https://github.com/acassen/dra-guard

Mobile Core-Network routing software
https://github.com/acassen/dra-guard

5gc diameter ebpf epc firewall plugin-architecture proxy-server route-optimization router xdp

Last synced: 17 days ago
JSON representation

Mobile Core-Network routing software

• Host: GitHub
• URL: https://github.com/acassen/dra-guard
• Owner: acassen
• License: agpl-3.0
• Created: 2024-10-16T21:19:30.000Z (20 days ago)
• Default Branch: main
• Last Pushed: 2024-10-17T17:04:51.000Z (19 days ago)
• Last Synced: 2024-10-18T21:56:36.265Z (18 days ago)
• Topics: 5gc, diameter, ebpf, epc, firewall, plugin-architecture, proxy-server, route-optimization, router, xdp
• Language: C
• Homepage: https://www.dra-guard.org
• Size: 513 KB
• Stars: 6
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
# DRA Guard: Diameter Routing Agent software



DRA-Guard is a routing software written in C. The main goal of this project is to provide robust and secure extensions to DRA feature (Diameter Routing Agent). DRA are used in mobile networks in order to redirect users terminals to their HPLMN in Roaming situations. DRA-Guard implements a set of features to manipulate and analyze Diameter payloads via a Plugin framework and a built-in Route-Optimization feature. DRA-Guard relies on Linux Kernel XDP & Qdisc frameworks using eBPF for low-level features like transparent mode operations. Administration and user-level interface are available via a standard VTY terminal interface.

DRA-Guard is free software; you can redistribute it and/or modify it under the terms of the GNU Affero General Public License Version 3.0 as published by the Free Software Foundation.

# Network Architecture

DRA-Guard sits directly at interconnection :



# Software Architecture

DRA-Guard is articulated around following components :



# Local Stack Packet re-circulation

DRA-Guard can operate in transparent mode using state-less operations based on a set of eBPF progs loaded at XDP and Qdisc layers. This design provides fast state-less packet re-circulation into Linux Kernel stack to benefit largely used SCTP stack: