Cloud-Native Charging Interworking Platform for 5G SA Migration
Enabling Seamless Roaming Between 5G, 4G and 3G Networks
A comprehensive technical guide to MARBEN's Interworking Function solutions - bridging legacy 3G/4G infrastructure with modern 5G Core through carrier-grade, vendor-neutral protocol gateways with Private & Dedicated SaaS deployment options.
Table of Contents
MARBEN IWF Solutions - Enabling Seamless Multi-Generation Network Roaming
What is MARBEN IWF?
This white paper showcases how MARBEN products solve specific customer challenges in mobile telecommunications. The MARBEN Interworking Function (IWF) solutions enable smooth interoperability when users roam between 3G (UMTS/CDMA), 4G (LTE), and 5G (5GC). By bridging differences in core network architecture, protocols, and technologies, the IWF plays a critical role in facilitating coexistence and seamless migration across network generations.
“Delivered as a standalone, vendor-neutral solution that integrates non-intrusively with existing deployments, with flexible SaaS and on-premise options.”
Vendor-Neutral Architecture
Works non-intrusively with any vendor’s core network equipment — zero dependency on proprietary APIs.
Protocol Universality
Covers SS7/CAMEL/MAP (3G), Diameter (4G), and HTTP/2 REST SBA (5G) under one consistent gateway suite.
Carrier-Grade Reliability
In-memory session replication delivers 99.99% uptime with zero session loss on failover.
Multiple Deployment Models
Physical, VM, Container, Cloud (AWS), Managed SaaS, Private SaaS, and Dedicated SaaS - your choice.
4G to 5G Roaming
The MARBEN IWF Gateway bridges 5G Service-Based Architecture and existing 4G/LTE OCS systems, enabling operators to leverage current charging infrastructure while migrating to 5G without significant disruptions.
HSS/EIR/HLR - PCRF - OCS
MME - P-GW - SGW - DRA
S6a to Nudm - Sh to Nudr
HA - 3GPP Rel 16
NRF - AMF - PCF - SMF
CHF - UDM - 5G Core NFs
Bridge Capabilities (Bidirectional)
- •NChf to DiameterConverts 5G NChf REST to DIAMETER Ro/Rf and routes over Diameter connections to legacy OCS.
- •Diameter to NChfTranslates DIAMETER Ro/Rf messages to NChf interface and sends via HTTP/2 JSON to the 5G Core CHF.
- •NChf to Ro (XML over HTTP)Translates 5G NChf to Ro by converting Diameter to XML and sending it to the OCS via HTTP - ideal for OCS nodes that speak XML over HTTP.
- •3GPP Rel 16 ComplianceSupports TS 32.290 and TS 32.291 specifications for online charging interworking.
- •Cloud ReadySupports virtualization, hypervisor, container-based deployments, and AWS cloud infrastructure.
4G EPC to 5G Core - Ro to NChf
Translates Diameter Ro CCR-I/U/T from 4G P-GW/PCEF into 3GPP-compliant NChf HTTP/2 REST calls. Preserves all quota management and credit-control semantics.
5G Core to Legacy OCS - NChf to Ro
Enables 5G NFs (SMF, AMF) to charge from legacy OCS by translating NChf REST into Ro (Diameter) or Ro (XML over HTTP). Zero OCS changes required.
Policy Control - Gx / Rx to Npcf
Bridges legacy PCRF policy sessions to 5G PCF. Bidirectional support with Npcf to Gx (Diameter or XML/HTTP) for legacy PCRF compatibility.
Subscriber Data - S6a / Sh to Nudm/Nudr
Maps S6a and Sh subscriber operations to 5G UDM/UDR with full bidirectional translation (Diameter or XML/HTTP).
3G to 4G Roaming
The MARBEN Interworking solution enables 4G DIAMETER networks to seamlessly interoperate with legacy 3G systems, providing continuous roaming capabilities through full SS7/CAMEL/MAP to Diameter protocol conversion - and now also to XML(Ro) over HTTP for maximum OCS flexibility.
AUC - GMSC - EIR/HLR
SGSN/GGSN - 3G Core
Conversion
MAP/CAMEL to XML(Ro)/HTTP •
TCAP - CAP - RADIUS/LDAP
Carrier-Grade - HA - Vendor-Neutral
XML/HTTP
HSS/EIR - PCRF - MME
P-GW - OCS - 4G Core
SGSN/GGSN - HLR
HA - Carrier-Grade
HSS - MME - P-GW
XML/HTTP protocol
Key Interworking Capabilities
- •Protocol TranslationConverts between TCAP and DIAMETER for seamless communication between 3GPP network elements (SGSN/MME, HSS/HLR/EIR).
- •CAP / CAMEL IntegrationSupports CAP (CAMEL Application Part) Intelligent Network Call Control interworking between legacy 3G and modern 4G charging systems.
- •MAP/CAMEL to XML(Ro) over HTTPConverts 3G MAP/CAMEL charging events to Ro encoded as XML and delivers them over HTTP to OCS nodes - no Diameter stack required at the OCS. Zero OCS replacement needed.
- •Legacy System SupportCompatible with Online Charging Server (OCS) and Policy Control Functions using both Diameter and HTTP protocol - no OCS replacement needed.
- •RADIUS / LDAP SupportEnables RADIUS to LDAP conversion for wireless LAN authentication and accounting use cases.
MARBEN Java Diameter Stack (MJDS)
MJDS provides comprehensive APIs to integrate the NChf interface and bridge between DIAMETER Ro/Rf and NChf interfaces, enabling existing DIAMETER-based implementations to migrate to 5G NChf support with minimal development effort.
Ro / Rf Interfaces
Client & Server Mode
3GPP Rel 16 - TS 32.290 / 32.291
HTTP/2 Server - 3GPP SBA
- •Ro/Rf to NChf MappingAutomatic protocol translation between DIAMETER and HTTP/2 JSON - complete AVP-to-JSON and JSON-to-AVP attribute mapping.
- •Flexible DeploymentCan operate as both NChf client and server, supporting a wide variety of integration topologies and migration strategies.
- •Standards ComplianceFully supports 3GPP Release 16 (TS 32.290 and TS 32.291) for reliable interoperability with any 3GPP-compliant 5G Core.
- •Cloud & Container SupportCompatible with virtualization, hypervisors, containers (Docker/Kubernetes), and AWS cloud deployments.
- •Minimal Migration EffortEnables gradual, low-risk migration from 4G to 5G - existing DIAMETER applications require minimal code changes.
MARBEN IWF as a Service - SaaS
Skip the infrastructure complexity and accelerate your 5G rollout. MARBEN’s IWF Gateways are now available as a fully managed, cloud-hosted SaaS solution — starting with Ro ↔ NChf charging interworking and expanding across the full portfolio. Go live in days, not months, with zero CAPEX. Ideal for MNOs, MVNOs, and dedicated private 5G networks seeking fast, reliable, and cost-effective interworking without heavy infrastructure investment.
Rapid Deployment
Go live in days - no hardware procurement, no rack integration, no OS configuration.
Elastic Auto-Scaling
Automatically scales gateway capacity in response to traffic spikes - zero manual intervention.
Enterprise Security
TLS 1.3, 3GPP security compliance, role-based access control, SOC 2 aligned operations.
Pure OPEX Model
No upfront CAPEX. Subscription-based pricing aligned to actual usage every month.
99.99% HA Built-In
In-memory session replication runs natively - zero session loss guaranteed.
Multi-Region Availability
Multi-region cloud hosting for geographic redundancy, low latency, and data residency compliance.
MARBEN Cloud Gateway Stack - Active Service Layers
SaaS vs. Traditional On-Premise Deployment
Traditional On-Premise
- • 3 -6 months procurement and integration cycle
- • High upfront CAPEX for hardware and licensing
- • Manual capacity planning and over-provisioning
- • In-house team required for operations and patching
- • Single-region - no built-in geographic redundancy
- • Scaling requires new hardware and re-configuration
MARBEN SaaS Model
- • Go live in days - fully provisioned on demand
- • Zero upfront CAPEX - pure monthly OPEX subscription
- • Elastic auto-scaling handles any traffic volume
- • 24 -7 MARBEN-managed operations, updates included
- • Multi-region cloud hosting with geo-redundancy
- • Scale instantly - no hardware changes needed
Private & Dedicated SaaS - Your Data. Your Control.
MARBEN's SaaS model goes beyond shared cloud. For operators and enterprises that demand full data sovereignty, regulatory compliance, and zero cross-tenant risk, we offer Private SaaS and Dedicated SaaS deployment models - delivering all operational benefits of SaaS with no security compromises.
Private SaaS
Deployed exclusively within your own data center or private cloud (on-prem / VMware / OpenStack). You own the infrastructure; MARBEN manages the software lifecycle remotely.
- • Signaling data never leaves your premises
- • Full regulatory & data residency compliance (GDPR, TRAI, FCC)
- • You own all encryption keys and certificates
- • Isolated deployment - zero shared tenant risk
- • MARBEN handles upgrades, patches, monitoring remotely
- • Integrates with your existing AAA, HSS, OCS infrastructure
Dedicated SaaS
Single-tenant, dedicated MARBEN Gateway cluster in a public or private cloud region of your choice - fully isolated from other customers, fully managed by MARBEN.
- • Single-tenant cluster - dedicated resources, no co-mingling
- • Deploy in your region (AWS, Azure, GCP, private cloud)
- • Dedicated VPC/VNet with private peering to your network
- • Custom SLA, dedicated HA cluster, isolated HA nodes
- • Faster go-live than on-prem with full cloud elasticity
- • Full audit logs and access control - you stay in command
Shared / Managed SaaS
Multi-tenant, fully managed cloud deployment - fastest path to 5G interworking. Best for operators prioritising speed and OPEX efficiency.
- • Live in days - zero infrastructure effort
- • Auto-scaling & 24 -7 managed operations
- • Lowest cost - pure OPEX subscription model
- • TLS 1.3 + per-tenant data isolation at application layer
- • Multi-region Kubernetes orchestration
- • 3GPP compliant - enterprise-grade security baked in
Deployment Model Comparison
| Feature / Criteria | Private SaaS | Dedicated SaaS | Shared SaaS |
|---|---|---|---|
| Data Stays On-Premises | Yes | - Cloud region | - Multi-tenant cloud |
| Tenant Isolation | Full (own infra) | Full (dedicated cluster) | App-layer isolation |
| Data Ownership & Sovereignty | 100% Operator | Operator controlled | Shared responsibility |
| Encryption Key Management | Operator-managed | Operator-managed | MARBEN-managed |
| Regulatory Compliance (GDPR / TRAI / FCC) | Fully configurable | Region-specific | Standard compliance |
| Deployment Speed | Weeks (on-prem setup) | Days (cloud provisioning) | Hours / Days |
| CAPEX / OPEX | Mixed (CAPEX infra + OPEX SW) | Pure OPEX | Pure OPEX (lowest) |
| Managed by MARBEN | Software only | Full stack | Full stack |
| Custom SLA / HA Topology | Fully custom | Dedicated cluster | Standard SLA |
| Best Suited For | Strict data residency & security mandates | Isolation + cloud agility | Rapid deployment, cost-sensitive operators |
Security & Data Protection Pillars
Data Sovereignty
Subscriber signaling data stays within your jurisdiction. No cross-border data transfer without explicit consent.
Zero Trust Security
mTLS between all gateway components, role-based access, network-layer isolation aligned with your existing firewall policies.
Key Ownership
In Private and Dedicated SaaS, you hold your TLS certificates and encryption keys. MARBEN never accesses your signaling payload.
Audit & Compliance
Full audit logs, access trails, and compliance reporting. Supports GDPR, TRAI, FCC, and regional telecom regulatory frameworks.
Isolated Infrastructure
Dedicated HA clusters and Kubernetes namespaces - no shared compute, memory, or network paths with other tenants.
Benefits & Advantages
Across all four solutions, MARBEN IWF delivers a consistent set of business and technical benefits that reduce risk, lower cost, and accelerate 5G migration timelines.
Service Continuity
Users experience uninterrupted service when roaming between network generations - no manual network switching required.
Cost Optimization
Eliminates the need to replace existing OCS/PCRF/HSS infrastructure. Leverage current investments while migrating to 5G.
Operational Flexibility
Supports gradual network migration without forced technology upgrades - migrate at your pace, generation by generation.
Standards Compliance
Adheres to 3GPP specifications (TS 32.290, TS 32.291) ensuring interoperability with any standards-compliant 5G Core.
Modern Deployment Options
Cloud-native architecture supports VM, Kubernetes, SaaS, Private SaaS, Dedicated SaaS, and AWS cloud.
Reduced Complexity
Centralized interworking reduces multiple point-to-point integrations, simplifying network topology and operations.
Solution Comparison Matrix
| Aspect | Solution 1 - 3G -4G | Solution 2 - 4G -5G | Solution 3 - MJDS | Solution 4 - SaaS |
|---|---|---|---|---|
| Solution Type | MARBEN IWF Gateway | MARBEN IWF GW | Java API Stack | Managed Cloud Service |
| Primary Protocol | Diameter NChf HTTP/2 | SS7/CAMEL/MAP Diam. | Diameter NChf HTTP/2 | All Protocols (SaaS) |
| Network Standards | 3GPP Rel 16 | 3GPP Legacy (SS7) | 3GPP Rel 16 | 3GPP Rel 16 + All |
| HA / Uptime | HA | HA | HA | 99.99% Managed HA |
| Deployment Model | Physical / VM / Cloud | Physical / VM | Library / Container | Fully Managed SaaS |
| Private/Dedicated SaaS | - | - | - | Available |
| XML over HTTP Output | Yes - All Interfaces | Yes - Diameter OR XML/HTTP | - | Yes - All Interfaces |
Real-World Scenarios
MARBEN IWF solutions address a wide range of real-world telecom scenarios where multi-generation network coexistence, protocol translation, and seamless service continuity are critical business requirements.
International Roaming
A business traveler with a 5G device roams from their home 5G network to a foreign country with legacy 3G/4G infrastructure. MARBEN IWF activates seamlessly to bridge the protocol gap.
Enterprise IoT Migration
A manufacturing company operates IoT sensors across 3G, 4G, and 5G networks during digital transformation. Mixed-network management becomes unified through IWF.
Connected Vehicle Services
Fleet vehicles travel across regions with varying network generations. Continuous GPS tracking and emergency services must be maintained regardless of network type.
Healthcare Remote Monitoring
Medical devices and telemedicine services need reliable connectivity across different network infrastructures to deliver continuous patient monitoring and critical alerts.
Emergency Services Continuity
First responders need guaranteed connectivity during disasters when network infrastructure is partially compromised. Fallback to older generation networks must be transparent.
Smart City Infrastructure
Urban infrastructure with mixed-generation connectivity for traffic lights, sensors, and public services. IWF enables integration between legacy 3G city systems and new 5G smart sensors.
Specifications Summary
Complete technical reference for MARBEN IWF solutions across all supported network generations, deployment models, standards compliance, and SaaS options.
SS7 - CAMEL - MAP - SIGTRAN
DIAMETER (Ro/Rf) Protocol
NChf HTTP/2 JSON - 3GPP Rel 16
Cloud - SaaS - Private - Dedicated
Wireless LAN Auth & Accounting
TS 32.290 - TS 32.291
Diameter Ro/Rf - XML over HTTP
Active-Active - 99.99% SLA
Diameter OR XML(Ro) over HTTP
3GPP Security - Role-Based Access
Data sovereignty - Operator keys - GDPR/TRAI/FCC ready
Dedicated VPC - Isolated HA - AWS/Azure/GCP
Ready to Accelerate Your 5G Migration?
Talk to a MARBEN protocol expert and get a tailored IWF gateway solution designed for your network's specific needs - Public SaaS, Private SaaS, Dedicated SaaS, or On-Premise.
