What it is
A monitoring center that receives lawfully intercepted GSM and VoLTE traffic from a mobile network and turns signaling, intercept-related information and call audio into material an authorized investigator can work with. It was built for a client in a sensitive sector; the client and any further detail are covered by a non-disclosure agreement.
How it is built
A three-stage pipeline. A C++ capture layer takes SIP signaling and RTP media off the network and decodes the ETSI and 3GPP handover formats. Python services orchestrate the intercept-related metadata, discover captured streams and resolve codecs, and dedicated workers transcode AMR, AMR-WB, EVS and G.729 audio into standard formats. The stages communicate through RabbitMQ, with Redis as the result store.
Built to scale
Every stage runs as its own containerized service on Kubernetes, deployed with a Helm chart. Workers scale on queue depth through KEDA, from one warm pod to ten under load, and the message broker runs as a clustered quorum spread across nodes. Containers run as non-root with only the capabilities they need.