellent
architecture design features of Huawei high-end routers, delivers
carrier-class and router-level performance and availability.
The SIG9800 adopts the ASIC+NP architecture for processing
packets and the ASIC+FPGA+multi-core architecture for processing
services. A single SIG9800 can support dozens of multi-core
processors and process up to 80 Gbps link services. This architecture
meets not only the requirements of DPI devices for real-time, high-
performance, and low-consumption data processing but also the
requirements of telecom services for low network delay and high-
quality transmission. The SIG9800 overweighs counterpart products
in performance. In addition, the modular and high-density hardware
architecture design effectively saves space and reduces power
consumption, thus reducing deployment cost.
Scalable modular architecture design
Adopting the two-level architecture, foreground distributed
deployment, and background centralized analysis, the SIG9800
system is easy to scale up to meet operators' requirements brought
by increasing services. With the access of new links, the SIG9800
system can be seamlessly upgraded and scaled up. This helps
protect customers' existing investments.
The SIG9800 provides varieties of interface boards and supports
multiple interfaces such as 10G POS, 10G WAN, 10G LAN, and
1 GE interfaces. Later versions will support 20G high-speed
interface boards. Upgrade and capacity expansion of links can be
implemented by replacing interface boards rather than devices. This
extends the life cycles of the SIG9800s.
Powerful traffic and protocol analysis capability
Integrating the DPI and Deep Flow Inspection (DFI) technologies,
the SIG9800 deeply analyzes the traffic distribution, traffic trend,
and traffic direction of different users, areas, links, and AS domains.
With the SIG9800, operators can learn the distribution of traffic,
protocols, and services on networks. This lays a solid foundation for
planning networks, making traffic control policies, and exploring
the commercial values of networks.
Integrating the heuristic behavior analysis and detection, protocol
analysis, and signature matching technology, the SIG9800 can
comprehensively analyze data between the network layer and the
2
Service Inspection Gateway (SIG9800)
application layer, and accurately identify hundreds of application
protocols such as Point To Point (P2P), VoIP, Instant Message (IM),
video, game, and stock protocols. In addition, the SIG9800 supports
condition combination detection based on protocol characteristics,
traffic patterns, and connection number characteristics.
Granular bandwidth management
Based on comprehensive application identification, user
identification, and traffic load and direction identification, the
SIG9800 can specify different bandwidth management policies
for AS domains, links, VIP users, and common users. The SIG9800
adopts multiple methods such as QoS management and traffic
shaping to realize application-specific granular bandwidth control
based on the time, domain, and user, thus realizing need-based
bandwidth allocation and increasing bandwidth usage.
All-round network security guarantee
By adopting multiple inspection technologies, such as DPI,
signature matching, network rate and concurrent connection
number anomaly statistics and analysis technologies, and searching
protocol/system security vulnerability libraries and attack signature
libraries updated in real time by globally distributed security threat
estimation systems, the SIG9800 deeply analyzes network traffic at
the application layer, and accurately identifies and blocks malicious
traffic from DDoS attacks, worms, and botnets, thus protecting
services and users against increasingly severe network attacks.
Depending on the perfect URL classification base including more
than 29 million URLs as well as the latest and more comprehensive
spammer library of Huawei, the SIG9800 is capable of filtering out
3
most damaging URLs and spammers, helping operators to depurate
network environment, mitigate loss caused by spams, and launch
value-added services.
Intelligent and automatic repository upgrade
The SIG9800 updates the attack signature library, system vulnerability
library, and security repository at Huawei security update website in
real time. The update does not require user intervention and is easy
to operate and manage. In addition, the update process does not
interrupt system services.
Professional report function
The Web-based report system of the SIG9800 is a standalone
and professional report system based on the B/S architecture. The
SIG9800 report system supports output in multiple formats and
presentation forms such as trend charts, bar charts, pie charts, and
curve charts. This report system provides service-specific real-time
statistics analysis report based on links, areas, and users. Using the
analysis data stored on the background database, the report system
deeply explores and analyzes data, providing operators with data
support for launching new services such as user behavior analysis.
Service Inspection Gateway (SIG9800)

Typical Networking
Deployment in fixed broadband network By adopting service traffic load and direction analysis, the SIG9800

environment learns the distribution of users, services, and traffic. According

In fixed network environment, the SIG9800 can be deployed at the to application types or user types, the SIG9800 conducts QoS

convergence, access, and core layers. To meet the requirements management of different levels such as QoS remark, shaping, and

of different application scenarios, the SIG can be connected to priority scheduling. In addition, the SIG9800 can provide multiple

the network in in-line and transparent mode and uses internal or value-added services such as differentiated services, green surfing,

external bypass devices to ensure the high reliability of links. and self-service bandwidth and services.

Video
IM
Radius Server Web
Games
Radius Message Internet
VoIP

SIG Background Servers

Radius Message
SIG9800

MAN BRAS

Deployment in fixed broadband network environment

4
Service Inspection Gateway (SIG9800)

Deployment in wireless network environment modes. In addition, the SIG9800 can conduct QoS control on

In wireless network application scenario, the SIG9800 can cooperate service traffic and provide users with service, bandwidth, or traffic-

with the RM9000 (PCRF) and OCS to provide service-specific quota based differentiated services, helping wireless operators to launch

management based on duration, traffic, or their combination. thus granular operation.

meeting the requirements of operators for multiple accounting

OCS Video
IM
Web
Games
Internet
Gy VoIP
Radius Message

Radius Server

SIG Background
Radius
Servers Message Gx
SIG9800
Gi RM9000
Provisioning
System
Portal
GGSN
SMSC

3G

Deployment in wireless network environment

5
Service Inspection Gateway (SIG9800)
Product Specifications
Item
Processing capability (single device)
Physical interface
Management interface
Service interface
Power specifications
Power consumption (full
configuration)
Input (AC/DC)
Number of power supplies
Redundancy
Product specifications
Dimensions (mm) (W×D×H)
Full configuration weight
Working environment
Temperature
Humidity
Note: Equipment performance calculated in accordance with the typical configuration, the actual item, in accordance with different types of business, there
will be corresponding differences in performance.
SIG9810 SIG9820
GE interface GE interface
GE, 10 GE, 10G POS GE, 10 GE, 10G POS
SIG foreground: 3500W (full configuration)
SRU: 80W/board SIG foreground: 6000W (full configuration)
SFU: about 30W/board MPU: 50W/board
SPU: about 125W/board LPU: about 39W to 44W/board (determined by actual
LPU: about 150W to 200W/board (determined by configurations)
actual configurations) Fan: 100 W/piece
Fan: 270W/piece
90 V AC to 275 V AC; 50/60 Hz 90 V AC to 276 V AC; 50/60 Hz
-75 V DC to -38 V DC -75 V DC to -36 V DC
2 2
1+1 1+1
442×669×886 (20U) 442×669×1600 (36U)
Chassis (empty): 65kg
Full configuration: 110kg
Full configuration: <400kg
SRU: about 3.8kg/board
MPU: about 3kg/board
SFU: about 1.8kg/board
LPU: about 3.5kg/board
SPU: about 3.5kg/board
Power supply: <21kg/piece
LPU: about 4.8kg/board
Fan: about 9.5kg/piece
Power supply: about 9kg/piece
Fan: about 5kg/piece
Long term: 0°C to 45°C Long term: 0°C to 45°C
Short term: -5°C to 55°C Short term: -5°C to 55°C
Long term: 5% to 85% Long term: 5% RH to 95% RH, non-condensing
Short term: 0% to 95% Short term: 0% RH to 95% RH, non-condensing
6
NO WARRANTY
THE CONTENTS OF THIS BROCHURE ARE PROVIDED “AS IS”. EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE
ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO CASE SHALL HUAWEI TECHNOLOGIES CO., LTD BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, OR
CONSEQUENTIAL DAMAGES, OR LOST PROFITS, BUSINESS, REVENUE, DATA, GOODWILL OR ANTICIPATED SAVINGS.

Copyright © Huawei Technologies Co., Ltd. 2009. HUAWEI TECHNOLOGIES CO., LTD.
All Rights Reserved. Add: Huawei Industrial Base
The information contained in this document is for reference Bantian Longgang
purpose only, and is subject to change or withdrawal Shenzhen 518129, P.R. China
according to specific customer requirements and conditions. Tel: +86-755-28780808
Version No.: M3-080030-20090416-C-1.0

www.huawei.com