High‑Performance Architecture

Accelerated processing for mobile traffic

Operator‑grade • Scalable • Sovereign

View Processing Pipeline Start a Pilot

Architecture Overview

EdgeNqoba provides a high‑throughput behavioural inference system for encrypted mobile traffic, designed for predictable performance and seamless integration with modern operator environments.

DPU & Hardware Acceleration

Aligned with carrier-grade acceleration frameworks, including NVIDIA BlueField‑3 DPUs and the DOCA software stack for high-performance packet processing and inline network intelligence.

AI-Native Processing

Leverages hardware-accelerated GTP‑U processing and GPU‑driven inference pipelines, consistent with emerging AI‑native network architectures and AI‑RAN ecosystem evolution.

Sovereign & Scalable

Designed to run on local edge infrastructure, ensuring data sovereignty while scaling effortlessly to meet the demands of 5G and beyond.

Processing Pipeline

All heavy processing operations run on specialised accelerators, avoiding CPU bottlenecks and ensuring consistent latency.

1

Non-Inline Ingress

Non-inline interception of GTP-U outer headers before decapsulation, ensuring zero payload access and preserving critical TEID mobility data.

2

Flow Processing

Stateful tracking of subscriber sessions across distributed edge nodes, maintaining continuity through complex network handovers.

3

Feature Extraction

Extraction of over 30 proprietary behavioural metadata signatures directly on hardware-accelerated data-plane accelerators.

4

Inference

Real-time classification and QoE estimation powered by our protected behavioural physics engine, delivering sub-10ms latency.

Accelerated Feature Engineering

EdgeNqoba performs feature engineering directly on data‑plane accelerators. This hardware‑native approach is central to our intellectual property and enables carrier‑grade performance.

Packet Timing

Microsecond-level precision for inter-packet delay and jitter analysis.

Burst Analysis

Traffic burst detection and volume profiling for application identification.

Pattern Entropy

Entropy estimation to distinguish encrypted application behaviours.

Flow Embeddings

Advanced vector representations for machine learning classification.

Encrypted Traffic Fingerprinting

Identify applications and user behaviours purely from metadata, ensuring zero-payload processing.

Proprietary Technology Notice: The underlying feature extraction algorithms, hardware-acceleration mappings, and behavioural physics models are protected intellectual property. Full technical methodology is available under NDA for qualified partners.

Separated Control & Data Planes

This separation guarantees real‑time data‑plane performance while maintaining flexible operator integration.

Data Plane (Accelerated)

Fully accelerated to handle line-rate traffic processing.

  • Hardware offloading
  • Inline packet processing
  • GPU/DPU inference
  • Zero-copy memory access

Control Plane (Standard CPU)

Runs on standard infrastructure for management and orchestration.

  • Policy enforcement
  • State management
  • Logging and telemetry
  • Orchestration & monitoring

Operator Outputs

EdgeNqoba delivers several carrier‑grade outputs directly to your existing OSS/BSS and network management systems.

QoE Optimisation
Enhanced
Improved application performance and user experience through real-time traffic insights.
Local Breakout
Reduced
Significant reduction in backhaul costs by intelligently routing traffic at the edge.
Compliance Support
Aligned
Full alignment with regulatory requirements, including ETSI-compliant lawful intercept.
Network Intelligence
Aggregated
Anonymised, high-value insights for capacity planning and strategic decision-making.

Vertical-Specific Architectural Flows

EdgeNqoba's core zero-payload engine adapts to distinct operational environments. Below are the high-level data flows for our primary commercial verticals, demonstrating integration inference mechanics.

Mobile Fraud Detection (SIM Swap & IRSF)

Detecting fraudulent transitions and premium-rate abuse purely through behavioural metadata anomalies, without inspecting the encrypted payload.

1

GTP-U Interception

Non-inline capture of outer tunnel headers, preserving TEID transition chains and session timing.

2

Behavioural Baseline Engine

Proprietary analysis comparing real-time flow symmetry and burst patterns against historical subscriber baselines.

3

Anomaly Scoring

Generation of deviation scores indicating potential SIM swap events or IRSF high-volume call patterns.

4

Fraud NOC Integration

Real-time alerts pushed to operator fraud systems for immediate subscriber verification or block.

IP Protection: The specific statistical thresholds for baseline deviation and the TEID topology mapping algorithms are protected trade secrets.

OTT Fair Share Measurement (Regulator View)

Providing national regulators with empirical, zero-payload data on OTT bandwidth consumption to resolve infrastructure cost debates.

1

Multi-Operator Mirroring

Secure, anonymised ingestion of N3/S1-U traffic metadata from multiple MNO core edges.

2

Sovereign Aggregation Node

EdgeNqoba classification engine identifies OTT application families (e.g., Streaming, VoIP, Social) purely via metadata signatures.

3

Privacy-Preserving Volumetrics

Aggregation of bandwidth consumption by hour, cell, and application type, stripping all subscriber-identifiable data.

4

Regulator Dashboard

Delivery of sovereign, audit-ready OTT traffic reports to national regulatory authorities.

IP Protection: The exact metadata-to-application mapping tables and the multi-flow decomposition logic are protected intellectual property.

5G Network Slicing Intelligence

Enabling dynamic 5G SA network slicing by providing the real-time traffic classification required to assign flows to the correct network slice.

1

5G SA User Plane (UPF)

Interception of encrypted PDU sessions before they traverse the core transport network.

2

Sub-10ms Flow Profiling

Hardware-accelerated behavioural physics engine classifies flows into eMBB, URLLC, or mMTC profiles in real-time.

3

Slice-Ready Telemetry

Generation of standardised metadata tags indicating the optimal network slice for each encrypted flow.

4

Core Orchestration (NSSF)

Telemetry fed to the 5G Core Network Slice Selection Function for dynamic, policy-driven steering.

IP Protection: The proprietary feature vectors used to distinguish latency-sensitive URLLC traffic from standard eMBB traffic are protected trade secrets.

Ready to Modernise Your Network?

Evaluate our high-performance architecture, review our technical specifications, and explore pilot opportunities for your network.