• Complete 3GPP IMS implementaiton with the P-CSCF, S-CSCF, I-CSCF, and optionally E-CSCF and IP-SM-Gw to support the full VoLTE/VoNR deployment.

• Fully developed in Go-lang with cloud principles and features.

• Supports 3GPP Release 18 and GSMA IMS, SMS, roaming and security recommendations.

• To be used from private networks to large operators, as well as IMSaaS.

• S-CSCF and IP-SM-Gw include auto-chaining features for local delivery reducing the signaling. Convenient for isolated private networks.

• S-CSCF and I-CSCF integrate with HSS using Diameter Cx interface.

• IP-SM-Gw integrates with HSS Sh interface and delivers to SMSC using Diameter SGd interface.

• Supports flexible options for Breakout to other networks.

• Deploy-able in the public or private cloud or in a private constrained resources setup.

Key Differentiation

Day-One engineering for scale and stability in production environments.

Layer 3-to-7 integrated fire-walling (integrated SIP control with a user-space IPsec implementation, to overcome limitations when outsourcing IPsec to the Linux kernel).

Cloud-inherent architecture, with split state, using 2024 modern technologies and fast development in Go-lang.

Can be adapted and licensed for small deployments and also for larger ones.

It remains flexible to perform any kind of message manipulations or routing decisions, since it can be deployed bundled with a Kamailio SIP proxy, for adding fast custom logic required by customer integrations.

Main Features

• Release 18 compliance

• Support for latest security algorithms (aes-gmac and aes-gcm), as well as all legacy ones

• User-space IPsec implementation with full control over tunnel handling and security

• Diameter Rx integration with all features (e.g. Location verification)

• HTTP2 N5 interface for integration with the 5G SA core

• Media anchoring and transcoding

• Flexible SIP routing and options

• Emergency calling support (ng112, ecalls, RTT etc.)

• Lawful Interception interfaces

• Stateless (using external repository for tunnels, registrations, dialogs etc. state)

• Security by design

• Scales from small private networks to large operators

A service that permits to connect IMS clients which are not able to perform IMS AKA authentication and/or IPsec security association to a standard compliant IMS network.

Clients use the IPsecProxy as their SIP outbound proxy for all SIP signaling.

Clients can either authenticate to the server using Digest MD5 or a fixed/pre-configured IP address, in that case the IPsecProxy uses AKA credentials pre-configured from a user database and performs IMS AKA and IPsec towards the network.

Clients may support IMS AKA but not IPsec, in that case  the IPsecProxy just performs the security association part of the registration to the IMS.

The service can run in a server where several clients use it, or co-located with each client.