BIG-IP Next Service Proxy for Kubernetes

BIG-IP Next Service Proxy for Kubernetes (SPK) Enables 5G Networks

Multi-protocol 4G and 5G signaling for 5G transition

BIG-IP Next SPK is uniquely designed to align with Kubernetes design patterns. It acts as a service proxy to provide a “single pane of glass” for ingress and egress networking and security for the Kubernetes cluster to the outside world. It simplifies the service provider architecture, integrating smoothly with the broader network and security policies, leading to lower complexity and operational cost.

Integrates Kubernetes with the Wider Service Provider Network - Kubernetes does not provide a central point for network traffic ingress/egress and ignores egress traffic. BIG-IP Next SPK aligns with Kubernetes design patterns and avoids increased OpEx spend.
Enables 4G Protocols on a 5G Network - Service provider networks utilize multiple protocols (Diameter, SIP, GTP, SCTP, etc.) that are not supported by Kubernetes but are critical to transition from 4G to 5G.
Provides a Single Point of Networking for Kubernetes Traffic - BIG-IP Next SPK brings critical carrier-grade capabilities to a Kubernetes environment. It enables 4G and 5G traffic management at North/South container ingress into the 5G core.

big-ip-multi-protocol

Multi-protocol 4G and 5G signaling for 5G transition

BIG-IP Next SPK is uniquely designed to align with Kubernetes design patterns. It acts as a service proxy to provide a “single pane of glass” for ingress and egress networking and security for the Kubernetes cluster to the outside world. It simplifies the service provider architecture, integrating smoothly with the broader network and security policies, leading to lower complexity and operational cost.

Integrates Kubernetes with the Wider Service Provider Network - Kubernetes does not provide a central point for network traffic ingress/egress and ignores egress traffic. BIG-IP Next SPK aligns with Kubernetes design patterns and avoids increased OpEx spend.
Enables 4G Protocols on a 5G Network - Service provider networks utilize multiple protocols (Diameter, SIP, GTP, SCTP, etc.) that are not supported by Kubernetes but are critical to transition from 4G to 5G.
Provides a Single Point of Networking for Kubernetes Traffic - BIG-IP Next SPK brings critical carrier-grade capabilities to a Kubernetes environment. It enables 4G and 5G traffic management at North/South container ingress into the 5G core.

cloud-native-infrastructure-core-edge

5G cloud-native infrastructure—core and edge deployments

BIG-IP Next SPK enables a 5G Core solution which paves the way for robust 5G consumer and enterprise solutions. New service-based architecture use cases like network slicing and MEC enable dynamic allocation of resources for specific customers and specific applications. BIG-IP Next SPK provides a North/South traffic ingress while Aspen Service Mesh provides a complementary solution for East/West traffic flowing within Kubernetes clusters.

Scaling the Core, Edge, and Far Edge - As a container-based solution, BIG-IP Next SPK can scale from a small number of very large cell sites in the core to a large number of smaller cell sites at the edge and far edge.
Cloud-Native for New Levels of Flexibility - By building the 5G core with a cloud-native architecture, service providers will be able to achieve new levels of operational automation, flexibility, and adaptability.
Interoperates with Aspen Service Mesh - Aspen Service Mesh provides observability, security, and control for the traffic flowing within and between Kubernetes clusters and ensures that containers run efficiently across thousands of edge sites.

Cloud infrastructure security and visibility

Security needs to be deployed at all layers and work together with new clusters when introducing new technology. It is paramount for all the new points of exposure in the 5G network, which requires new, broader automation, visibility, and management functions.

Ingress Security - BIG-IP Next SPK enables security services applied at ingress such as signaling firewalls.
Topology Security - Topology hiding at ingress obscures the internal structure within the cluster.
Ingress Traffic Visibility - Per-subscriber traffic visibility at ingress allows traceability for compliance tracking and billing purposes.

big-ip-cloud-infrastructure-security-visibility

Cloud infrastructure security and visibility

Security needs to be deployed at all layers and work together with new clusters when introducing new technology. It is paramount for all the new points of exposure in the 5G network, which requires new, broader automation, visibility, and management functions.

Ingress Security - BIG-IP Next SPK enables security services applied at ingress such as signaling firewalls.
Topology Security - Topology hiding at ingress obscures the internal structure within the cluster.
Ingress Traffic Visibility - Per-subscriber traffic visibility at ingress allows traceability for compliance tracking and billing purposes.

Product Overview

A service proxy that enables 5G networks

BIG-IP Next SPK is deployed as a Kubernetes resource at the ingress of the cluster, supporting signaling traffic management and control, load balancing, security, and visibility between nodes, becoming part of the Kubernetes orchestration environment.

Control at container ingress

Applies policy control over multiple traffic types many of which are unique to a service provider network such as TCP, UDP, SCTP, Diameter, GTPcV2, and SIP.

Security at container ingress

Provides a single point for network security for traffic into and within a service provider’s cloud-native infrastructure.

Visibility at container ingress

Visibility of traffic flow into and within the infrastructure for more efficient troubleshooting, revenue assurance, and flexible revenue controls.

Billing or charging at container ingress

Capitalize on new 5G revenue streams while maintaining revenue from current services by using existing billing and charging systems such as AAA and OCS.

Core Capabilities

BIG-IP Next SPK is unique in bringing critical network capabilities to a Kubernetes environment to meet the demands of a service provider network. It provides control for 4G and 5G signaling while adding needed security and visibility.

Kubernetes ingress and egress

A single point of networking architected for service provider networks

Multi-protocol 4G and 5G

Telco Network Functions using telco protocols—L4 (SCTP) and L7 (Diameter, HTTP/2)

Network security

Network security controls for traffic into and within the cloud-native infrastructure

Hardware assist

Offload processor intensive functionality such as DDoS and Encryption to Intel SmartNIC

Visibility

Statistics and analytics for revenue assurance

Management

Orchestrated and configured by Kubernetes

Uses Kubernetes patterns

Embraces and extends Kubernetes patterns

Platform Support and Integrations

Kubernetes integrations
F5 partner CNF certification program
Technology alliances

Platform Support and Integrations

Certify partner CNFs interoperability on SPK and Aspen Service Mesh

F5 and its partners certify onboarding, integration, deployment, and life cycle management of BIG-IP Next SPK and Aspen Service Mesh in a cloud-native environment with vendor CNFs.

Technology alliances

F5 collaborates with the world’s leading technology companies. Together, via interoperability and integrations, we help our customers secure and deliver extraordinary digital experiences.

Resources

Featured

5G Makes a Cloud-Native Application Architecture Vital

Transforming towards a cloud-native architecture brings service providers many advantages and challenges. F5 cloud-native solutions help accelerate 5G adoption.

Read the article

Related Products

Next Steps

Contact us

Find out how F5 products and solutions can enable you to achieve your goals.

Contact F5

Vorgeschlagene Suche

BIG-IP Next Service Proxy for Kubernetes

BIG-IP Next Service Proxy for Kubernetes (SPK) Enables 5G Networks