{{indexmenu_n>2}}
======Introducing Cubro Service Gateway======
The Cubro Service Gateway is a multifunctional network traffic management platform based on Deep Packet Inspection (DPI) technology. This platform integrates the following functionalities into a single system:
  * Broadband Remote Access Server (BRAS/BNG)
  * Carrier Grade NAT (IPv4 address translation)
  * DPI (Traffic recognition and classification across L2-L7 protocols)
  * Subscriber, policy, and quality management based on DPI data
  * Network visibility and analytics database for Quality of Experience (QoE)
  * Lawful interception and export of statistics and metadata to third-party systems
  * Graphical management interface
Modules:
  * [BRAS] Broadband Remote Access Server (BRAS/BNG)
  * [NAT] Carrier Grade NAT (Network Address Translation for IPv4 and IPv6)
  * [DPI] Deep Packet Inspection (Traffic classification and tagging based on L2-L7)
  * [SM] Subscriber Management
  * [QoE] Network Visibility and Quality of Experience
  * [WebGUI] Management web interface (available in Base and Command and Control editions)
//Following the terminology used in 3GPP specifications, the platform can implement PCEF and PCRF functions in packet core networks, as well as BRAS functions in fixed broadband networks. All modules can operate concurrently, with functionality availability determined by the purchased license terms.//

Cubro Service Gateway nodes can operate either as standalone units or form high-performance clusters with throughput capacities of up to 2.4 Tbps per installation point. Clustering is facilitated by EXA series packet brokers, with the Cubro EXA packet broker serving as the cluster controller to ensure correct handling of network traffic. It manages the balanced distribution of traffic across DPI nodes and directs both upstream and downstream flows within the same session through the same traffic processing node.

Regardless of operating mode-whether as a standalone unit or a cluster-the system functions as a transparent Layer 2 network device. Ports are paired into bridges, with the port facing subscribers labeled as "in" and the one facing upstream providers as "out." These labels are manufacturer conventions, and each port operates in full-duplex mode to handle both incoming and outgoing traffic. Operating in transparent bridge mode means that a network packet received at one end of the bridge, after processing, will be sent out through the corresponding port on the same bridge.

Note that assigning the correct "in" and "out" flags to traffic-processing interfaces is essential for proper system operation, as DPI needs to accurately identify client and server sides. For certain protocols, improper port orientation can affect traffic recognition quality.