Production Telecom Core · 99.999% SLA ระบบ Telecom Core ระดับ Production · SLA 99.999% 3GPP Release 17 Compliant · ISO/IEC 27001 สอดคล้อง 3GPP Release 17 · ISO/IEC 27001
Capability 3.2ความสามารถ 3.2

Zero-Downtime Architecture Engineered for Five-Nines Uptime Reliability.สถาปัตยกรรม Zero-Downtime สำหรับ Uptime ระดับ Five-Nines

SCTP and Diameter multihoming, Active/Active dual-node clustering, and hypervisor-based virtualization — eliminating every single point of failure from OCS to signaling gateway.

SCTP และ Diameter Multihoming, Dual-Node Active/Active Clustering และ Hypervisor-Based Virtualization — ขจัด Single Point of Failure ทุกจุดตั้งแต่ OCS จนถึง Signaling Gateway

Audience: Infrastructure Heads · Security & Compliance Officers · CTOs SLA: 99.999% architectural target
99.999%
Architectural availability target
~5min/yr
Maximum unplanned downtime at 5-nines
0 SPOF
Single points of failure by design
<1s
Path failover via SCTP multihoming
Control-Plane Resilience

SCTP and Diameter MultihomingSCTP และ Diameter Multihoming

The most common cause of MVNO service outage is a control-plane link failure — the SS7 or Diameter connection to the host MNO drops and subscribers lose access to services that require real-time authorization: voice calls, data sessions, SMS.

Cipher Telecom eliminates this failure mode through multihoming: every SCTP association and Diameter peer connection is bound to multiple local IP addresses residing on different physical network interfaces, connected to different upstream switches. If a cable fails, a NIC fails, or an upstream switch fails, the SCTP stack detects the path failure in under one second and instantly shifts all traffic to the surviving paths — without tearing down the association and without interrupting any active user session or in-flight billing event.

How SCTP multihoming works

  • Each SCTP endpoint advertises 2–4 local IP addresses at association setup.
  • The remote peer (host MNO STP) monitors all paths via HEARTBEAT chunks.
  • If the primary path becomes unreachable, SCTP promotes the next available path without dropping the association.
  • No TCP connection teardown, no BGP reconvergence wait, no session state loss.
  • Active user sessions continue without interruption — the failover is transparent to the application layer.

Multihomed SCTP topology

MVNO Core IP-A · 10.0.1.10 IP-B · 10.0.2.10 Switch A Primary path Switch B Failed path Host MNO STP IP-C · 172.16.1.1 IP-D · 172.16.2.1 ACTIVE PATH — TRAFFIC FLOWS FAILED — HEARTBEAT MISS → FAILOVER <1s
Compute Resilience

Dual-Node Host Redundancyความซ้ำซ้อนแบบ Dual-Node

Every network element in Cipher Telecom's stack — OCS, PCEF, SMSC, USSD gateway, signaling gateways — is deployed across two redundant virtualized server environments: Node A and Node B, resident in the same data centre but on separate physical hosts, separate power feeds, and separate network uplinks.

The cluster operates in Active/Active mode: both nodes handle live traffic simultaneously. Subscriber session state is synchronously replicated between nodes so that if Node A fails, Node B has a complete and current view of every active session — no sessions are dropped, no billing records are lost.

Cluster topology per network element

NENode A roleNode B roleState syncFailover time
OCSActive — rating + authorizationActive — rating + authorizationIn-memory replication, synchronous<500ms
PCEFActive — policy enforcementActive — policy enforcementSession table sync<1s
SMSCActive — MO/MT routingActive — MO/MT routingQueue replication<500ms
Signaling GWActive — SCTP/M3UAActive — SCTP/M3UARouting table sync<1s
Infrastructure Efficiency

Virtualized Infrastructure Efficiencyประสิทธิภาพของโครงสร้าง Virtualized

Every Cipher Telecom network element runs as a Virtual Machine (VM) or container on a hypervisor-based infrastructure layer. This provides three operational advantages over bare-metal proprietary appliances:

  • Elastic scaling — additional VM instances can be provisioned in minutes as subscriber load grows, without hardware procurement lead times.
  • Snapshot-based backup — complete system state, including subscriber database, can be snapshotted and replicated off-site. Recovery from a catastrophic failure is a restore operation, not a rebuild.
  • Resource isolation — each NE runs in its own isolated VM with dedicated vCPU and memory allocation; a resource spike in one element cannot starve another.
  • On-premise or co-location flexibility — the same VM images run on customer-provided data-centre hardware or Cipher-managed co-lo infrastructure.
Security & Compliance

Security Architectureสถาปัตยกรรมความปลอดภัย

Network segmentation
Signaling VLAN, charging VLAN, management VLAN and data-plane VLAN on separate L2 segments with ACL-enforced inter-segment access
SS7 firewall
SCCP message filtering — rejects messages with anomalous Global Title combinations; protects against SS7 location-tracking and interception attacks
Diameter firewall
Origin-Host / Origin-Realm whitelist; message rate limiting per peer; AVP validation against 3GPP spec tables
TLS on management plane
All NOC access, API endpoints, and monitoring dashboards over TLS 1.3; certificates from internal CA, rotated annually
PDPA / GDPR controls
Subscriber data residency in-country; CDR retention configurable per regulatory requirement; audit log for all privileged access
Lawful intercept
ETSI TS 101 671 / 3GPP TS 33.107 LI architecture — ADMF and DF functions available on request

What 99.999% Actually Means99.999% หมายความว่าอะไรจริงๆ

AvailabilityDowntime per yearDowntime per monthTypical architecture
99%3.65 days7.3 hoursSingle server, no redundancy
99.9%8.77 hours43.8 minutesBasic hot-standby
99.99%52.6 minutes4.4 minutesActive/Standby cluster
99.999%5.26 minutes26.3 secondsActive/Active + multihoming (Cipher Telecom)

Five-nines is an architectural target, not a contractual guarantee on all incidents. Actual SLA terms are defined per engagement in the service schedule. Numbers assume a single-year window.

Frequently Asked Questions

Q.01 What is SCTP multihoming and how is it different from IP failover?

SCTP multihoming is a transport-layer feature where a single SCTP association is bound to multiple IP addresses on both endpoints simultaneously. When a path fails, the SCTP protocol itself detects the failure (via missed HEARTBEAT acknowledgements) and reroutes traffic to a surviving path — all within the same association, without tearing it down and re-establishing it. Traditional IP failover (e.g. VRRP) operates at Layer 3 and takes longer, often requiring sessions to be rebuilt. SCTP multihoming failover happens in under one second and is invisible to the applications (OCS, SMSC) using the association.

Q.02 What is a Single Point of Failure (SPOF) and how does Cipher eliminate them?

A Single Point of Failure is any component in a system whose failure causes the entire system to become unavailable. Common SPOFs in telecom deployments include a single server running the OCS, a single network interface on the signaling gateway, or a single upstream switch. Cipher Telecom eliminates SPOFs by deploying every network element in an Active/Active dual-node cluster, connecting each node via multiple physical network interfaces to separate upstream switches, and using SCTP multihoming for all signaling connections.

Next step

Download the High Availability Whitepaper.ดาวน์โหลด High Availability Whitepaper

Architecture diagrams, failure scenario analysis and SLA mapping — ready for your infrastructure review board and compliance sign-off.

แผนสถาปัตยกรรม, การวิเคราะห์สถานการณ์ล้มเหลว และการ Map SLA — พร้อมสำหรับการตรวจสอบโครงสร้างพื้นฐานและการอนุมัติด้านการปฏิบัติตามกฎ