ITCare Carrier Routers and ITCSECadmin — BGP, BNG, CGNAT, DDoS, SIEM, NIS2/KSC and AI in One Platform
| OtherITCare Carrier Routers and ITCSECadmin — BGP, BNG, CGNAT, DDoS, SIEM, NIS2/KSC and AI in One Platform
Linux-based routers with their own ITCbng dataplane export exactly the telemetry required for DDoS detection and accept the precise mitigation decisions it makes — absorbing the attack directly in the dataplane before it reaches NAT/CGNAT and subscribers.

Why Does the Router Determine the Effectiveness of DDoS Protection?
Most anti-DDoS deployments at regional operators fail not because of a weak detection algorithm, but because the router does not provide the data required for detection or accept the resulting mitigation decisions.
We close this loop: the forwarding layer (router) and the control layer (ITCSECadmin) are designed together.
Shared Hardware Platform
- Interfaces: 4× 10G (Base-T / SFP+), 2× 40G or 1× 40G (QSFP/QSFP+), 1× or 2× 100G (QSFP28)
- Mellanox ConnectX-6 Dx NICs — packet drops are performed directly in the NIC silicon (
rte_flow/mlx5), before the packet reaches the CPU - Workers pinned to CCD-local isolated CPU cores out of the box — incorrect CPU pinning can reduce performance by up to 30% with 64-byte packets, so this is preconfigured rather than left to the customer
- No fixed RIB/FIB or session table limits — capacity scales with RAM rather than TCAM
- Telemetry tailored to DDoS detection: NetFlow/IPFIX and sFlow with a short active timeout, advertised sampling rate, ingress interface and source MAC in each record, 64-bit SNMP, and remote syslog
- CoPP — keeping BGP sessions and management access available under attack
- OOB management with text-based configuration retrievable over SSH, without an agent
ITCSECadmin consolidates DDoS protection, SIEM, NIS2/KSC compliance, BGP management, AI-powered network intelligence, traffic analysis, and peering optimization into a single platform.
We invite you to explore our offering of ITCare carrier-grade routers and configurations integrated with ITCSECadmin.
SYS-ITC-A4R-RAP4565P-64GB-SSD-100Gb (#ITSECADMIN)
Key features:
ITCSECadmin consolidates DDoS protection, SIEM, NIS2 / KSC compliance, BGP management, AI network intelligence, traffic analysis, and peering optimization in one platform.
1. 1U 17,2", 42,9cm depth
2. AMD Epyc Grado 4565P UP 16C/32T 4.3G 64MB 170W AM5, RoHS
3. 64GB DDR5 5600MHz RAM
4. 1x10GbE + 1x2.5GbE
5. 2x2.5" SSD 250GB
6. Up to 2x M.2 2280
7. 2 x 100GbE QSFP56
8. IPMI dedicated LAN ASPEED AST2600
9. PWS Redundant AC 400W
Related pages:
- ITCare Carrier Routers and ITSECadmin
- FRRouting - Free Range Routing + Supermicro server for ISP
- Proxmox + Compatible Supermicro ITC Servers for ISPs

