Aviz Service Nodes
Payload-Aware Classification
Payload-aware application and protocol identification with rich contextual metadata.
Out-of-Band TLS Decryption
Decrypt TLS traffic using exported session keys without deploying inline appliances.
Flexible Metadata Export
Export metadata using Kafka (JSON) and standards-based IPFIX.
Unified Management
Manage ASN and APB centrally through ONES Orchestrator and controller.
Aviz Service Nodes offer deep packet inspection, out-of-band TLS decryption, subscriber intelligence, and metadata extraction for modern observability, security, and compliance—without lock-in to proprietary appliances.
Built on open architecture principles, Service Nodes integrate seamlessly into existing network infrastructure, providing flexibility and control that traditional hardware appliances can’t match. Deploy on your terms, scale on demand, and maintain complete visibility across your entire network ecosystem.
Visibility
- See exactly which apps are running and how they behave (not just ports/headers)
- Category intelligence across collaboration, streaming, gaming, social, enterprise
- Real-time traffic classification and behavioral analysis
- Multi-layer protocol detection and correlation
Security & Compliance
- Export flow metadata for audit trails, threat investigations, and policy enforcement
- Integrate with SIEMs/analytics via JSON + Kafka Streams
- Comprehensive forensic data capture and retention
- Automated compliance reporting and evidence collection
Why Choose Aviz Service Nodes?
Unified Management & Orchestration
- Manage APB and ASN through ONES UI with centralized configuration, monitoring, and lifecycle management.
- Single pane of glass across physical, virtual, and cloud deployments.
Software-Defined Performance
- Run on commodity x86 servers with optional DPU acceleration for line-rate packet processing.
- Deploy on bare metal, virtual machines, or containers without proprietary appliance lock-in.
Out-of-Band TLS Decryption
- Decrypt encrypted traffic at line rate without deploying inline appliances.
- Supports TLS 1.3, PFS, and PQC while improving downstream security tool performance.
Always-Current DPI
- Dynamic DPI updates keep application and protocol detection accurate as the network ecosystem evolves.
- New applications, protocols, and signatures are continuously added without downtime.
Traffic Optimization & Metadata Intelligence
- Reduce duplicate traffic, generate rich application metadata, and deliver optimized packet streams for downstream analytics and security platforms.
Integration with Leading Tools
- Connect to open-source or commercial observability and security tools using industry-standard interfaces including Kafka, IPFIX, REST APIs, and Syslog.
- No vendor lock-in—just clean, structured data flowing into your existing analytics ecosystem.
How to Buy
Choose the ASN edition for your application, subscriber, or encrypted traffic visibility requirements.
ASN Application
Application intelligence for enterprise, data center, edge, and cloud.
Performance includes Packet Deduplication & PCAP Generation.
ASN Subscriber
Subscriber intelligence for 4G LTE, 5G NSA, and 5G SA networks.
Performance includes PCAP Generation.
ASN Security
Out-of-Band SSL/TLS Decryption for encrypted traffic visibility.
Line-rate decryption with SSL/TLS offload from downstream tools.
Flexible Deployment & Licensing
Deploy ASN on supported x86 infrastructure or as a Virtual ASN (vASN), with centralized management and orchestration through ONES UI.
Subscription Terms: 1-Year | 3-Year | 5-Year
Licensing: Per physical server or virtual instance
Key Capabilities
Aviz Service Nodes deliver comprehensive packet intelligence across application identification, telco operations, and traffic optimization, all through a unified software-defined platform.
Application & Protocol Intelligence
- Application identification: 2,700+ apps / 9,000+ subcategories
- Classification by application, protocol, and category
- Dynamic DPI signature updates (no downtime)
- Multi-layer protocol detection with behavioral analysis
Telco & Subscriber Intelligence
- Telco traffic KPIs
- GTP correlation
- Diameter Gx & PFCP support
- Subscriber-aware metadata
- Multi-PGW session correlation
Traffic Reduction & Evidence
Packet Deduplication
Noise reduction for cleaner analytics
Packet Capture
Forensics, compliance, and troubleshooting
Metadata Export
Kafka (JSON) and IPFIX export for analytics platforms.
Platform Support New
✔ Ubuntu 22.04 or later
✔ RHEL 9.4
✔ Bare Metal
✔ AWS
Metadata for Security, Compliance, and Operations
Aviz DPI extracts contextual metadata per flow so teams can enforce policies, investigate incidents, and optimize networks with precision, then export it to your tools in real time.
Every flow generates rich metadata that goes far beyond basic NetFlow or IPFIX. Capture application-layer details that reveal user behavior, security posture, and operational performance. Stream this intelligence to your existing SIEM, analytics platform, or data lake without custom integration work.
Metadata enrichment happens in-line with wire-speed performance, ensuring zero impact on production traffic while delivering the context your security and operations teams need.
Deployment Flexibility for Any Environment
Deploy Aviz Service Nodes wherever traffic visibility matters, from campus networks to carrier-grade data centers. Our software-defined architecture adapts to your infrastructure, not the other way around.
Enterprise Networks
Monitor Branch Offices, Campus Networks, And Remote Sites With Lightweight Service Node Deployments. Centralized Management And Policy Enforcement Across Distributed Locations, With Metadata Aggregation To A Single Analytics Platform.
Data Center & Cloud
East-West Traffic Visibility Within Hyperscale Data Centers And Multi-Tenant Cloud Environments. Deploy On Bare Metal Servers, Run As Virtual Appliances, Or Containerize For Kubernetes Orchestration. All With The Same DPI Engine.
Telco & Service Providers
Carrier-Grade Performance For GTP Traffic, Subscriber Analytics, And Service Assurance. GTP Correlation, Load Balancing, And Subscriber-Aware Metadata Enable Advanced Monetization And QoS Enforcement At Scale.
Integration Architecture
Aviz Service Nodes integrate seamlessly into existing observability and security workflows through industry-standard protocols and flexible export mechanisms.
Supported Export Formats
- JSON over Kafka Streams for real-time ingestion
- RESTful APIs for query-based retrieval
- Syslog for legacy SIEM integration
- IPFIX/NetFlow for flow collector compatibility
Common Integration Targets
- Splunk, Elastic, and other SIEM platforms
- Prometheus, Grafana, and observability stacks
- Data lakes (S3, Azure Blob, GCS)
- Custom analytics and ML pipelines
Packet Capture
Mirror traffic from TAPs or SPAN ports
DPI Processing
Classify, extract, and enrich metadata
Export Pipeline
Stream JSON via Kafka or direct API
Analytics & Action
Visualize, alert, and enforce policy
The Real Cost Of Your Options
Wire-speed DPI performance on commodity hardware, no proprietary appliances, no throughput compromises, no licensing surprises.
Horizontal Scaling
Add service nodes as traffic grows, no forklift upgrades, no capacity ceilings. Scale throughput linearly by deploying additional software instances on commodity servers.
Hardware Flexibility
Run on any x86 server with your choice of NICs and DPUs. No vendor lock-in to proprietary appliances. Deploy on existing infrastructure or purpose-built hardware.
Validate DPI-driven visibility, reduce traffic noise with deduplication, and integrate metadata into your SIEM/analytics stack. Discover how Aviz Service Nodes deliver granular network intelligence without the cost and complexity of proprietary hardware.
Join network operators, security teams, and service providers who have transformed their visibility posture with software-defined DPI. Schedule a technical demonstration to see application identification, metadata extraction, and real-time export in action on your own traffic samples.