Features
Plans About Blog Contact
Voice & VoIP

Session Border Controller (SBC)

Protect, interoperate, and control all SIP traffic at your network edge. Our carrier-grade SBC handles NAT traversal, topology hiding, TLS/SRTP encryption, codec normalisation, and DoS protection — enabling secure SIP trunking, peering, and enterprise interconnect at any scale.

The Gatekeeper of Your VoIP Network

A Session Border Controller sits at the boundary between your network and external SIP peers. It enforces security policies, resolves NAT and interoperability issues, encrypts media, and provides a single point of control for all inbound and outbound VoIP sessions — without introducing perceptible latency to voice quality.

SBC Capabilities

NAT Traversal
RTPEngine handles full media anchoring and NAT traversal for endpoints behind symmetric NAT, CGNAT, and restrictive firewalls. ICE and STUN support for WebRTC endpoints. No client-side VPN required.
Topology Hiding
Complete SIP header scrubbing removes internal IP addresses, server identifiers, and route topology from messages before they leave your network. Prevents enumeration of internal SIP infrastructure by external parties.
TLS & SRTP
SIP signalling encrypted with TLS 1.3. Media encrypted with SRTP/SDES or DTLS-SRTP for WebRTC. Per-trunk certificate management with automatic renewal. Cipher suite enforcement and protocol downgrade protection.
Codec Normalisation
Transcode between G.711 alaw/ulaw, G.722, G.729, and Opus. Strip unsupported codecs from SDP offers, reorder codec preference lists per trunk policy, and handle DTMF translation between RFC 2833, SIP INFO, and in-band.
DoS & Fraud Protection
Rate limiting per source IP, per account, and globally. Invalid SIP message dropping, register flood protection, and INVITE storm detection with automatic temporary blacklisting. Integrated with DDoS mitigation layer.
SIP Normalisation
Fix header format discrepancies between SIP implementations, rewrite From/To/Contact URIs, manipulate dialled digits via regex transformation rules, and enforce RFC compliance on messages from legacy PBX equipment.

Specifications

Calls Per Second5,000
Media EngineRTPEngine, Rtpproxy
Concurrent Sessions30,000+
Signalling EncryptionTLS 1.2 / 1.3
Media EncryptionSRTP/SDES, DTLS-SRTP
TranscodingG.711, G.722, G.729, Opus
TransportUDP, TCP, TLS, WebSocket
HAActive-active with state sync

Secure Your SIP Network Boundary

Deploy the SBC on-premise or as a managed cloud service. Our engineers handle trunk configuration, certificate management, and ongoing policy tuning.

MOBITELSMS Assistant

Hi! I'm the MOBITELSMS assistant. How can I help you today?