Dandy vBNG / vBRAS
High-performance, scalable BNG / BRAS software for bare-metal Intel Xeon servers. PPPoE and IPoE, RADIUS, CGNAT and NAT logging in one ISO.
What is in V7.3.2
Subscribers
- PPPoE and IPoE, on ports, VLANs and VLAN ranges
- RADIUS authentication and accounting, CoA / Disconnect
- Local users without RADIUS
- Service-name rules per port and VLAN
- IP pools for IPv4 and IPv6, lowest free address first
- IPv6 dual stack
- PPPoE MTU / MRU per port and VLAN without disconnecting users
- FastPADO: answers your known subscribers first
Speed and routing
- Per-user download and upload speed from RADIUS
- Speed groups for IX, cache or gaming networks and ports, with priority
- Static routes and an IX route policy
- Routing mode with BGP, OSPF and IS-IS
- Bonding (LACP) for uplinks and access ports
- 1G to 100G Intel Ethernet; PPPoE queue spread on XL710 (DDP)
NAT and logging
- SNAT, DNAT (port forwarding) and Carrier Grade NAT
- NAT session limit per user
- NAT logs to several log servers: NetFlow v9 and IPFIX
- User name in every NAT record
- Guard against traffic that misses NAT
- Logs kept 7 days and rotated daily
Operations
- Command line for every setting, with commit and preview
- Web panel: users, traffic, NAT sessions, ports, DDoS watch, logs
- Web Config tab for superusers; viewer and operator logins
- System health check and automatic NIC / CPU tuning
- SNMP for PRTG, Zabbix and LibreNMS
- Built-in DNS cache server and Ookla speedtest server
The web panel can now configure the box
Released 14 November 2026. The full list is in the user guide.
- Web user levels: viewer, operator and superuser
- Config tab in the web panel: VLANs, service names, NAT, interfaces, RADIUS, pools, DNS, SNMP, log server and more
- QoS, PPPoE MTU / MRU, Bonding and IPv6 Dual Stack pages in the web
- Bonding (LACP) reworked: the configured mode, kept across commits and reboots
- IPoE: no traffic without a RADIUS login, checked at commit
- Kernel boots with IOMMU passthrough: about 19 percent more forwarding CPU on servers with VT-d on
Many subscribers behind one public address
CGNAT shares each public IPv4 address among many subscribers. Dandy vBNG does it in the kernel with connection tracking, keeps a per-user session limit so one infected device cannot fill the table, and exports every translation to your log servers for lawful-interception records.
Keep the public pool under about 128 users per address for heavy-traffic networks.
Recommended server
Throughput depends on CPU cores, on whether the PPPoE card spreads traffic over its queues, and on keeping each packet on one CPU socket.
| Part | Recommended | Why |
|---|---|---|
| CPU | Intel Xeon, 2.2 GHz or faster, 12 or more cores per socket; one or two sockets | About one core per 3 to 4 Gbit/s of download. |
| Memory | 32 GB (16 GB minimum), all memory channels filled | Connection table, PPPoE, NAT logging and the web panel. |
| Disk | Enterprise SATA or NVMe SSD, 120 GB or more | The system itself uses under 5 GB; logs rotate. |
| WAN card | Intel X710 / XL710 (10G / 40G) or Intel X520 (10G) | Plain IP traffic spreads over all queues. |
| PPPoE card | Intel X710 / XL710 with DDP | Spreads PPPoE over all queues. An X520 port carries about 1,500 to 2,500 users. |
| BIOS | Hyper-Threading off, virtualization off, Maximum Performance | A wrong setting costs 20 to 40 percent of the box. |
Planning figures per box
| Build | Download | Upload |
|---|---|---|
| 1 socket, 2 × X520 (WAN + PPPoE) | 8 – 10 Gbit/s | 1.5 Gbit/s |
| 1 socket, dual-port XL710, DDP on | 15 – 20 Gbit/s | 3 Gbit/s |
| 2 sockets, XL710 WAN and XL710 PPPoE on different sockets, DDP on | 36 Gbit/s | 3.5 Gbit/s |
Avoid Realtek cards, onboard LOM ports for forwarding, Broadcom NetXtreme for PPPoE and USB network adapters.
Try it on your own server
Download the ISO, install it on an Intel Xeon server and run up to 100 users on the free demo license. Talk to us for a production license.