Vendor lineage
A10 Networks
Attacked application delivery from the throughput flank, where the traffic is heaviest.
Lee Chen founded A10 in San Jose in 2004, having already co-founded Centillion Networks and Foundry Networks. Rather than contest the enterprise data centre feature for feature, it went where volume decides: carrier-grade NAT, DDoS absorption and the service-provider tier measured in millions of concurrent sessions.
The profile below covers the founding, the Brocade litigation, the 2014 listing, the CGNAT decade and the move into DDoS and 5G infrastructure.
It is worth reading beside Kemp, which appears separately here and attacked the same category from the opposite direction - down on price rather than up on throughput. Between them they are the reason application delivery never became a single vendor's market.
Founding stories
A10 Networks
Lee Chen had already co-founded Centillion Networks and Foundry Networks when he started A10 in 2004 - a third act aimed at the application-delivery market from the performance flank. The AX Series, and later the Thunder line on the ACOS operating system, courted the buyers who measure in millions of concurrent sessions: service providers, carriers, and the web-scale operators for whom carrier-grade NAT and DDoS absorption are line items, not features. Where the market leader owned the enterprise data center, A10 built its franchise where the traffic is heaviest.
The timeline
- Founded
Chen's third company enters application delivery with a performance thesis: purpose-built hardware and ACOS software for the highest-throughput tier of the market.
- The Foundry shadow
Years of litigation between Brocade, which had acquired Foundry, and A10 over Foundry-era intellectual property run their course and end in settlement - a bruising chapter the company absorbs and outlives.
Brocade v. A10 litigation and settlement per the public record; the verdict-and-appeal history is deliberately summarised without figures.
- New York Stock Exchange listing
March 2014: listed as ATEN, with the service-provider franchise - CGNAT for the IPv4 endgame, Thunder TPS for DDoS - now the company's signature.
- The CGNAT decade
IPv4 exhaustion turns carrier-grade NAT from a transition hack into permanent infrastructure, and Thunder CGN becomes one of the boxes the mobile internet quietly runs through.
- New leadership
Dhrupad Trivedi takes the helm; the company tightens around security and service-provider infrastructure - DDoS defence, TLS inspection, and the 5G core edge.
Flagship products and solutions
- Thunder and ACOSThe high-throughput ADC, CGNAT and DDoS-defence line - the service-provider tier's alternative answer.
- Thunder TPSDDoS mitigation at the carrier scale where attacks are weather rather than events - absorption and scrubbing rather than blocking.
- Thunder CGNCarrier-grade NAT, which IPv4 exhaustion turned from a temporary measure into permanent infrastructure that a great deal of mobile traffic passes through.
Key innovations
- Competing on throughput per dollarRather than match the leader feature for feature in the enterprise, A10 went where volume decides: the tier measured in millions of concurrent sessions. That is a narrower market and a harder one to displace an incumbent from, because the buyer tests before they sign.
- Keeping the leaders honestThe structural contribution of a credible challenger: every competing quote for two decades was written knowing A10 could undercut on throughput per dollar. Competitive gravity is an innovation too, and it is the reason application delivery never became a monopoly.
Main markets
Service providers, carriers and web-scale operators - carrier-grade NAT, DDoS defence, TLS inspection and 5G infrastructure. The customer is one for whom traffic volume is the defining constraint rather than feature breadth.
Its counterpart from the other direction is Kemp, which attacked the same category from below on price and appears separately on this timeline.
Analyst standing
- Assessed as a durable second-tier presence in application delivery with a genuine lead in the service-provider and DDoS segments rather than a general-purpose challenge to the leader.
- The load-balancing methods taught on this site - the algorithms, the health monitors, the persistence models - are the same machinery this platform markets. The vendor changes; the mathematics does not.