Carrier-grade SBC expertise

From peering design to proactive voice quality management, helping operators run secure, interoperable and scalable voice networks.

Why operators need an independent partner?

European operators’ voice networks rely on SBC infrastructure from global vendors such as Oracle, Ribbon, Nokia or Ericsson. Regardless of the vendor’s origin, the new European regulatory framework (CRA, NIS2, 5G Toolbox) requires operators to demonstrate effective, sovereign control over these critical assets.

The vendor provides the technology. The European integrator operates it, monitors it independently, manages the cryptographic keys and assumes regulatory liability under EU jurisdiction.

Quobis is that European integrator.

sbc
The regulatory requirement

Controlled use with mitigation

Regulatory compliance is not only a vendor selection problem. It is an architectural and operational problem. Operators need to decouple critical functions so that security, monitoring, key management and day-to-day operation (daily changes, routing, troubleshooting and preventive maintenance performed) remain under European control.

Deactivate non-essential functions

Quobis analyses which SBC functions are critical and which can be externalised to EU-controlled components (analytics, recording, transcoding).

Vendor-independent monitoring

Quobis VoIP Network Monitor operates outside the vendor’s stack, giving the operator real visibility.

Operation by EU-resident personnel

Quobis team in Spain — no dependency on NOCs in USA/Israel for daily operations.

Cryptographic key management outside the vendor (HYOK)

Quobis configures TLS/SRTP with keys managed by the operator, not the SBC manufacturer.

Functional decoupling

Analytics, media processing, recording, monitoring or routing logic can be separated from the SBC vendor when required by the architecture.

Controlled vendor access

Any remote support from the manufacturer can be authorised, limited and supervised by a European integrator.

delivered by Quobis

Core SBC roles

Advanced Security & Voice Firewall

Protecting the operator’s network against fraud, attacks and unauthorised access.

  • Topology hiding — Masking internal IP addresses and network structure from external parties
  • DoS/DDoS mitigation — Protection against SIP flooding, brute-force registration attacks and toll fraud
  • Access control — Strict ACLs and authentication mechanisms for all inbound traffic
  • End-to-end encryption — TLS for signalling, SRTP for media, with keys under operator control
  • Hardening — “Deny all, permit by exception” approach to SBC configuration

Interoperability & Normalisation

Resolving incompatibilities between different network domains, SIP variants and equipment vendors.

  • Multi-vendor interworking — Bridging protocol differences between equipment from different manufacturers
  • SIP normalisation — Adapting different SIP interpretations between origin and destination operators
  • Header Manipulation Rules (HMR) — Modifying, adding or removing critical SIP parameters to ensure compatibility
  • Network interworking — IPv4/IPv6 translation, IMS-to-legacy VoIP bridging, codec negotiation, transcoding between incompatible media formats (e.g. G.711, G.729, AMR-WB, EVS, Opus).

Session Control & Intelligent Routing

Managing the operator’s voice traffic with intelligent routing, load balancing and high availability.

  • Session lifecycle management — Establishment, modification and termination of all calls
  • Stateful proxy — Real-time tracking of every active session
  • Policy-based routing — Least Cost Routing (LCR), time-of-day routing, quality-based routing
  • Load balancing & redundancy — Traffic distribution across multiple trunks with automatic failover
  • Geo-redundant HA — Active-active or active-passive configurations with session state synchronisation

Quality of Service (QoS) Management

Ensuring voice quality across the operator’s network with proactive monitoring and admission control.

  • Call Admission Control (CAC) — Limiting concurrent sessions per realm/trunk to prevent congestion
  • Media anchoring — Forcing audio/video flows through the SBC for traffic control and lawful interception
  • NAT traversal — Resolving addressing issues for devices behind routers or firewalls
  • RTP monitoring — Real-time detection of packet loss, jitter and latency per trunk
  • Proactive alerting — Independent monitoring via Quobis VoIP Network Monitor (ASR, latency, jitter, SIP errors)

Operator Interconnection (Peering)

Connecting the operator’s network with other carriers securely, with normalisation and at scale.

  • Multi-carrier SIP peering — Secure interconnection with multiple national and international operators
  • Trunk management — Configuration, testing and optimisation of inter-operator SIP trunks
  • Regulatory compliance — Number portability, emergency routing, lawful interception support
  • Billing integration — Detailed CDR generation for BSS/OSS systems
  • Scalability — From hundreds to tens of thousands of concurrent sessions per node

Integration with IMS architectures

When the operator’s architecture includes an IMS core, the SBC assumes complementary roles:

  • NNI SBC — Protecting and controlling connections between operator networks
  • Access SBC — Managing access from enterprise or residential networks
  • Trunk SBC — Administering SIP trunk links to corporate customers
  • Peering SBC — Facilitating traffic exchange between operators and OTT providers

→ Discover our open-source IMS solution

Quobis services for operators

The real challenge is not choosing a single box, but designing an architecture where each SBC role delivers security, interoperability and scalability without creating vendor lock-in or sovereignty gaps.

Consulting

Network architecture analysis, SBC role assessment, vendor-independent evaluation, sovereignty gap analysis and migration planning.

Implementation

SBC deployment, SIP peering configuration, header manipulation, high availability, IMS integration and SIPp scenario validation.

Operation

L2/L3 support, preventive and corrective maintenance, change management, routing updates, certificate management and troubleshooting.

Security and compliance

Voice security assessment, SBC hardening, TLS/SRTP configuration, controlled vendor access and CRA alignment for open-source components.

20 years of telecom engineering

Need to operate, migrate or optimise the SBCs in your network?

carrier-grade voice engineering team

Quobis has been engineering, deploying and operating carrier-grade SBCs for European operators for over two decades — across Oracle, Ribbon, Audiocodes and open-source platforms.

Related network and core solutions