The SBC SWe performance metrics for simultaneous sessions under a full-fledged Denial of Service (DoS) attack for various call scenarios are summarized in the Benchmarking Results section below. Note that these numbers apply to our recommended CPU and memory configurations, and the results may vary depending on the actual CPUs used. Exceeding these simultaneous sessions metrics in conjunction with a Denial of Service attack may result in poor call performance, including longer call setup times and/or poor voice quality. It is therefore recommended to maintain call rates within the performance limits that are benchmarked below.
Benchmarking Setup
The two test beds used to collect benchmarking data are depicted below.
This section includes Sonus' benchmarking results using the following configurations with and without DoS. Please contact your Sonus representative if you are interested in benchmarking data for other call scenarios.
Config-1: SBC SWe Large Direct 4vCPU Configuration (Max Bandwidth: 1Gbps)
Without DoS
SBC SWe Large Direct 4vCPU Configuration (Without DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.711 pass-through
408.69
25/180
4,500
0
G.729AB pass-through
291.99
25/520
13,000
0
G.729 to G.711 transcoded
4.34
2/57
114
0
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
105.46
25/160
4,000
0
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
236.81
25/100
2,500
0
Direct Media
78/258
20,124
0
With DoS
SBC SWe Large Direct 4vCPU Configuration (With DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.711 pass-through
955.38
25/180
4,500
546.68
G.729AB pass-through
948.62
25/520
13,000
656.62
G.729 to G.711 transcoded
949.34
2/57
114
945
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
950.18
25/160
4,000
844.71
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
950.07
25/100
2,500
715.25
Direct Media
953.67
78/258
20,124
953.67
Config-2: SBC SWe Large Direct 10vCPU Configuration (Max Bandwidth: 1Gbps)
Without DoS
SBC SWe Large Direct 10vCPU Configuration (Without DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.711 pass-through
817.78
25/360
9,000
0
G.729AB pass-through
449
25/800
20,000
0
G.729 to G.711 transcoded
31.76
2/417
834
0
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
527
25/800
20,000
0
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
852.83
25/360
9,000
0
Direct Media
198/102
20,196
0
With DoS
SBC SWe Large Direct 10vCPU Configuration (With DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.711 pass-through
950.45
25/360
9,000
133.07
G.729AB pass-through
949
25/800
20,000
500
G.729 to G.711 transcoded
942
2/417
834
910
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
949.61
25/720
18,000
475
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
950.01
25/360
9,000
97.18
Direct Media
953.67
198/102
20,196
953.67
Config-3: SBC SWe Large Virtual 4vCPU Configuration (Max Bandwidth: 350 Mbps)
Without DoS
SBC SWe Large Virtual 4vCPU Configuration (Without DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.711 pass-through
349.65
25/154
3,850
0
G.729AB pass-through
202.14
25/360
9,000
0
G.729 to G.711 transcoded
4.34
2/57
114
0
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
105.48
25/160
4,000
0
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
260.49
25/110
2,750
0
Direct Media
38/526
19,988
0
With DoS
SBC SWe Large Virtual 4vCPU Configuration (With DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.729AB pass-through
350.35
25/260
6,500
204.35
G.729 to G.711 transcoded
348.34
2/40
80
345
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
349.93
25/160
4,000
244.46
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
343.59
25/110
2,750
83.1
Direct Media
349.14
38/526
19,988
349.14
Maximum Initial (challenged) REGISTER Rate for Config-3
The following table lists the maximum initial (challenged) REGISTER rate with background load on SWe under Large configuration VM.
Maximum Initial (challenged) REGISTER Rate with Background Load (Config-3)
Initial SIP Registration/Sec
Number of Subscribers
Registration Refresh (Seconds)
SIP Calls/Sec
Concurrent G.711 (20 ms) Calls
UDP
100
32,000
30
30
2,700
Config-4: SBC SWe Large Virtual 8vCPU Configuration (Max Bandwidth: 350 Mbps)
Without DoS
SBC SWe Large Virtual 8vCPU Configuration (Without DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.729AB pass-through
269.53
25/480
12,000
0
G.729 to G.711 transcoded
22.62
2/297
594
0
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
316.4
25/480
12,000
0
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
350.48
25/148
3,700
0
Direct Media
78/256
19,968
0
With DoS
SBC SWe Large Virtual 8vCPU Configuration (With DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.729AB pass-through
349.63
25/480
12,000
80.01
G.729 to G.711 transcoded
348.34
2/297
594
325.64
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
349.93
25/480
12,000
33.38
Direct Media
349.14
78/256
19,968
349.14
Config-5: SBC SWe Small Server 3vCPU Configuration (Max Bandwidth: 70 Mbps)
Without DoS
SBC SWe Small Server 3vCPU Configuration (Without DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.711 pass-through
73
9/90
810
0
G.729AB pass-through
70.75
9/350
3,150
0
G.729 to G.711 transcoded
3.04
1/90
90
0
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
16.61
9/150
1.350
0
G.711 pass-through sessions,TLS/SRTP enabled on Ingress
59.67
9/70
630
0
Direct Media
70.14
28/714
19,992
70.14
With DoS
SBC SWe Small Server 3vCPU Configuration (With DoS)
Call Scenario/Configuration
Total Bandwidth (Mbps)
CPS/CHT
Simultaneous Sessions
DoS Bandwidth (Mbps)
G.729 to G.711 transcoded
70.33
1/90
90
70.14
G.729AB pass-through sessions,TLS/SRTP enabled on Ingress
70.42
4/79
1,350
62.08
G.711 pass-through sessions,TLS/SRTP enabled on Ingress