Stingray Service Gateway

Stingray SG is a software product designed for Internet service providers, IPTV providers and other companies of telecom industry.


All-in-One solution. The key function of the Stingray SG platform is deep packet inspection and classification of traffic at the L2-L7 levels of the OSI model. The system solves the following tasks:

—filtering traffic by black list

—prioritization and improving the Quality of Service


—Carrier Grade NAT

—mini-Firewall and protection against DDoS and BotNet activity

—Wi-Fi HotSpot management

—conducting marketing campaigns and notifications

—Quality of Experience module.

The system supports integration with billing and RADIUS server.

Available Options

Quality of Service (QoS)

The Quality of Service (QoS) module enables bandwidth management based on application layer protocols, data flows and bandwidth usage. It saves up to 25% of the bandwidth capacity by prioritizing traffic, which improves the operator’s quality of service in general.

Read More

Quality of Experience (QoE)

Quality of Experience (QoE) is a DPI module that gathers statistics and evaluates QoE. The data that it collects are compared with the preset metrics to evaluate the quality of telecom services and Internet connection for a single user. Based on this information, the module initiates steps required to improve the quality of service.

Read More

Carrier-grade NAT (CGNAT)

The CG-NAT option enables network address and port translation and provision of a single public IPv4 address to several users. CG-NAT is introduced to deal with IPv4 address exhaustion and simplify transition to IPv6.

The “classic” NAT with port translation on Linux or FreeBSD is a port-restricted NAT that allows inbound connections only on a specific port. As a result, for example, two gaming consoles behind such a NAT gateway won’t be able to communicate with each other, because the port number will be changed. Similarly, it prevents the connection of torrent trackers and other peer-to-peer protocols. CG-NAT addresses these issues by allowing inbound connections on any port.

Example of Stingray SG being used as a NAT gateway with redundancy:

Read More

Firewall and Anti-DDoS

Stingray SG comes with a firewall that protects users from being hacked on open ports and blocks any illegal subscriber activity. The firewall protects your network from DoS and malware attacks, improves the quality of service, ensures reliable and secure operations. You can use the firewall together with the QoE module to reveal the perpetrator and the victim and quickly notify users about any suspicious activity.

Read More

Marketing and Redirecting

With Marketing and Redirecting, operators receive a tool to notify subscribers about new offers or future network maintenance. When an operator activates the service, instead of being redirected to the home page, the subscriber is redirected to the operator’s information page, which contains all the necessary data.

Read More

The software solution doesn’t depend on a particular server hardware supplier and can be flexibly adapted to business requirements.

years on the
Telecom market
identifiable protocols
200 Gbps
per one CPU

Who use Stingray SG

Customer Success Stories

Traffic Lab

Do you want to test Stingray SG in real-time and see how it processes collector analytical data, monitors the network, enhances subscriber loyalty by leveraging metrics, and increases revenue per subscriber using our products? Try Traffic Lab—free for any telecom operator to perform various evaluations, such as:

NetFlow analysis is used to report on network traffic at the session level and generate detailed network statistics. Reports can be exported and visualized. NetFlow analysis also yields statistics on subscriber ping, including peak and medial values.


  • Identify subscribers with high ping and lower connection quality in real time
  • Troubleshoot CPE, wireless routers, access and aggregation switches
  • Export statistics to the specialized monitoring system and dashboard of the technical support team
  • Export Full NetFlow statistics on transport and application layer protocols, with traffic presented by flow and AS
  • Prioritize (QoS) based on bandwidth allocation
  • Search for the best Internet exchange points and uplinks
  • Detect malware and DDoS attacks, develop your own security system
  • Gather statistics on repeat requests
  • Collect session retransmit statistics
  • Troubleshoot Wi-Fi routers and physical channels
  • Sell equipment with the best coverage and functionality parameters

Clickstream analysis is used to collect statistics on the number of generated sessions and subscriber devices. It is used to identify the most visited resources, including at endpoint client devices.

  • Prevent negative feedback and subscriber churn
  • Determine household types based on filters
  • Prevent Internet reselling
  • Automate feedback collection after on-site repair works
  • Notify about network failures and reduce the load on the support team
  • Inform subscribers about new services, offers and discounts

Please fill out the form to test Stingray SG

We invite you to join the free testing of Stingray SG. Our testing lab has enough equipment power to support testing for any purpose in close-to-real-life conditions. Our engineers ensure full support of your testing effort and work together with you on releasing your project to production.

Network stress test at OSI L2–L7 with traffic generation of up to 100 Gbit/s.


  • Emulate traffic flow and as many simultaneous sessions as you need
  • Use a wide range of parameters and protocols for traffic generation management
  • Emulate failures and recovery
  • Emulate traffic packet allocation within a time interval
  • Replay pre-recorded traffic with modified IP addresses or sending/receiving ports

Software editions

Software editions BASE BNG COMPLETE
Filtering by the blocklisted Internet sites
Statistics gathering and analysis on protocols and directions
Traffic prioritization depending on a protocol and direction
Common channel policing
Subscriber notification and marketing campaigns
Subcribers channel policing for IPv4 and IPV6
Allowlist and Captive Portal
BNG L3 (IPoE), Dual Stack IPv4/IPv6, Radius with CoA
BNG L2 (PPPoE, DHCP), Dual Stack IPv4/IPv6
Carrier Grade-NAT
Ads blocking and replacing
Lawful Interception
Mini-Firewall for blocking on certain ports
Protection against DOS and DDOS attacks
One-year Support and Subscription Services
Adding banners to HTTP resources Subscription
Categorization of web resources Subscription

Get in Touch

Have a question or interested in learning more how IT can help your business? Please connect with us.