AAA Assurance You Can Count On
The world’s mostpopular RADIUS server
InkbridgeRADIUS supports 100s of millions of users around the world every day. That’s more than all other RADIUS servers combined.
Flexible business policy framework
Business policies can be expressed in our high performance policy language. This language allows administrators to precisely define and enforce fine-grained access-control policies. We also provide interpreters for your favourite scripting language (python, lua, ruby, perl etc.) which allow easy integration with third-party APIs.
Works with your existing infrastructure
We believe that our customers shouldn’t have to change the infrastructure they’ve already invested in just to use our product. InkBridgeRADIUS works with any database, and any networking equipment.
Easy to containerize
InkbridgeRADIUS supports modern containerization solutions such as Docker and Kubernetes. This empowers customers to follow industry best practices for versioning control and migration management.
Who We’ve Helped
Protocols supported
We support an exhaustive range of authentication protocols.
- PAP
- CHAP
- MS-CHAP
- EAP
- PEAP
- EAP-TLS
- And many more
Databases supported
InkBridgeRADIUS is completely database agnostic. If you already have database infrastructure, we can work with it, including:
- MySQL
- Active Directory
- Open LDAP
- PostgreSQL
- Redis
- Oracle
- Microsoft SQL Server
- MongoDB
- IBM DB2
Clients supported
We work with all networking equipment and software, including:
- Network Access Servers
- 802.1x switches
- VPN servers
- NPS servers
- RADIUS proxy servers
- Routers
Low total cost of ownership
In cloud deployments, efficient software is affordable software.
InkBridgeRADIUS has been optimized from the ground up to work efficiently in constrained environments so that the number of vCores (virtual cores) required to run it is minimized. In cloud or hybrid setting, this can translate in significant savings.
A typical ISP deployment for 100,000 users can run InkBridgeRADIUS on as little as 2 vCores and 16GB of RAM.
Unique virtual server capability
InkBridgeRADIUS is the only RADIUS server on the market that supports virtual servers. Virtual servers allow administrators to abstract different policies for different roles. This capability vastly improves the maintainability of policies as the organization evolves.
Optimized for High Availability
InkBridgeRADIUS is optimized to support High Availability systems. It supports cross-site redundancy and well as automatic fail-over and load balancing between different backends. It also supports Anycast natively, making load balancing easy to implement. Hybrid systems which combine cloud and on premises deployments are economical due to the low vCore requirements for InkBridgeRADIUS. This makes it easy to leverage the advantages of cloud deployments, while having the fallback protection of the on prem solution in the event of an isolation event.
InkBridgeRADIUS doesn’t just implement the standards, it leads the standards. InkBridge founder and CEO, Alan DeKok, has co-authored many of the RADIUS standards with IETF. He is an active contributor to many standards bodies, and is widely known as one of the world’s foremost RADIUS experts.
Our involved with standards bodies means that, while other commercial products may be years behind new standards, we implement them in InkBridgeRADIUS while those standards are being developed.
InkBridgeRADIUS supports the following IETF standards
- RFC 2865 - Remote Authentication Dial In User Service (RADIUS)
- RFC 2866 - RADIUS Accounting
- RFC 2867 - RADIUS Accounting Modifications for Tunnel Protocol Support
- RFC 2868 - RADIUS Attributes for Tunnel Protocol Support
- RFC 2869 - RADIUS Extensions
- RFC 3162 - RADIUS and IPv6
- RFC 3576 - Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
- RFC 3580 - IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines
- RFC 4072 - Diameter Extensible Authentication Protocol (EAP) Application
- RFC 4372 - Chargeable User Identity
- RFC 4603 - Additional Values for the NAS-Port-Type Attribute
- RFC 4675 - RADIUS Attributes for Virtual LAN and Priority Support
- RFC 4679 - DSL Forum Vendor-Specific RADIUS Attributes
- RFC 4818 - RADIUS Delegated-IPv6-Prefix Attribute
- RFC 4849 - RADIUS Filter Rule Attribute
- RFC 5090 - RADIUS Extension for Digest Authentication
- RFC 5176 - Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
- RFC 5447 - Diameter Mobile IPv6: Support for Network Access Server to Diameter Server Interaction
- RFC 5580 - Carrying Location Objects in RADIUS and Diameter
- RFC 5607 - Remote Authentication Dial-In User Service (RADIUS) Authorization for Network Access Server (NAS) Management
- RFC 5904 - RADIUS Attributes for IEEE 802.16 Privacy Key Management Version 1 (PKMv1) Protocol Support
- RFC 6519 - RADIUS Extensions for Dual-Stack Lite
- RFC 6572 - RADIUS Support for Proxy Mobile IPv6
- RFC 6677 - Channel-Binding Support for Extensible Authentication Protocol (EAP) Methods
- RFC 6911 - RADIUS Attributes for IPv6 Access Networks
- RFC 6929 - Remote Authentication Dial-In User Service (RADIUS) Protocol Extensions (co-authored by InkBridge Networks)
- RFC 6930 - RADIUS Attribute for IPv6 Rapid Deployment on IPv4 Infrastructures (6rd)
- RFC 7055 - A GSS-API Mechanism for the Extensible Authentication Protocol
- RFC 7155 - Diameter Network Access Server Application
- RFC 7268 - RADIUS Attributes for IEEE 802 Networks
- RFC 7499 - Support of Fragmentation of RADIUS Packets (co-authored by InkBridge Networks)
- RFC 7930 - Larger Packets for RADIUS over TCP
- RFC 8045 - RADIUS Extensions for IP Port Configuration and Reporting
- RFC 8559 - Dynamic Authorization Proxying in the Remote Authentication Dial-In User Service (RADIUS) Protocol (co-authored by InkBridge Networks)
- RFC 9445 - RADIUS Extensions for DHCP-Configured Services (co-authored by InkBridge Networks)
Get InkBridgeRADIUS
Find out how InkBridgeRADIUS can be deployed into your ecosystem.
Focus on your business, not your network
Check out our full suite of foundational protocol products for RADIUS, DHCP, TACACS+, and DNS. Our products, coupled with world class professional services and support, ensures that your network is always fast, secure, and resilient.
Learn More
Scaling your RADIUS ecosystem
Not all RADIUS systems are the same, and the system architecture can vary wildly. For example, a network design which works well for 10,000 users will likely not work well for 10,000,000 users. It can be difficult to just “scale up” a RADIUS system. In most situations, the entire system architecture has to change.
Why your RADIUS server should run in a VM
Your network can go down for really simple reasons.
A junior system admin might inadvertently type the wrong thing into a command line, or a minor upgrade can break some obscure dependency between libraries resulting in a cascading set of errors that bring the network down. When your infrastructure stops working, (and it will, you just don’t know when), it is critical to fix it quickly.