Build Linux BNG Server

@rameena50

Hello, I can build and configure a production ready Linux based Broadband Network Gateway with a strong focus on secure AAA integration and carrier grade reliability. I will design a hardened Linux environment and implement a BNG stack that cleanly supports RADIUS, TACACS+, and LDAP authentication flows without custom translation layers, ensuring each protocol is handled natively and securely. I will also configure centralized logging for session and accounting data, systemd based service recovery, and persistent startup behavior for zero downtime resilience. The solution will include clear CLI and API hooks so future policy updates and scaling can be managed easily. Alongside this, I will provide full automation scripts for reproducible deployment, complete configuration files for all services, and a concise deployment and rollback guide to ensure safe production rollout. I can also include a walkthrough to explain architecture, security decisions, and operations flow. Best Regards Rameen

@letswork92

Building a robust Broadband Network Gateway (BNG) on Linux presents the challenge of ensuring seamless user authentication and authorization across multiple protocols. Your need for a solution that efficiently processes RADIUS, TACACS+, and LDAP without additional translation layers is crucial for operational efficiency. With over 12 years of experience in full-stack development, including extensive work with Linux environments and networking protocols, I can architect a secure and scalable BNG server tailored to your specifications. My approach will involve selecting an optimal Linux distribution, hardening it for security, and implementing essential components to ensure flawless user authentication. I will also provide clear CLI/API access for policy management and comprehensive logging for accountability. Deliverables will include a boot-ready Linux image or automation scripts (using Ansible or shell), complete configuration files, a deployment guide, and knowledge transfer support. Could you clarify if you have any specific performance metrics or compliance standards that the BNG must meet?

@tyronet2

The part that actually determines whether this BNG holds up in production isn't getting one AAA protocol working — it's making RADIUS, TACACS+, and LDAP coexist cleanly so a subscriber device can authenticate through whichever path it speaks, without one backend's failure cascading into the others. My approach: a hardened Linux distribution (Ubuntu Server LTS or Rocky Linux, depending on your compliance needs) running FreeRADIUS for RADIUS auth, tac_plus or similar for TACACS+, and OpenLDAP (or integration with an existing LDAP/AD source if you have one) as the directory backend. I'd architect this so all three AAA paths can optionally chain back to a single source of truth for user records, avoiding duplicated credential management. For resilience, systemd unit files handle auto-start and graceful recovery on failure, with health checks that restart services individually rather than requiring a full reboot. Session and accounting logs route to a centralized syslog/rsyslog setup (or your preferred log aggregator) so audit trails survive service restarts.

@Geetam00

Leveraging my robust knowledge and exceptional expertise in Linux and network administration, I bring an undeniable advantage to your project of creating a fully functional Broadband Network Gateway. My comprehensive skills will aptly align with the unique demands of your project: a ready-to-boot Linux image or reproducible automation scripts, complete configuration files, concise deployment guide, and a knowledge-transfer session - undeniably, a prolific combination. My experience in handling carrier-grade BNG deployments on Linux would be invaluable to architecting the bespoke solution that meets your varied authentication requirements through RADIUS, TACACS+, and LDAP flawlessly. For efficient future policy changes, I will ensure your platform not only has clear CLI/API access but also captures session logs and accounting records to a central location for improved management. Moreover, my solid grasp on Amazon Web Services and Terraform ensures seamless cloud deployment. Over the expanse of 5 years, I've created numerous scalable digital solutions with performance optimization and interoperability at their core. My focus has always been to synergize superior functionality with user-friendly interfaces. Partnering with me is an assurance that your project will be delivered on time, with unwavering quality and within budget. Experience innovation from the best - collaborate with me and let's turn your vision into a reality.