AnyFirewall Engine is a software toolkit, based on STUN, TURN, and ICE, which enables guaranteed firewall and NAT traversal for fixed and mobile applications over any fixed or mobile network, through any NAT or firewall, and to any device. AnyFirewall Engine is the world’s most widely deployed NAT and firewall traversal toolkit, having been deployed to more than 20 million subscribers by licensees including Comcast, Digital Lifeboat, Intel, Maxis, Nokia, Nokia Siemens Networks, Polycom, BlackBerry, Smartvue, and more. AnyFirewall Engine can be deployed with AnyFirewall Server and AnyFirewall Gateway for an end-to-end firewall and NAT traversal solution, or can be combined with third-party, standards-based products.

1. Eyeball Networks
Guaranteed Device-to-Device Connections and Communications

2. Eyeball Networks
The leader in voice and video over IP software which enables:
‣ handset/tablet makers
‣ application developers, and
‣ service providers
to deliver carrier-grade communications services:
‣ over any home, mobile, public, or enterprise network,
‣ through any NAT or firewall,
‣ to any device, and
‣ interconnecting any communications protocol
GUARANTEED.

3. Eyeball Networks Company
Founded:
2002
End users:
100M+
Employees:
60
Offices:
San Francisco
Tokyo
Seoul
Dhaka
Singapore
Vancouver AnyFirewall embedded in products & services used by 100s of millions of end users including:
98% of the Fortune 500
100% of the Fortune 100

4. Customers / Deployments
2010
85M videotelephony users
Guaranteed connections,
voice/video
2008
40+ video conferencing products
400K+ enterprise customers
Guaranteed connections
2012
32M video conferencing users
Guaranteed connections
2013
VidyoGateway
Guaranteed connections with
legacy conferencing systems
2012
Common Connectivity Framework
Guaranteed connections for
mobile apps
2014
AnyFirewall.com enables
guaranteed WebRTC connections,
voice/video

5. Eyeball Networks Patents
Patents:
Fundamental to:
RFC 5245 - ICE
RFC 6544 - ICE-TCP
RFC 5389 – STUN
XEP – 0166 – Jingle
XEP – 0167 – Jingle RTP
XEP – 0176 – Jingle ICE-UDP
XEP-0234 - Jingle file transfer
XEP-0260 - Jingle SOCKS5
XEP-0261 - Jingle In-Band
MS-SIP - Microsoft Lync

6. Eyeball Networks
“Best in Class” product and technology portfolio:
‣ End-to-end IP communications solutions
‣ Patent portfolio fundamental to IETF, CableLabs, and 3GPP standards
Field-proven:
‣ 200+ licensees, 100M+ end users
‣ Tier 1 fixed line (e.g. Polycom) and mobile (e.g. RIM)
‣ Tier 1 consumer (e.g. Nokia) and enterprise (e.g. Shoretel)

9. ‣ Connectivity endpoint library
‣ Based on IETF STUN/TURN/ICE
standards
‣ Provides device based NAT & firewall
traversal services
‣ Connectivity server software
‣ Based on IETF STUN/TURN/ICE
standards
‣ Provides network based NAT &
firewall traversal services

13. High Performance Call Completion
• 40,000+ concurrent voice calls
• 7,500+ concurrent video calls
• <280 ms call completion time
• 360+ Mbps throughput
Standards Compliance
• IETF, 3GPP & CableLabs standard STUN/TURN/ICE
• Jingle, RTP, SIP, XMPP
• G.711, G.729, H.263, H.264, MPEG-4
• TLS Security

15. Geographic Load Balancing

16. Security
SecurityAttack
Obtain unauthorized allocations > > > Long-term credential mechanism (from
RFC 5389) verifies identity of AnyFirewall
Engine requestor
Dictionary attacks > > > Optional TLS transport between
AnyFirewall Engine and AFS
Manipulate third-party
allocations
> > > Long-term credential mechanism
authenticates allocation refreshes
Eavesdropping traffic > > > Application level encryption, e.g. SRTP
Denial of Service (DOS) > > > Per-user allocation and bandwidth limits
Anonymous relating of malicious
traffic
> > > Log source IP and port for each user
allocation

17. AFE endpoints on Home/Public Networks (UDP enabled) - P2P call

18. AFE endpoints on enterprise networks (port/protocol blocked) - TURN relay call

19. BlackBerry® Messenger Video Chat
• World-wide deployment of Video Chat using Eyeball Messenger SDK
• Scaled to 50M + users globally
• Guaranteed connectivity across all NATs & firewalls for enterprise,
government and consumer customers

20. Polycom Microsoft Lync™ Connectivity
• AnyFirewall Engine provides Polycom guaranteed connectivity across 40
product lines
• Delivers low latency and high peer-to-peer results
• Multi platform support across iOS, OS X, Windows, Linux and VxWorks
devices.
• Enables both IETF based STUN/TURN/ICE and Microsoft Lync™
connectivity

21. AnyFirewall vs. The Competition
• 100% Guaranteed connectivity
• Deep engineering & integration support
• The best standards implementations

22. Embedded AFE - Any to Any Connectivity

23. Benefits of Peer-to-Peer communications
• Decreased costs - fewer network and hardware requirements
• Increased scalability - peers can scale instantly and rapidly
without need for servers
• Greater network resilience - less server dependence
• Increased privacy and security - less centralization of data
• Better performance - less chance of latency, jitter, and packet
loss issues

24. STUN TURN ICE Connection Call Flow

25. World Leader In STUN TURN ICE Deployments
10
80
160
500
1,500
0 200 400 600 800 1000 1200 1400 1600
2002
2008
2010
2012
2014
Millions of STUN/TURN/ICE devices
Eyeball develops AnyFirewall Technology
Patents STUN / ICE methods
Polycom adopts STUN/TURN/ICE for conferencing
Based on AnyFirewall Technology
BlackBerry adopts STUN/TURN/ICE for phones
Based on AnyFirewall Technology
Intel adopts STUN/TURN/ICE for processors
Based on AnyFirewall Technology
Google adopts STUN/TURN/ICE for Android
WebRTC incorporates AnyFirewall Technology

26. Contact Eyeball Networks
• http://www.eyeball.com/about-us/contact/
• Email: sales@eyeball.com
• Phone: 604-921-5993
• Headquarters:
• 1201 W Pender St. Ste. 730
• Vancouver, BC V6E 2V2 Canada