Sandvine

Sandvine Incorporated is an application and network intelligence company based in Waterloo, Ontario.

Sandvine Incorporated
TypePrivate
IndustryNetworking Hardware and Software
FoundedWaterloo, Ontario (2001)
HeadquartersWaterloo, Canada
Websitewww.sandvine.com

Sandvine markets network policy control products that are designed to implement broad network policies, including Internet censorship,[1] congestion management, and security.[2] Sandvine's products target Tier 1 and Tier 2 networks for consumers, including cable, DSL, and mobile.[3]

Operation

Sandvine classifies application traffic across mobile and local networks by user, device, network type, location and other parameters. The company then applies machine learning-based analytics to real-time data and makes technical policy changes.[4]

As of 2021, Sandvine has over 500 customers globally.[5]

Company history

Sandvine was formed in August, 2001 in Waterloo, Ontario, by a team of approximately 30 people from PixStream, a then-recently closed company acquired by Cisco. An initial round of VC funding launched the company with $20 million CDN. A subsequent round of financing of $19 million (CDN) was completed in May 2005. In March 2006 Sandvine completed an initial public offering on the London AIM exchange under the ticker 'SAND'. In October 2006 Sandvine completed an initial public offering on the Toronto Stock Exchange under the ticker 'SVC'.

Initial product sales focused on congestion management and fair usage as service providers struggled with the rapid growth in broadband traffic. As fiber rollouts and 4G networks became more prevalent, the company's application optimization and monetization use cases were adopted by many customers. This allowed service providers to deliver usage and application-based plans, zero-rate applications, reduce fraud, and introduce security and parental controls as a way to generate new revenues.

In June 2007 Sandvine acquired CableMatrix Technologies for its PacketCable Multimedia (PCMM)-based PCRF that enable broadband operators to increase subscriber satisfaction while delivering media-rich IP applications and services such as SIP telephony, video streaming, on-line gaming, and videoconferencing.[6]

In July 2017 Sandvine shareholders accepted a $562 million (CDN) takeover bid from PNI Acquireco Corp., an affiliate of Francisco Partners and Procera Networks. The acquisition was completed in September 2017 when Sandvine shares ceased to be listed in the Toronto Stock Exchange.[7]

The acquisition was completed despite concerns raised by Ronald Deibert, the director of the Citizen Lab at the Munk School of Global Affairs at the University of Toronto who argued that the takeover required “closer scrutiny” by the federal government, largely in light of some of the activities done by two of Francisco's portfolio companies.[8] Most notably Procera Networks was part of a controversy where its technology is alleged to have been used to spy on Turkish citizens.[9]

Internet throttling and censorship

Sandvine products were used by Comcast in the United States to limit number of sessions of Internet traffic generated by peer-to-peer file sharing software.[10] Sandvine's current traffic discrimination product, Fairshare, is described in detail in an RFC.[11] According to independent testing, Comcast injected reset packets into peer-to-peer connections, which effectively caused a certain limited number of outbound connections to immediately terminate.[12]

According to research by Citizen Lab, products sold by Sandvine are being used to facilitate censorship of the Internet in Egypt, an allegation the company denies.[1]

The P2P throttling[13] focuses on Gnutella, and uses a path cost algorithm to reduce speeds while still delivering the same content. Sandvine uses stateful deep packet inspection and packet spoofing to allow the networking device to determine the details of the P2P conversation, including the hash requested. The device can then determine the optimal peer to use, and substitute it for the one selected by the P2P algorithm by "[sitting] in the middle, imitating both ends of the connection, and sending reset packets to both client and server."[14] In March 2018, Citizen Lab published a report showing evidence that PacketLogic devices from Sandvine could have been used to deploy government spyware in Turkey and redirect Egyptian users to affiliate ads.[15]

In Jordan, Sandvine Inc.’s equipment was used to censor an LGBTQ website. Egypt’s government relied on Sandvine equipment to block access to independent news sites. In Azerbaijan, it was deployed for a social media blackout, current and former employees say.[16] But the company’s equipment — which is often used to manage the flow of network traffic — has also been used to censor the internet in more than a dozen countries in recent years, according to three current, five former employees and company documents. Those countries include Algeria, Afghanistan, Azerbaijan, Egypt, Eritrea, Jordan, Kuwait, Pakistan, Qatar, Russia, Sudan, Thailand, Turkey, the United Arab Emirates and Uzbekistan, according to Sandvine sales records with government agencies and network operators — both private and government-controlled. Last month, U.S. -based Sandvine, which is owned by the private equity firm Francisco Partners, said it would stop selling its equipment in Belarus after Bloomberg News reported that it was used to censor the internet during a crucial election. In explaining its decision, the company said it abhors “the use of technology to suppress the free flow of information resulting in human rights violations.”

Support for Internet shutdowns during Belarus protests

During the 2020–21 Belarusian protests, Belarusian officials shut down internet access with technology made by Sandvine.[17] Peter Micek, general counsel at the human rights group Access Now, called on federal authorities to investigate Sandvine and the private equity firm Francisco Partners and questioned the effectiveness of Sandvine's business ethics committee. “Their services appear to have been used in Belarus to silence people and to cover up egregious human rights violations”, Micek said.[18] According to media reports, there was unease among Sandvine employees about the role of their company in the repression of political protests in Belarus since August 2020. In a conference call with employees on September 10, 2020, Sandvine's management, however, seems to have been unapologetic about their role in Belarus: "Alexander Haväng, Sandvine’s chief technology officer, ... said that Sandvine had concluded that the internet, and access to specific material on websites, wasn’t 'a part of human rights'. 'We don’t want to play world police', he said. 'We believe that each sovereign country should be allowed to set their own policy on what is allowed and what is not allowed in that country.'"[19][20]

On September 15, 2020, Sandvine cancelled its deal with Belarus, citing that the government "used its product to violate human rights".[21] However, its hardware was left at two locations near Minsk, which allows the government to control approximately 40% of internet traffic in the country.[22]

References

  1. Malsin, Jared (18 July 2018). "Throughout Middle East, the Web Is Being Walled Off". The Wall Street Journal. Archived from the original on 19 July 2018. According to Citizen Lab, an internet research group at the University of Toronto, Egypt is blocking websites with the help of devices whose digital fingerprint matches those of products sold by Sandvine, a firm based in Fremont, Calif., and Waterloo, Ontario [...] A former Sandvine engineer said the company rolled out a platform for network insights in Egypt in 2016.
  2. Adelphia Selects Sandvine to Protect Subscribers from Worms and Spam. - Free Online Library
  3. Sandvine Management's Discussion and Analysis
  4. "Sandvine Launches Industry's First Service Innovation and Intelligence Portfolio for 5G, Cloud and Edge Networks".
  5. https://www.sandvine.com/hubfs/Sandvine_Redesign_2019/Downloads/2020/Datasheets/Company/Sandvine_Corporate%20Overview.pdf
  6. Sandvine buys CableMatrix for peanuts; Founder Laurence Rubin is upbeat: This is an opportunity Haaretz, 21.06.07
  7. Critchley, Barry. "Four years and interest from four private equity firms later, Sandvine is set to be sold". Retrieved 28 September 2017.
  8. "Will a "closer scrutiny" stop the sale of Sandvine Corp. from getting over the line". Financial Post. 17 July 2017. Retrieved 3 November 2017.
  9. Fox-Brewster, Thomas. "Is An American Company's Technology Helping Turkey Spy On Its Citizens?". Forbes. Retrieved 3 November 2017.
  10. Comcast's compliance report to FCC on its previous network management techniques
  11. Comcast's Protocol-Agnostic Congestion Management System
  12. eff.org article on Comcast jamming Gnutella and Lotus
  13. (WO/2003/094465) PATH OPTIMIZER FOR PEER TO PEER NETWORKS
  14. Comcast traffic blocking: even more apps, groupware clients affected
  15. "BAD TRAFFIC: Sandvine's PacketLogic Devices Used to Deploy Government Spyware in Turkey and Redirect Egyptian Users to Affiliate Ads?". The Citizen Lab. 9 March 2018. Retrieved 9 March 2018.
  16. "American Technology Is Used to Censor the Web From Algeria to Uzbekistan". Bloomberg News. 8 October 2020. Archived from the original on 22 June 2023. Retrieved 19 July 2023.
  17. "Belarusian Officials Shut Down Internet With Technology Made by U.S. Firm". Bloomberg.com. 28 August 2020. Retrieved 28 August 2020.
  18. Ryan Gallagher (11 September 2020). "U.S. Company Faces Backlash After Belarus Uses Its Tech to Block Internet". Bloomberg.com.
  19. "U.S. Company Faces Backlash After Belarus Uses Its Tech to Block Internet". Bloomberg.com. 11 September 2020. Retrieved 14 September 2020.
  20. "Accès à Internet : la Biélorussie a ordonné la coupure du réseau mobile durant les dernières manifestations". lemonde.fr (in French). 14 September 2020. Retrieved 14 September 2020.
  21. Ryan Gallagher (15 September 2020). "Francisco-Backed Sandvine Nixes Belarus Deal". Bloomberg.com.
  22. BBC World Service’s Newsday program (September 16, 2020).
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.