Release v2.7.1

When running the open5gs package with systemd network config, the 1st IP address
of the UE pool configured in open5gs-upfd config file for ogstun is
being assigned to the interface through this file.
That was discussed as being a desirable default setup.

However, in the event a user wants a setup where no IP address is
assigned to the tundev, then it's not enough removing the IP address,
because then the implicit routing rules regarding the subnet of the IP
address added automatically by the kernel are also removed.

This patch adds config sections to set up the routing explicitly, with
the aim to get the routing still applied if the user decides to comment
out the IP address, so that packets are still forwarded properly in that
case.

Related: https://osmocom.org/issues/6361

.clang-tidy

@@ -0,0 +1,69 @@
+---
+Checks: '*,
+  -altera-id-dependent-backward-branch,
+  -altera-struct-pack-align,
+  -altera-unroll-loops,
+  -android-cloexec-*,
+  -bugprone-branch-clone,
+  -bugprone-easily-swappable-parameters,
+  -bugprone-macro-parentheses,
+  -bugprone-reserved-identifier,
+  -bugprone-sizeof-expression,
+  -cert-dcl37-c,
+  -cert-dcl51-cpp,
+  -cert-err33-c,
+  -cert-err34-c,
+  -clang-analyzer-optin.performance.Padding,
+  -clang-analyzer-security.insecureAPI.bcmp,
+  -clang-analyzer-security.insecureAPI.bcopy,
+  -clang-analyzer-security.insecureAPI.bzero,
+  -clang-diagnostic-error,
+  -clang-diagnostic-typedef-redefinition,
+  -clang-diagnostic-unknown-warning-option,
+  -concurrency-mt-unsafe,
+  -cppcoreguidelines-avoid-magic-numbers,
+  -cppcoreguidelines-avoid-non-const-global-variables,
+  -cppcoreguidelines-init-variables,
+  -google-readability-braces-around-statements,
+  -google-readability-casting,
+  -google-readability-function-size,
+  -google-readability-todo,
+  -hicpp-braces-around-statements,
+  -hicpp-function-size,
+  -hicpp-multiway-paths-covered,
+  -llvm-else-after-return,
+  -llvm-header-guard,
+  -llvm-include-order,
+  -llvmlibc-restrict-system-libc-headers,
+  -misc-no-recursion,
+  -misc-unused-parameters,
+  -performance-no-int-to-ptr,
+  -readability-avoid-const-params-in-decls,
+  -readability-braces-around-statements,
+  -readability-duplicate-include,
+  -readability-else-after-return,
+  -readability-function-cognitive-complexity,
+  -readability-function-size,
+  -readability-identifier-length,
+  -readability-isolate-declaration,
+  -readability-magic-numbers,
+  -readability-non-const-parameter,
+  -readability-redundant-control-flow,
+  -readability-redundant-declaration,
+  -readability-suspicious-call-argument,
+
+
+  -bugprone-implicit-widening-of-multiplication-result,
+  -bugprone-narrowing-conversions,
+  -cert-exp42-c,
+  -cert-flp37-c,
+  -clang-analyzer-core.NullDereference,
+  -clang-analyzer-deadcode.DeadStores,
+  -clang-analyzer-security.insecureAPI.strcpy,
+  -cppcoreguidelines-interfaces-global-init,
+  -cppcoreguidelines-narrowing-conversions,
+  -hicpp-signed-bitwise,
+  '
+
+WarningsAsErrors: false
+HeaderFilterRegex: '(.*\.h)'

.dockerignore

@@ -0,0 +1,10 @@
+**/*.md
+**/docker-compose*.yml
+**/docker-compose*.yaml
+**/Dockerfile*
+.git
+.dockerignore
+.cache
+.gitignore
+.github
+build

.editorconfig

@@ -0,0 +1,8 @@
+; See http://editorconfig.org
+root = true
+
+[*.{c,h}]
+indent_style = space
+indent_size = 4
+end_of_line = lf
+insert_final_newline = true

.github/FUNDING.yml

@@ -0,0 +1,13 @@
+# These are supported funding model platforms
+
+#github: [acetcom, open5gs]
+github: acetcom
+#patreon: # Replace with a single Patreon username
+open_collective: open5gs
+#ko_fi: # Replace with a single Ko-fi username
+#tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+#community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+#liberapay: # Replace with a single Liberapay username
+#issuehunt: # Replace with a single IssueHunt username
+#otechie: # Replace with a single Otechie username
+#custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

.github/ISSUE_TEMPLATE/bugreport.yaml

@@ -0,0 +1,58 @@
+name: Bug Report
+description: File a bug report or issue
+title: "[Bug]: "
+labels: ['triage']
+assignees: []
+body:
+  - type: markdown
+    attributes:
+      value: > 
+        **Please note**
+        
+        This form should only be used if _you can reporoduce_ the bug the in the *current* release of
+        Open5GS Stack. For installation, configuration or other help with Open5GS please
+        use our [discussion forum](https://github.com/open5gs/open5gs/discussions).
+        
+        **This form is not for support requests.**
+  - type: input
+    attributes:
+      label: Open5GS Release, Revision, or Tag
+      description: Please check if your issue has been resolved in the latest release.
+      placeholder: v2.6.0
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Steps to reproduce
+      description: >
+        Please describe in detail the steps needed to reproduce this bug. These steps
+        should reproduce the issue on the most current release of Open5GS. Be sure to
+        include configuration and platform details.
+        Please include logs from the relevant daemons as well as any relevant packet captures.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Logs
+      description: Provide any relevant captured logs for the issue
+      render: shell
+  - type: textarea
+    attributes:
+      label: Expected behaviour
+      description: What did you expect to happen?
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Observed Behaviour
+      description: What's the observed behaviour?
+    validations:
+      required: true
+  - type: input
+    attributes:
+      label: eNodeB/gNodeB
+      description: If using an eNB or gNB, please identify which vendor/version
+  - type: input
+    attributes:
+      label: UE Models and versions
+      description: Which UE hardware model and version or simulator version are you using?

.github/ISSUE_TEMPLATE/config.yaml

@@ -0,0 +1,9 @@
+blank_issues_enabled: false
+contact_links:
+        - name: Open5GS Contribution Guide
+          url: https://github.com/open5gs/open5gs/wiki/Contribution-guide
+          about: Contribution guide detailing how you can help the project
+        - name: Project Sponsorship
+          url: https://github.com/sponsors/acetcom
+          name: Support the Open5GS developer using GitHub sponsorship
+

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -0,0 +1,48 @@
+name: Feature request
+description: Propose an enhancement to Open5GS
+labels: ['Enhancement', 'triage']
+body:
+  - type: markdown
+    attributes:
+      value: >
+        ## Feature request
+        Please submit your feature request using the form. If your proposal is not sufficiently
+        well formed, we may request further clarification and expansion. If you're unsure about
+        how to formulate your request, please start a [discussion instead](https://github.com/open5gs/open5gs/dicsussions/).
+
+  - type: input
+    attributes:
+      label: Open5GS Release, Revision, or Tag
+      placeholder: v2.6.0
+    validations:
+      required: true
+
+  - type: input
+    attributes:
+      label: Components and subsystems
+      description: Which subsystems and components would this feature be relevant to?
+    validations:
+      required: true
+
+  - type: textarea
+    attributes:
+      label: Proposed functionality
+      description: >
+        Provide a detailed description of the feature or behaviour you are proposing. Please include any
+        Please include any relevant 3GPP standards and references and include any specific changes to
+        current protocols, processing pipelines, DIAMETER requests/responses, and interfaces. The more detail
+        you provide, the greater the chance your proposal has of being discussed.
+
+        If your feature request does not include anything actionable or sufficient details, you may be asked
+        to provide further clarification or your request may be rejected.
+    validations:
+      required: true
+
+  - type: textarea
+    attributes:
+      label: External dependencies
+      description: >
+        Please detail any new dependencies or implementations that this feature might introduce. e.g. Does the 
+        proposal require the installation of additional packages? Are there further external nodes which may be
+        required for integration testing? (Not all feature requests will introduce new dependencies)
+

.github/stale.yml

@@ -0,0 +1,61 @@
+# Configuration for probot-stale - https://github.com/probot/stale
+
+# Number of days of inactivity before an Issue or Pull Request becomes stale
+daysUntilStale: 180
+
+# Number of days of inactivity before an Issue or Pull Request with the stale label is closed.
+# Set to false to disable. If disabled, issues still need to be closed manually, but will remain marked as stale.
+daysUntilClose: 7
+
+# Only issues or pull requests with all of these labels are check if stale. Defaults to `[]` (disabled)
+onlyLabels: []
+
+# Issues or Pull Requests with these labels will never be considered stale. Set to `[]` to disable
+exemptLabels:
+  - pinned
+  - security
+  - "[Status] Maybe Later"
+
+# Set to true to ignore issues in a project (defaults to false)
+exemptProjects: false
+
+# Set to true to ignore issues in a milestone (defaults to false)
+exemptMilestones: false
+
+# Set to true to ignore issues with an assignee (defaults to false)
+exemptAssignees: false
+
+# Label to use when marking as stale
+staleLabel: wontfix
+
+# Comment to post when marking as stale. Set to `false` to disable
+markComment: >
+  This issue/PR has been automatically marked as stale because it has not had
+  recent activity for 180 days. It will be closed if no further activity
+  occurs in 7 dayss. Thank you for your contributions!
+
+# Comment to post when removing the stale label.
+# unmarkComment: >
+#   Your comment here.
+
+# Comment to post when closing a stale Issue or Pull Request.
+# closeComment: >
+#   Your comment here.
+
+# Limit the number of actions per hour, from 1-30. Default is 30
+limitPerRun: 30
+
+# Limit to only `issues` or `pulls`
+# only: issues
+
+# Optionally, specify configuration settings that are specific to just 'issues' or 'pulls':
+# pulls:
+#   daysUntilStale: 30
+#   markComment: >
+#     This pull request has been automatically marked as stale because it has not had
+#     recent activity. It will be closed if no further activity occurs. Thank you
+#     for your contributions.
+
+# issues:
+#   exemptLabels:
+#     - confirmed

.github/workflows/cifuzz.yml

@@ -0,0 +1,34 @@
+name: CIFuzz
+on: [pull_request]
+permissions: {}
+jobs:
+ Fuzzing:
+   runs-on: ubuntu-latest
+   permissions:
+     security-events: write
+   steps:
+   - name: Build Fuzzers
+     id: build
+     uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
+     with:
+       oss-fuzz-project-name: 'open5gs'
+   - name: Run Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
+     with:
+       oss-fuzz-project-name: 'open5gs'
+       fuzz-seconds: 300
+       output-sarif: true
+   - name: Upload Crash
+     uses: actions/upload-artifact@v3
+     if: failure() && steps.build.outcome == 'success'
+     with:
+       name: artifacts
+       path: ./out/artifacts
+   - name: Upload Sarif
+     if: always() && steps.build.outcome == 'success'
+     uses: github/codeql-action/upload-sarif@v2
+     with:
+      # Path to SARIF file relative to the root of the repository
+      sarif_file: cifuzz-sarif/results.sarif
+      checkout_path: cifuzz-sarif
+      category: CIFuzz

.github/workflows/meson-ci.yml

@@ -0,0 +1,78 @@
+name: Meson Continuous Integration
+on: [push, pull_request]
+
+jobs:
+  macos-latest:
+    name: Build and Test on MacOS Latest
+    runs-on: macos-latest
+    steps:
+#    - name: Install MongoDB with Package Manager
+#      run: |
+#          brew tap mongodb/brew
+#          brew install mongodb-community
+#          brew services start mongodb-community
+    - name: Create the TUN device with the interface name `ogstun`.
+      run: |
+          sudo ifconfig lo0 alias 127.0.0.2 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.3 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.4 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.5 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.5 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.6 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.7 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.8 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.9 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.10 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.11 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.12 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.13 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.14 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.15 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.16 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.17 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.18 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.19 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.0.20 netmask 255.255.255.255
+          sudo ifconfig lo0 alias 127.0.1.10 netmask 255.255.255.255
+    - name: Install the dependencies for building the source code.
+      run: brew install mongo-c-driver libidn libmicrohttpd nghttp2 bison libusrsctp libtins talloc meson
+    - name: Check out repository code
+      uses: actions/checkout@main
+    - name: Setup Meson Build
+      run: PATH="/usr/local/opt/bison/bin:$PATH" PKG_CONFIG_PATH="/usr/local/opt/openssl/lib/pkgconfig:$PKG_CONFIG_PATH" meson setup build
+      env:
+        CC: gcc
+    - name : Build Open5GS
+      run: ninja -C build
+    - name: Test Open5GS
+      run: sudo meson test -C build -v crypt unit
+
+  ubuntu-latest:
+    name: Build and Test on Ubuntu Latest
+    runs-on: ubuntu-latest
+    services:
+      mongodb:
+        image: mongo
+        ports:
+          - 27017:27017
+    steps:
+    - name: Create the TUN device with the interface name `ogstun`.
+      run: |
+          sudo ip tuntap add name ogstun mode tun
+          sudo ip addr add 10.45.0.1/16 dev ogstun
+          sudo ip addr add 2001:db8:cafe::1/48 dev ogstun
+          sudo ip link set ogstun up
+    - name: Install the dependencies for building the source code.
+      run: |
+          sudo apt update
+          sudo apt install python3-pip python3-setuptools python3-wheel ninja-build build-essential flex bison git libsctp-dev libgnutls28-dev libgcrypt-dev libssl-dev libidn11-dev libmongoc-dev libbson-dev libyaml-dev libnghttp2-dev libmicrohttpd-dev libcurl4-gnutls-dev libnghttp2-dev libtins-dev libtalloc-dev meson
+    - name: Check out repository code
+      uses: actions/checkout@main
+    - name: Setup Meson Build
+      run: meson setup build
+      env:
+        CC: gcc
+    - name : Build Open5GS
+      run: ninja -C build
+    - name: Test Open5GS
+      run: meson test -C build -v

.github/workflows/stale.yml

@@ -0,0 +1,45 @@
+name: Mark stale issues and pull requests
+
+on:
+  schedule:
+  - cron: '30 22 * * *'
+
+jobs:
+  stale:
+
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+
+    steps:
+    - uses: actions/stale@v5
+      with:
+        debug-only: false
+        operations-per-run: 500
+        enable-statistics: true
+        remove-stale-when-updated: true
+        exempt-issue-labels: 'status:accepted,status:blocked,status:more-info-needed,status:milestone-required,Help Wanted'
+        exempt-all-milestones: true
+        stale-issue-label: 'Housekeeping:ToClose'
+        
+        days-before-stale: 60
+        stale-issue-message: >
+          This issue has been marked as stale because there has been no recent activity on it. If there is
+          no further activity, it will be closed. The Open5GS team is a small but dedicated team with limited 
+          resources and may not be able to address every issue directly. **Do not** attempt to circumvent this 
+          by 'bumping' the issue; doing so will result in it's immediate closure and possibly your exclusion 
+          from participating in any future discussions.      
+        stale-pr-message: >
+          As there has been no recent activity on this PR, it has been marked as stale. It will be automatically
+          closed if no further action is taken.
+        
+        
+        days-before-close: 30
+        days-before-pr-close: -1
+        close-issue-message: >
+          This issue has been closed automatically due to lack of activity. This has been done to try
+          and reduce the amount of noise. Please do not comment any further. The Open5GS Team may choose to
+          re-open this issue if necessary.
+        close-pr-message: >
+          This PR has been closed due to an absence of activity.

.gitignore

@@ -1,59 +1,9 @@
-# compiler output
-*.o
-*.lo
-*.a
-*.la
-*.conf
-.deps
-.libs
+install/
 
-# generated files
-lib/freeDiameter-*/libfdcore/fdd.tab.[chy]
-lib/freeDiameter-*/libfdcore/lex.fdd.[cl]
-lib/freeDiameter-*/include/freeDiameter/version.h
-lib/freeDiameter-*/include/freeDiameter/config.h.in
-lib/freeDiameter-*/include/freeDiameter/freeDiameter-host.h
-lib/core/include/core.h
-support/systemd/nextepc-*.service
-support/logrotate/nextepc
+# This directory is fetched during first build and is present in this directory
+subprojects/freeDiameter
+subprojects/libtins
+subprojects/prometheus-client-c
+subprojects/usrsctp
 
-# autotools
-stamp-h1
-config.h
-config.in
-config.nice
-config.log
-configure
-aclocal.m4
-config.status
-libtool
-autom4te.cache
-build-aux
-Makefile
-Makefile.in
-m4
-
-# executables
-lib/core/test/testcore
-test/testepc
-nextepc-mmed
-nextepc-pcrfd
-nextepc-pgwd
-nextepc-sgwd
-nextepc-epcd
-nextepc-hssd
-
-# debian
-debian/*.debhelper.log
-debian/*.debhelper
-debian/*.substvars
-debian/tmp
-debian/files
-debian/autoreconf.before
-debian/autoreconf.after
-debian/nextepc-core
-debian/nextepc-mme
-debian/nextepc-sgw
-debian/nextepc-pgw
-debian/nextepc-pcrf
-debian/nextepc-hss
+webui/.next

LICENSE

@@ -1,5 +1,5 @@
-                    GNU GENERAL PUBLIC LICENSE
-                       Version 3, 29 June 2007
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
 
  Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
  Everyone is permitted to copy and distribute verbatim copies
@@ -7,17 +7,15 @@
 
                             Preamble
 
-  The GNU General Public License is a free, copyleft license for
-software and other kinds of works.
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
 
   The licenses for most software and other practical works are designed
 to take away your freedom to share and change the works.  By contrast,
-the GNU General Public License is intended to guarantee your freedom to
+our General Public Licenses are intended to guarantee your freedom to
 share and change all versions of a program--to make sure it remains free
-software for all its users.  We, the Free Software Foundation, use the
-GNU General Public License for most of our software; it applies also to
-any other work released this way by its authors.  You can apply it to
-your programs, too.
+software for all its users.
 
   When we speak of free software, we are referring to freedom, not
 price.  Our General Public Licenses are designed to make sure that you
@@ -26,44 +24,34 @@ them if you wish), that you receive source code or can get it if you
 want it, that you can change the software or use pieces of it in new
 free programs, and that you know you can do these things.
 
-  To protect your rights, we need to prevent others from denying you
-these rights or asking you to surrender the rights.  Therefore, you have
-certain responsibilities if you distribute copies of the software, or if
-you modify it: responsibilities to respect the freedom of others.
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
 
-  For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must pass on to the recipients the same
-freedoms that you received.  You must make sure that they, too, receive
-or can get the source code.  And you must show them these terms so they
-know their rights.
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
 
-  Developers that use the GNU GPL protect your rights with two steps:
-(1) assert copyright on the software, and (2) offer you this License
-giving you legal permission to copy, distribute and/or modify it.
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
 
-  For the developers' and authors' protection, the GPL clearly explains
-that there is no warranty for this free software.  For both users' and
-authors' sake, the GPL requires that modified versions be marked as
-changed, so that their problems will not be attributed erroneously to
-authors of previous versions.
-
-  Some devices are designed to deny users access to install or run
-modified versions of the software inside them, although the manufacturer
-can do so.  This is fundamentally incompatible with the aim of
-protecting users' freedom to change the software.  The systematic
-pattern of such abuse occurs in the area of products for individuals to
-use, which is precisely where it is most unacceptable.  Therefore, we
-have designed this version of the GPL to prohibit the practice for those
-products.  If such problems arise substantially in other domains, we
-stand ready to extend this provision to those domains in future versions
-of the GPL, as needed to protect the freedom of users.
-
-  Finally, every program is threatened constantly by software patents.
-States should not allow patents to restrict development and use of
-software on general-purpose computers, but in those that do, we wish to
-avoid the special danger that patents applied to a free program could
-make it effectively proprietary.  To prevent this, the GPL assures that
-patents cannot be used to render the program non-free.
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
 
   The precise terms and conditions for copying, distribution and
 modification follow.
@@ -72,7 +60,7 @@ modification follow.
 
   0. Definitions.
 
-  "This License" refers to version 3 of the GNU General Public License.
+  "This License" refers to version 3 of the GNU Affero General Public License.
 
   "Copyright" also means copyright-like laws that apply to other kinds of
 works, such as semiconductor masks.
@@ -549,35 +537,45 @@ to collect a royalty for further conveying from those to whom you convey
 the Program, the only way you could satisfy both those terms and this
 License would be to refrain entirely from conveying the Program.
 
-  13. Use with the GNU Affero General Public License.
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
 
   Notwithstanding any other provision of this License, you have
 permission to link or combine any covered work with a work licensed
-under version 3 of the GNU Affero General Public License into a single
+under version 3 of the GNU General Public License into a single
 combined work, and to convey the resulting work.  The terms of this
 License will continue to apply to the part which is the covered work,
-but the special requirements of the GNU Affero General Public License,
-section 13, concerning interaction through a network will apply to the
-combination as such.
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
 
   14. Revised Versions of this License.
 
   The Free Software Foundation may publish revised and/or new versions of
-the GNU General Public License from time to time.  Such new versions will
-be similar in spirit to the present version, but may differ in detail to
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
 address new problems or concerns.
 
   Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU General
+Program specifies that a certain numbered version of the GNU Affero General
 Public License "or any later version" applies to it, you have the
 option of following the terms and conditions either of that numbered
 version or of any later version published by the Free Software
 Foundation.  If the Program does not specify a version number of the
-GNU General Public License, you may choose any version ever published
+GNU Affero General Public License, you may choose any version ever published
 by the Free Software Foundation.
 
   If the Program specifies that a proxy can decide which future
-versions of the GNU General Public License can be used, that proxy's
+versions of the GNU Affero General Public License can be used, that proxy's
 public statement of acceptance of a version permanently authorizes you
 to choose that version for the Program.
 
@@ -631,44 +629,33 @@ to attach them to the start of each source file to most effectively
 state the exclusion of warranty; and each file should have at least
 the "copyright" line and a pointer to where the full notice is found.
 
-    {one line to give the program's name and a brief idea of what it does.}
-    Copyright (C) {year}  {name of author}
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
 
     This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU General Public License as published by
+    it under the terms of the GNU Affero General Public License as published by
     the Free Software Foundation, either version 3 of the License, or
     (at your option) any later version.
 
     This program is distributed in the hope that it will be useful,
     but WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU General Public License for more details.
+    GNU Affero General Public License for more details.
 
-    You should have received a copy of the GNU General Public License
+    You should have received a copy of the GNU Affero General Public License
     along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 Also add information on how to contact you by electronic and paper mail.
 
-  If the program does terminal interaction, make it output a short
-notice like this when it starts in an interactive mode:
-
-    {project}  Copyright (C) {year}  {fullname}
-    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
-    This is free software, and you are welcome to redistribute it
-    under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License.  Of course, your program's commands
-might be different; for a GUI interface, you would use an "about box".
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
 
   You should also get your employer (if you work as a programmer) or school,
 if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU GPL, see
+For more information on this, and how to apply and follow the GNU AGPL, see
 <http://www.gnu.org/licenses/>.
-
-  The GNU General Public License does not permit incorporating your program
-into proprietary programs.  If your program is a subroutine library, you
-may consider it more useful to permit linking proprietary applications with
-the library.  If this is what you want to do, use the GNU Lesser General
-Public License instead of this License.  But first, please read
-<http://www.gnu.org/philosophy/why-not-lgpl.html>.

Makefile.am

@@ -1,56 +0,0 @@
-## Process this file with automake to produce Makefile.in
-
-ACLOCAL_AMFLAGS = -I m4
-
-SUBDIRS = lib src support test
-
-bin_PROGRAMS = nextepc-mmed nextepc-hssd nextepc-sgwd nextepc-pgwd nextepc-pcrfd nextepc-epcd
-
-dist_nextepc_mmed_SOURCES = main.c
-nextepc_mmed_LDADD = $(top_srcdir)/src/libmme.la
-nextepc_mmed_LDFLAGS = -export-dynamic
-
-dist_nextepc_hssd_SOURCES = main.c
-nextepc_hssd_LDADD = $(top_srcdir)/src/libhss.la
-nextepc_hssd_LDFLAGS = -export-dynamic
-
-dist_nextepc_sgwd_SOURCES = main.c
-nextepc_sgwd_LDADD = $(top_srcdir)/src/libsgw.la
-nextepc_sgwd_LDFLAGS = -export-dynamic
-
-dist_nextepc_pgwd_SOURCES = main.c
-nextepc_pgwd_LDADD = $(top_srcdir)/src/libpgw.la
-nextepc_pgwd_LDFLAGS = -export-dynamic
-
-dist_nextepc_pcrfd_SOURCES = main.c
-nextepc_pcrfd_LDADD = $(top_srcdir)/src/libpcrf.la
-nextepc_pcrfd_LDFLAGS = -export-dynamic
-
-dist_nextepc_epcd_SOURCES = main.c
-nextepc_epcd_LDADD = $(top_srcdir)/src/libepc.la
-nextepc_epcd_LDFLAGS = -export-dynamic
-
-AM_CPPFLAGS = \
-    -I$(top_srcdir)/lib/core/include \
-    -I$(top_srcdir)/src
-
-install-data-hook:
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/log/nextepc
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/run/nextepc-mmed
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/run/nextepc-sgwd
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/run/nextepc-pgwd
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/run/nextepc-pcrfd
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/run/nextepc-hssd
-	$(MKDIR_P) $(DESTDIR)/$(localstatedir)/run/nextepc-epcd
-
-CLEANFILES = -R data debian/test
-DISTCLEANFILES = $(DIST_ARCHIVES)
-MAINTAINERCLEANFILES = \
-    configure config.in \
-    aclocal.m4 m4/ltsugar.m4 m4/libtool.m4 m4/ltversion.m4 \
-    m4/lt~obsolete.m4 m4/ltoptions.m4 \
-    build-aux/ar-lib build-aux/config.guess build-aux/depcomp \
-	build-aux/ltmain.sh build-aux/test-driver build-aux/compile \
-	build-aux/config.sub build-aux/missing build-aux/install-sh \
-    Makefile.in
-MOSTLYCLEANFILES = core *.stackdump

README.md

@@ -1,267 +1,40 @@
-Building NextEPC
-================
+<p align="center"><a href="https://open5gs.org" target="_blank" rel="noopener noreferrer"><img width="100" src="https://open5gs.org/assets/img/open5gs-logo-only.png" alt="Open5GS logo"></a></p>
 
-This post will guide you on how to get installed with **NextEPC**. To date, **NextEPC** has been compiled and tested on GNU/Linux distributions(Debian, Ubuntu, Fedora, OpenSUSE) and FreeBSD.
+## Getting Started
 
-We will describe this guide using **Ubuntu 16.04 LTS (Xenial)**. You'll need to install **Ubuntu** if you don't have it installed already. To get the latest Ubuntu version, please visit the official Ubuntu website: [https://www.ubuntu.com/download/](https://www.ubuntu.com/download/). 
+Please follow the [documentation](https://open5gs.org/open5gs/docs/) at [open5gs.org](https://open5gs.org/)!
 
-## Install the dependencies for building the source
+## Sponsors
 
-The first step is to use **apt-get** to install all depedencies.
+If you find Open5GS useful for work, please consider supporting this Open Source project by [Becoming a sponsor](https://github.com/sponsors/acetcom). To manage the funding transactions transparently, you can donate through [OpenCollective](https://opencollective.com/open5gs).
 
-```bash
-sudo apt-get -y install git gcc flex bison make autoconf libtool pkg-config libsctp-dev libssl-dev libgnutls-dev libgcrypt-dev libmongoc-dev libbson-dev mongodb
-```
+<p align="center">
+  <h3 align="center">Special Sponsor</h3>
+</p>
 
-## Retrieve the latest version of the source package
+<p align="center">
+  <a target="_blank" href="https://mobi.com">
+  <img alt="special sponsor mobi" src="https://open5gs.org/assets/img/mobi-open5GS.png" width="400">
+  </a>
+</p>
 
-```bash
-git clone https://github.com/acetcom/nextepc
-```
+<p align="center">
+  <a target="_blank" href="https://open5gs.org/#sponsors">
+      <img alt="sponsors" src="https://open5gs.org/assets/img/sponsors.svg">
+  </a>
+</p>
 
-## Configure the build
+## Community
 
-```bash
-cd nextepc
-test -f configure || autoreconf -iv
-CFLAGS='-O2' ./configure --prefix=`pwd`/install
-```
+- Problem with Open5GS can be filed as [issues](https://github.com/open5gs/open5gs/issues) in this repository.
+- Other topics related to this project are happening on the [discussions](https://github.com/open5gs/open5gs/discussions).
+- Voice and text chat are available in Open5GS's [Discord](https://discordapp.com/) workspace. Use [this link](https://discord.gg/GreNkuc) to get started.
 
-## Compiling
+## Contributing
 
-Hopefully, once you have completed the autotools configuration, you only need to run:
+If you're contributing through a pull request to Open5GS project on GitHub, please read the [Contributor License Agreement](https://open5gs.org/open5gs/cla/) in advance.
 
-```bash
-make -j `nproc`
-```
+## License
 
-## Installing
-
-Once the compilation is complete, you can install in the configured paths with:
-
-```bash
-make install
-```
-(this might require sudo depending on the configured target directories)
-
-Web Setup
-=========
-
-NextEPC is configured with **Mongo DB**, which manages _Subscriber Information_ mainly, and **Configuration File** made in _JSON_ format.
-
-The configuration file can be modified using a general editor such as vi or emacs, but _Subscriber Information_ can be managed properly using _Mongo DB Client_.
-
-NextEPC provides **Web User Interface** solely designed to manage _Subscriber Information_ in an easy way without using _Mongo DB Client_. Let's how to install it from now on.
-
-## Install Node.js and NPM
-
-To get the latest **Node.js** and **NPM** version, you can visit the official **Node.js** website:
-[https://nodesjs.org/en/download/](https://nodesjs.org/en/download/).
-
-Or, you can install _Node.js_ and _NPM_ on **Ubuntu** as follows:
-
-```bash
-sudo apt-get -y install curl
-curl -sL https://deb.nodesource.com/setup_8.x | sudo -E bash -
-sudo apt-get -y install nodejs
-```
-
-## Install the dependencies for building the source
-
-The first step is to use **npm** to install all depedencies.
-
-```bash
-cd nextepc/webui
-npm install
-```
-
-## Build Web User Interface
-```bash
-npm run build
-```
-
-## Running Web Server
-
-```bash
-npm run start
-```
-
-## Login with default account
-
-Use **Web Browser** to connect it. _http://localhost:3000_
-
-  * Username : admin
-  * Password : 1423
-
-Then, you can change your password in _Account_ Menu.
-
-Network Configuration
-=====================
-
-NextEPC consists of five nodes such as _MME, SGW, PGW, HSS and PCRF_. Basically, each node can be installed in a physically separate host or in the same host.
-
-We will run these five nodes that make up NextEPC in a **Single Host**. The reason is why it is the easiest way to understand how to configure NextEPC network.
-
-## IP Configuration
-
-In order to run _MME, HSS, SGW, PGW, and PCRF_ on a **Single Host**, IP address is set by using **IP aliasing**.
-
-```bash
-sudo ifconfig eth1:hss 10.1.35.214/24 up
-sudo ifconfig eth1:mme 10.1.35.215/24 up
-sudo ifconfig eth1:sgw_s5 10.1.35.216/24 up
-sudo ifconfig eth1:sgw_s11 10.1.35.217/24 up
-sudo ifconfig eth1:pcrf 10.1.35.218/24 up
-sudo ifconfig eth1:pgw 10.1.35.219/24 up
-```
-
-## Setup for Data Path
-
-Use the **TUN Driver** to make _Data Path_ to be used by the **PGW**.
-
-```bash
-sudo ip tuntap add name pgwtun mode tun
-sudo ifconfig pgwtun 45.45.0.1/16 up
-```
-
-## Check Configuration File
-
-A configuration file is located `etc/nextepc.conf` from the installed paths. If you need to change the IP address for a particular problem, you should modify `XXXX_IPV4` field in the configuration file.
-
-For example, if you want the IP aliasing address of *PGW* to be _10.1.35.254_, `PGW.NETWORK.S5C_IPV4` and `PGW_NETWORK.S5U_IPV4` field should be updated like the followings.
-
-<pre>
-  PGW :
-  {
-    FD_CONF_PATH : "/etc/freeDiameter
-
-    NETWORK :
-    {
-      S5C_IPV4: "10.1.35.254",
-      S5U_IPV4: "10.1.35.254"
-    }
-
-    TUNNEL:
-    {
-      DEV_NAME: "pgwtun"
-    }
-
-    IP_POOL :
-    {
-      CIDR: 45.45.45.0/24
-    }
-
-    DNS :
-    {
-      PRIMARY_IPV4: "8.8.8.8",
-      SECONDARY_IPV4: "4.4.4.4"
-    }
-  }
-</pre>
-
-## Testing Network Configuration
-
-Once you are done, run the testing script.
-```bash
-./test/testepc
-```
-You can see the simulated packet through **Wireshark**.  _(FILTER : s1ap || gtpv2 || diameter)_
-
-Running NextEPC
-===============
-
-## Update GUMMEI and TAI
-
-The followings are the **GUMMEI** and **TAI** of the *MME* currently set to Default. Your *eNodeB* will also have a **PLMN ID** and **TAC** set. Refer to these parameters to change the setting of MME or eNodeB.
-
-<pre>
-GUMMEI:
-{
-  PLMN_ID : 
-  {
-    MCC : "001",
-    MNC : "01"
-  }
-  MME_GID : 2,
-  MME_CODE : 1
-},
-TAI:
-{
-  PLMN_ID :
-  {
-    MCC: "001",
-    MNC: "01",
-  }
-  TAC: 12345
-}
-</pre>
-
-For reference, MME can set several GUMMEI and TAI as **JSON array notation** as follows.
-
-<pre>
-GUMMEI:
-[
-  {
-    PLMN_ID : 
-    {
-      MCC : "001",
-      MNC : "01"
-    }
-    MME_GID : 2,
-    MME_CODE : 1
-  },
-  {
-    PLMN_ID : 
-    {
-      MCC : "005",
-      MNC : "05"
-    }
-    MME_GID : 5,
-    MME_CODE : 6
-  },
-]
-TAI:
-[
-  {
-    PLMN_ID :
-    {
-      MCC: "001",
-      MNC: "01",
-    }
-    TAC: 12345
-  },
-  {
-    PLMN_ID :
-    {
-      MCC: "005",
-      MNC: "05",
-    }
-    TAC: 6789
-  }
-]
-</pre>
-
-## Register Subscriber Information
-
-There is only one setting for this guide. The _Subscriber Information_ required for **HSS** should be registered in _Mongo DB_. Let's run the **Web User Interface** with `npm run start` as mentioned eariler.
-
-Connect http://localhost:3000 using Web Browser.
-
-  * Go to Subscriber Menu
-  * Click + Button to add Subscriber Information
-  * Fill IMSI, Security(K, OP, AMF), APN in the Form
-  * Click the `SAVE` Button
-
-## Running NextEPC
-
-Generally, to use NextEPC in several hosts, you must use an independent daemon called _mmed, sgwd, pgwd, hssd, and pcrfd_.
-
-However, we are preparing a more convenient daemon named **epcd**. It enables to service all five nodes of NextEPC.
-
-```bash
-./epcd
-```
-
-Turn on your **eNodeB** and **Mobile**. Check Wireshark!
-
-Hopefully, you can see the real packet for TAU/Service Request, Dedicated Bearer, Multiple APN, and S1/X2-Handover.
+- Open5GS Open Source files are made available under the terms of the GNU Affero General Public License ([GNU AGPL v3.0](https://www.gnu.org/licenses/agpl-3.0.html)).
+- [Commercial licenses](https://open5gs.org/open5gs/support/) are also available from [NeoPlane](https://neoplane.io/)

acinclude.m4

@@ -1,108 +0,0 @@
-dnl
-dnl CORE_SUBST(varname)
-dnl
-dnl Adds variable with it's value into Makefile, e.g.:
-dnl CC = gcc
-dnl
-AC_DEFUN([CORE_SUBST],[
-  CORE_VAR_SUBST="$CORE_VAR_SUBST $1"
-])
-
-dnl
-dnl CORE_SUBST_OLD(varname)
-dnl
-dnl Same as CORE_SUBST() but also substitutes all @VARNAME@
-dnl instances in every file passed to AC_OUTPUT()
-dnl
-AC_DEFUN([CORE_SUBST_OLD],[
-  CORE_SUBST($1)
-  AC_SUBST($1)
-])
-
-dnl
-dnl CORE_CONFIG_NICE(filename)
-dnl
-dnl Generates the config.nice file
-dnl
-AC_DEFUN([CORE_CONFIG_NICE],[
-  AC_REQUIRE([AC_PROG_EGREP])
-  AC_REQUIRE([LT_AC_PROG_SED])
-  CORE_SUBST_OLD(EGREP)
-  CORE_SUBST_OLD(SED)
-  test -f $1 && mv $1 $1.old
-  rm -f $1.old
-  cat >$1<<EOF
-#! /bin/sh
-#
-# Created by configure
-
-EOF
-
-  for var in CFLAGS CXXFLAGS CPPFLAGS LDFLAGS EXTRA_LDFLAGS_PROGRAM LIBS CC CXX; do
-    eval val=\$$var
-    if test -n "$val"; then
-      echo "$var='$val' \\" >> $1
-    fi
-  done
-
-  echo "'[$]0' \\" >> $1
-  if test `expr -- [$]0 : "'.*"` = 0; then
-    CONFIGURE_COMMAND="$CONFIGURE_COMMAND '[$]0'"
-  else 
-    CONFIGURE_COMMAND="$CONFIGURE_COMMAND [$]0"
-  fi
-  for arg in $ac_configure_args; do
-     if test `expr -- $arg : "'.*"` = 0; then
-        if test `expr -- $arg : "--.*"` = 0; then
-       	  break;
-        fi
-        echo "'[$]arg' \\" >> $1
-        CONFIGURE_OPTIONS="$CONFIGURE_OPTIONS '[$]arg'"
-     else
-        if test `expr -- $arg : "'--.*"` = 0; then
-       	  break;
-        fi
-        echo "[$]arg \\" >> $1
-        CONFIGURE_OPTIONS="$CONFIGURE_OPTIONS [$]arg"
-     fi
-  done
-  echo '"[$]@"' >> $1
-  chmod +x $1
-  CONFIGURE_COMMAND="$CONFIGURE_COMMAND $CONFIGURE_OPTIONS"
-  CORE_SUBST_OLD(CONFIGURE_COMMAND)
-  CORE_SUBST_OLD(CONFIGURE_OPTIONS)
-])
-
-AC_DEFUN([AX_CHECK_COMPILE_FLAG],
-[AC_PREREQ(2.59)dnl for _AC_LANG_PREFIX
-AS_VAR_PUSHDEF([CACHEVAR],[ax_cv_check_[]_AC_LANG_ABBREV[]flags_$4_$1])dnl
-AC_CACHE_CHECK([whether _AC_LANG compiler accepts $1], CACHEVAR, [
-  ax_check_save_flags=$[]_AC_LANG_PREFIX[]FLAGS
-  _AC_LANG_PREFIX[]FLAGS="$[]_AC_LANG_PREFIX[]FLAGS $4 $1"
-  AC_COMPILE_IFELSE([m4_default([$5],[AC_LANG_PROGRAM()])],
-    [AS_VAR_SET(CACHEVAR,[yes])],
-    [AS_VAR_SET(CACHEVAR,[no])])
-  _AC_LANG_PREFIX[]FLAGS=$ax_check_save_flags])
-AS_IF([test x"AS_VAR_GET(CACHEVAR)" = xyes],
-  [m4_default([$2], :)],
-  [m4_default([$3], :)])
-AS_VAR_POPDEF([CACHEVAR])dnl
-])dnl AX_CHECK_COMPILE_FLAGS
-
-# adl_RECURSIVE_EVAL(VALUE, RESULT)
-# =================================
-# Interpolate the VALUE in loop until it doesn't change,
-# and set the result to $RESULT.
-# WARNING: It's easy to get an infinite loop with some unsane input.
-# For example ${datadir} becomes ${datarootdir}, and then ${prefix}/share, and
-# finally ${prefix} is replaced by the prefix.
-AC_DEFUN([adl_RECURSIVE_EVAL],
-[_lcl_receval="$1"
-$2=`(test "x$prefix" = xNONE && prefix="$ac_default_prefix"
-     test "x$exec_prefix" = xNONE && exec_prefix="${prefix}"
-     _lcl_receval_old=''
-     while test "[$]_lcl_receval_old" != "[$]_lcl_receval"; do
-       _lcl_receval_old="[$]_lcl_receval"
-       eval _lcl_receval="\"[$]_lcl_receval\""
-     done
-     echo "[$]_lcl_receval")`])

configs/310014.yaml.in

@@ -0,0 +1,315 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 310
+        mnc: 014
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+#    no_mme: true
+#    no_sgwc: true
+#    no_sgwu: true
+#    no_pcrf: true
+#    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  gummei:
+    - plmn_id:
+        mcc: 310
+        mnc: 014
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 310
+        mnc: 014
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 540
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.0.5
+  guami:
+    - plmn_id:
+        mcc: 310
+        mnc: 014
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 310
+        mnc: 014
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 310
+        mnc: 014
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+
+bsf:
+  sbi:
+    server:
+    - address: 127.0.0.15
+      port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/csfb.yaml.in

@@ -0,0 +1,313 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+#    no_mme: true
+#    no_sgwc: true
+#    no_sgwu: true
+#    no_pcrf: true
+#    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  sgsap:
+    server:
+      - address: 127.0.0.2
+        map:
+          tai:
+            plmn_id:
+              mcc: 999
+              mnc: 70
+            tac: 7
+          lai:
+            plmn_id:
+              mcc: 999
+              mnc: 70
+            lac: 2342
+        map:
+          tai:
+            plmn_id:
+              mcc: 724
+              mnc: 21
+            tac: 12345
+          lai:
+            plmn_id:
+              mcc: 724
+              mnc: 21
+            lac: 51544
+  gummei:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      mme_gid: 2
+      mme_code: 1
+    - plmn_id:
+        mcc: 724
+        mnc: 21
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 7
+  tai:
+    - plmn_id:
+        mcc: 724
+        mnc: 21
+      tac: 12345
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 540
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+#    sbi:
+#      server:
+#        - address: 127.0.0.4
+#          port: 7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+  ngap:
+    server:
+      - address: 127.0.0.5
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+
+udm:
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    clinet:
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777

configs/examples/5gc-sepp1-999-70.yaml.in

@@ -0,0 +1,538 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+#    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.1.8
+
+  s1ap:
+    server:
+      - address: 127.0.1.2
+  gtpc:
+    server:
+      - address: 127.0.1.2
+    client:
+      sgwc:
+        - address: 127.0.1.3
+      smf:
+        - address: 127.0.1.4
+  metrics:
+    server:
+      - address: 127.0.1.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.1.3
+  pfcp:
+    server:
+      - address: 127.0.1.3
+    client:
+      sgwu:
+        - address: 127.0.1.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.1.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  pfcp:
+    server:
+      - address: 127.0.1.4
+    client:
+      upf:
+        - address: 127.0.1.7
+  gtpc:
+    server:
+      - address: 127.0.1.4
+  gtpu:
+    server:
+      - address: 127.0.1.4
+  metrics:
+    server:
+      - address: 127.0.1.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.1.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.1.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  ngap:
+    server:
+      - address: 127.0.1.5
+  metrics:
+    server:
+      - address: 127.0.1.5
+        port: 9090
+  access_control:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.1.6
+  gtpu:
+    server:
+      - address: 127.0.1.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.1.7
+  gtpu:
+    server:
+      - address: 127.0.1.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.1.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.1.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.1.4
+
+nrf:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+  sbi:
+    server:
+#      - address: 127.0.1.10
+#        port: 7777
+      - address: nrf.5gc.mnc070.mcc999.3gppnetwork.org
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.1.200
+        port: 7777
+    client:
+      nrf:
+#        - uri: http://127.0.1.10:7777
+        - uri: http://nrf.5gc.mnc070.mcc999.3gppnetwork.org
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @build_configs_dir@/open5gs/tls/sepp1.key
+        cert: @build_configs_dir@/open5gs/tls/sepp1.crt
+      client:
+        cacert: @build_configs_dir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.1.250
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  n32:
+    server:
+      - sender: sepp1.localdomain
+        address: 127.0.1.251
+        port: 7777
+        n32f:
+          address: 127.0.1.252
+          port: 7777
+    client:
+      sepp:
+        - receiver: sepp2.localdomain
+          uri: http://127.0.2.251:7777
+          n32f:
+            uri: http://127.0.2.252:7777
+        - receiver: sepp3.localdomain
+          uri: http://127.0.3.251:7777
+          n32f:
+            uri: http://127.0.3.252:7777
+
+ausf:
+  sbi:
+    server:
+#      - address: 127.0.1.11
+#        port: 7777
+      - address: ausf.5gc.mnc070.mcc999.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+#        - address: 127.0.1.12
+#          port: 7777
+      - address: udm.5gc.mnc070.mcc999.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.1.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  metrics:
+    server:
+      - address: 127.0.1.13
+        port: 9090
+  policy:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.1.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+      nsi:
+        - uri: http://nrf.5gc.mnc070.mcc999.3gppnetwork.org
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.1.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.1.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777

configs/examples/5gc-sepp2-001-01.yaml.in

@@ -0,0 +1,539 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+#    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.2.8
+
+  s1ap:
+    server:
+      - address: 127.0.2.2
+  gtpc:
+    server:
+      - address: 127.0.2.2
+    client:
+      sgwc:
+        - address: 127.0.2.3
+      smf:
+        - address: 127.0.2.4
+  metrics:
+    server:
+      - address: 127.0.2.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.2.3
+  pfcp:
+    server:
+      - address: 127.0.2.3
+    client:
+      sgwu:
+        - address: 127.0.2.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.2.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  pfcp:
+    server:
+      - address: 127.0.2.4
+    client:
+      upf:
+        - address: 127.0.2.7
+  gtpc:
+    server:
+      - address: 127.0.2.4
+  gtpu:
+    server:
+      - address: 127.0.2.4
+  metrics:
+    server:
+      - address: 127.0.2.4
+        port: 9090
+  session:
+    - subnet: 10.46.0.0/16
+      gateway: 10.46.0.1
+    - subnet: 2001:db8:babe::/48
+      gateway: 2001:db8:babe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.2.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.2.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  ngap:
+    server:
+      - address: 127.0.2.5
+  metrics:
+    server:
+      - address: 127.0.2.5
+        port: 9090
+  access_control:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  guami:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.2.6
+  gtpu:
+    server:
+      - address: 127.0.2.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.2.7
+  gtpu:
+    server:
+      - address: 127.0.2.7
+  session:
+    - subnet: 10.46.0.0/16
+      gateway: 10.46.0.1
+      dev: ogstun2
+    - subnet: 2001:db8:babe::/48
+      gateway: 2001:db8:babe::1
+      dev: ogstun2
+  metrics:
+    server:
+      - address: 127.0.2.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.2.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.2.4
+
+nrf:
+  serving:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+  sbi:
+    server:
+#      - address: 127.0.2.10
+#        port: 7777
+      - address: nrf.5gc.mnc001.mcc001.3gppnetwork.org
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.2.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://nrf.5gc.mnc001.mcc001.3gppnetwork.org
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @build_configs_dir@/open5gs/tls/sepp2.key
+        cert: @build_configs_dir@/open5gs/tls/sepp2.crt
+      client:
+        cacert: @build_configs_dir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.2.250
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  n32:
+    server:
+      - sender: sepp2.localdomain
+        address: 127.0.2.251
+        port: 7777
+        n32f:
+          address: 127.0.2.252
+          port: 7777
+    client:
+      sepp:
+        - receiver: sepp1.localdomain
+          uri: http://127.0.1.251:7777
+          n32f:
+            uri: http://127.0.1.252:7777
+        - receiver: sepp3.localdomain
+          uri: http://127.0.3.251:7777
+          n32f:
+            uri: http://127.0.3.252:7777
+
+ausf:
+  sbi:
+    server:
+#      - address: 127.0.2.11
+#        port: 7777
+      - address: ausf.5gc.mnc001.mcc001.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+#        - address: 127.0.2.12
+#          port: 7777
+      - address: udm.5gc.mnc001.mcc001.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.2.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  metrics:
+    server:
+      - address: 127.0.2.13
+        port: 9090
+  policy:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.2.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+      nsi:
+        - uri: http://nrf.5gc.mnc001.mcc001.3gppnetwork.org
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.2.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.2.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777

configs/examples/5gc-sepp3-315-010.yaml.in

@@ -0,0 +1,539 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+#    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.3.8
+
+  s1ap:
+    server:
+      - address: 127.0.3.2
+  gtpc:
+    server:
+      - address: 127.0.3.2
+    client:
+      sgwc:
+        - address: 127.0.3.3
+      smf:
+        - address: 127.0.3.4
+  metrics:
+    server:
+      - address: 127.0.3.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.3.3
+  pfcp:
+    server:
+      - address: 127.0.3.3
+    client:
+      sgwu:
+        - address: 127.0.3.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.3.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  pfcp:
+    server:
+      - address: 127.0.3.4
+    client:
+      upf:
+        - address: 127.0.3.7
+  gtpc:
+    server:
+      - address: 127.0.3.4
+  gtpu:
+    server:
+      - address: 127.0.3.4
+  metrics:
+    server:
+      - address: 127.0.3.4
+        port: 9090
+  session:
+    - subnet: 10.47.0.0/16
+      gateway: 10.47.0.1
+    - subnet: 2001:db8:face::/48
+      gateway: 2001:db8:face::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.3.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.3.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  ngap:
+    server:
+      - address: 127.0.3.5
+  metrics:
+    server:
+      - address: 127.0.3.5
+        port: 9090
+  access_control:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  guami:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.3.6
+  gtpu:
+    server:
+      - address: 127.0.3.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.3.7
+  gtpu:
+    server:
+      - address: 127.0.3.7
+  session:
+    - subnet: 10.47.0.0/16
+      gateway: 10.47.0.1
+      dev: ogstun3
+    - subnet: 2001:db8:face::/48
+      gateway: 2001:db8:face::1
+      dev: ogstun3
+  metrics:
+    server:
+      - address: 127.0.3.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.3.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.3.4
+
+nrf:
+  serving:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  sbi:
+    server:
+#      - address: 127.0.3.10
+#        port: 7777
+      - address: nrf.5gc.mnc010.mcc315.3gppnetwork.org
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.3.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://nrf.5gc.mnc010.mcc315.3gppnetwork.org
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @build_configs_dir@/open5gs/tls/sepp3.key
+        cert: @build_configs_dir@/open5gs/tls/sepp3.crt
+      client:
+        cacert: @build_configs_dir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.3.250
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  n32:
+    server:
+      - sender: sepp3.localdomain
+        address: 127.0.3.251
+        port: 7777
+        n32f:
+          address: 127.0.3.252
+          port: 7777
+    client:
+      sepp:
+        - receiver: sepp1.localdomain
+          uri: http://127.0.1.251:7777
+          n32f:
+            uri: http://127.0.1.252:7777
+        - receiver: sepp2.localdomain
+          uri: http://127.0.2.251:7777
+          n32f:
+            uri: http://127.0.2.252:7777
+
+ausf:
+  sbi:
+    server:
+#      - address: 127.0.3.11
+#        port: 7777
+      - address: ausf.5gc.mnc010.mcc315.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+#      - address: 127.0.3.12
+#        port: 7777
+      - address: udm.5gc.mnc010.mcc315.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.3.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  metrics:
+    server:
+      - address: 127.0.3.13
+        port: 9090
+  policy:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.3.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+      nsi:
+        - uri: http://nrf.5gc.mnc010.mcc315.3gppnetwork.org
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.3.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.3.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777

configs/examples/5gc-tls-sepp1-999-70.yaml.in

@@ -0,0 +1,543 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+#    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+#    use_mongodb_change_stream: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.1.8
+
+  s1ap:
+    server:
+      - address: 127.0.1.2
+  gtpc:
+    server:
+      - address: 127.0.1.2
+    client:
+      sgwc:
+        - address: 127.0.1.3
+      smf:
+        - address: 127.0.1.4
+  metrics:
+    server:
+      - address: 127.0.1.2
+        port: 9090
+  gummei:
+    plmn_id:
+      mcc: 999
+      mnc: 70
+    mme_gid: 2
+    mme_code: 1
+  tai:
+    plmn_id:
+      mcc: 999
+      mnc: 70
+    tac: 1
+  security:
+      integrity_order : [ EIA2, EIA1, EIA0 ]
+      ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+      full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.1.3
+  pfcp:
+    server:
+      - address: 127.0.1.3
+    client:
+      sgwu:
+        - address: 127.0.1.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.1.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  pfcp:
+    server:
+      - address: 127.0.1.4
+    client:
+      upf:
+        - address: 127.0.1.7
+  gtpc:
+    server:
+      - address: 127.0.1.4
+  gtpu:
+    server:
+      - address: 127.0.1.4
+  metrics:
+    server:
+      - address: 127.0.1.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.1.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.1.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  ngap:
+    server:
+      - address: 127.0.1.5
+  metrics:
+    server:
+      - address: 127.0.1.5
+        port: 9090
+  access_control:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+      integrity_order : [ NIA2, NIA1, NIA0 ]
+      ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+      full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.1.6
+  gtpu:
+    server:
+      - address: 127.0.1.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.1.7
+  gtpu:
+    server:
+      - address: 127.0.1.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.1.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.1.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.1.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.1.4
+
+nrf:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+  sbi:
+    server:
+#      - address: 127.0.1.10
+#        port: 7777
+      - address: nrf.5gc.mnc070.mcc999.3gppnetwork.org
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.1.200
+        port: 7777
+    client:
+      nrf:
+#        - uri: http://127.0.1.10:7777
+        - uri: http://nrf.5gc.mnc070.mcc999.3gppnetwork.org
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @build_configs_dir@/open5gs/tls/sepp1.key
+        cert: @build_configs_dir@/open5gs/tls/sepp1.crt
+      client:
+        cacert: @build_configs_dir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.1.250
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  n32:
+    server:
+      - sender: sepp1.localdomain
+        scheme: https
+        address: 127.0.1.251
+        n32f:
+          scheme: https
+          address: 127.0.1.252
+    client:
+      sepp:
+        - receiver: sepp2.localdomain
+          uri: https://sepp2.localdomain
+          resolve: 127.0.2.251
+          n32f:
+            uri: https://sepp2.localdomain
+            resolve: 127.0.2.252
+        - receiver: sepp3.localdomain
+          uri: https://sepp3.localdomain
+          resolve: 127.0.3.251
+          n32f:
+            uri: https://sepp3.localdomain
+            resolve: 127.0.3.252
+
+ausf:
+  sbi:
+    server:
+#      - address: 127.0.1.11
+#        port: 7777
+      - address: ausf.5gc.mnc070.mcc999.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+#      - address: 127.0.1.12
+#        port: 7777
+      - address: udm.5gc.mnc070.mcc999.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.1.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+  metrics:
+    server:
+      - address: 127.0.1.13
+        port: 9090
+  policy:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.1.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+      nsi:
+        - uri: http://127.0.1.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.1.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.1.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.1.200:7777

configs/examples/5gc-tls-sepp2-001-01.yaml.in

@@ -0,0 +1,544 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+#    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+#    use_mongodb_change_stream: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.2.8
+
+  s1ap:
+    server:
+      - address: 127.0.2.2
+  gtpc:
+    server:
+      - address: 127.0.2.2
+    client:
+      sgwc:
+        - address: 127.0.2.3
+      smf:
+        - address: 127.0.2.4
+  metrics:
+    server:
+      - address: 127.0.2.2
+        port: 9090
+  gummei:
+    plmn_id:
+      mcc: 001
+      mnc: 01
+    mme_gid: 2
+    mme_code: 1
+  tai:
+    plmn_id:
+      mcc: 001
+      mnc: 01
+    tac: 1
+  security:
+      integrity_order : [ EIA2, EIA1, EIA0 ]
+      ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+      full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.2.3
+  pfcp:
+    server:
+      - address: 127.0.2.3
+    client:
+      sgwu:
+        - address: 127.0.2.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.2.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  pfcp:
+    server:
+      - address: 127.0.2.4
+    client:
+      upf:
+        - address: 127.0.2.7
+  gtpc:
+    server:
+      - address: 127.0.2.4
+  gtpu:
+    server:
+      - address: 127.0.2.4
+  metrics:
+    server:
+      - address: 127.0.2.4
+        port: 9090
+  session:
+    - subnet: 10.46.0.0/16
+      gateway: 10.46.0.1
+    - subnet: 2001:db8:babe::/48
+      gateway: 2001:db8:babe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.2.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.2.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  ngap:
+    server:
+      - address: 127.0.2.5
+  metrics:
+    server:
+      - address: 127.0.2.5
+        port: 9090
+  access_control:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  guami:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      s_nssai:
+        - sst: 1
+  security:
+      integrity_order : [ NIA2, NIA1, NIA0 ]
+      ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+      full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.2.6
+  gtpu:
+    server:
+      - address: 127.0.2.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.2.7
+  gtpu:
+    server:
+      - address: 127.0.2.7
+  session:
+    - subnet: 10.46.0.0/16
+      gateway: 10.46.0.1
+      dev: ogstun2
+    - subnet: 2001:db8:babe::/48
+      gateway: 2001:db8:babe::1
+      dev: ogstun2
+  metrics:
+    server:
+      - address: 127.0.2.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.2.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.2.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.2.4
+
+nrf:
+  serving:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+  sbi:
+    server:
+#      - address: 127.0.2.10
+#        port: 7777
+      - address: nrf.5gc.mnc001.mcc001.3gppnetwork.org
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.2.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://nrf.5gc.mnc001.mcc001.3gppnetwork.org
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @build_configs_dir@/open5gs/tls/sepp2.key
+        cert: @build_configs_dir@/open5gs/tls/sepp2.crt
+      client:
+        cacert: @build_configs_dir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.2.250
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  n32:
+    server:
+      - sender: sepp2.localdomain
+        scheme: https
+        address: 127.0.2.251
+        n32f:
+          scheme: https
+          address: 127.0.2.252
+    client:
+      sepp:
+        - receiver: sepp1.localdomain
+          uri: https://sepp1.localdomain
+          resolve: 127.0.1.251
+          n32f:
+            uri: https://sepp1.localdomain
+            resolve: 127.0.1.252
+        - receiver: sepp3.localdomain
+          uri: https://sepp3.localdomain
+          resolve: 127.0.3.251
+          n32f:
+            uri: https://sepp3.localdomain
+            resolve: 127.0.3.252
+
+ausf:
+  sbi:
+    server:
+#      - address: 127.0.2.11
+#        port: 7777
+      - address: ausf.5gc.mnc001.mcc001.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+#      - address: 127.0.2.12
+#        port: 7777
+      - address: udm.5gc.mnc001.mcc001.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.2.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+  metrics:
+    server:
+      - address: 127.0.2.13
+        port: 9090
+  policy:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.2.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+      nsi:
+        - uri: http://127.0.2.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.2.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.2.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.2.200:7777

configs/examples/5gc-tls-sepp3-315-010.yaml.in

@@ -0,0 +1,544 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+#    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+#    use_mongodb_change_stream: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.3.8
+
+  s1ap:
+    server:
+      - address: 127.0.3.2
+  gtpc:
+    server:
+      - address: 127.0.3.2
+    client:
+      sgwc:
+        - address: 127.0.3.3
+      smf:
+        - address: 127.0.3.4
+  metrics:
+    server:
+      - address: 127.0.3.2
+        port: 9090
+  gummei:
+    plmn_id:
+      mcc: 315
+      mnc: 010
+    mme_gid: 2
+    mme_code: 1
+  tai:
+    plmn_id:
+      mcc: 315
+      mnc: 010
+    tac: 1
+  security:
+      integrity_order : [ EIA2, EIA1, EIA0 ]
+      ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+      full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.3.3
+  pfcp:
+    server:
+      - address: 127.0.3.3
+    client:
+      sgwu:
+        - address: 127.0.3.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.3.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  pfcp:
+    server:
+      - address: 127.0.3.4
+    client:
+      upf:
+        - address: 127.0.3.7
+  gtpc:
+    server:
+      - address: 127.0.3.4
+  gtpu:
+    server:
+      - address: 127.0.3.4
+  metrics:
+    server:
+      - address: 127.0.3.4
+        port: 9090
+  session:
+    - subnet: 10.47.0.0/16
+      gateway: 10.47.0.1
+    - subnet: 2001:db8:face::/48
+      gateway: 2001:db8:face::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.3.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.3.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  ngap:
+    server:
+      - address: 127.0.3.5
+  metrics:
+    server:
+      - address: 127.0.3.5
+        port: 9090
+  access_control:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  guami:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      s_nssai:
+        - sst: 1
+  security:
+      integrity_order : [ NIA2, NIA1, NIA0 ]
+      ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+      full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.3.6
+  gtpu:
+    server:
+      - address: 127.0.3.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.3.7
+  gtpu:
+    server:
+      - address: 127.0.3.7
+  session:
+    - subnet: 10.47.0.0/16
+      gateway: 10.47.0.1
+      dev: ogstun3
+    - subnet: 2001:db8:face::/48
+      gateway: 2001:db8:face::1
+      dev: ogstun3
+  metrics:
+    server:
+      - address: 127.0.3.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.3.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.3.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.3.4
+
+nrf:
+  serving:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+  sbi:
+    server:
+#      - address: 127.0.3.10
+#        port: 7777
+      - address: nrf.5gc.mnc010.mcc315.3gppnetwork.org
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.3.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://nrf.5gc.mnc010.mcc315.3gppnetwork.org
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @build_configs_dir@/open5gs/tls/sepp3.key
+        cert: @build_configs_dir@/open5gs/tls/sepp3.crt
+      client:
+        cacert: @build_configs_dir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.3.250
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  n32:
+    server:
+      - sender: sepp3.localdomain
+        scheme: https
+        address: 127.0.3.251
+        n32f:
+          scheme: https
+          address: 127.0.3.252
+    client:
+      sepp:
+        - receiver: sepp1.localdomain
+          uri: https://sepp1.localdomain
+          resolve: 127.0.1.251
+          n32f:
+            uri: https://sepp1.localdomain
+            resolve: 127.0.1.252
+        - receiver: sepp2.localdomain
+          uri: https://sepp2.localdomain
+          resolve: 127.0.2.251
+          n32f:
+            uri: https://sepp2.localdomain
+            resolve: 127.0.2.252
+
+ausf:
+  sbi:
+    server:
+#      - address: 127.0.3.11
+#        port: 7777
+      - address: ausf.5gc.mnc010.mcc315.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+#      - address: 127.0.3.12
+#        port: 7777
+      - address: udm.5gc.mnc010.mcc315.3gppnetwork.org
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.3.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+  metrics:
+    server:
+      - address: 127.0.3.13
+        port: 9090
+  policy:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      slice:
+        - sst: 1  # 1,2,3,4
+          default_indicator: true
+          session:
+            - name: internet
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3
+              qos:
+                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+            - name: ims
+              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+              ambr:
+                downlink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                uplink:
+                  value: 1
+                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+              qos:
+                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                arp:
+                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+              pcc_rule:
+                - qos:
+                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 82
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                - qos:
+                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+                    arp:
+                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+                    mbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                    gbr:
+                      downlink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+                      uplink:
+                        value: 802
+                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.3.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+      nsi:
+        - uri: http://127.0.3.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.3.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.3.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.3.200:7777

configs/examples/gnb-001-01-ue-001-01.yaml.in

@@ -0,0 +1,335 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.2.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-001-01-ue-315-010.yaml.in

@@ -0,0 +1,335 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.2.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-001-01-ue-999-70.yaml.in

@@ -0,0 +1,330 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    plmn_id:
+      mcc: 001
+      mnc: 01
+    mme_gid: 2
+    mme_code: 1
+  tai:
+    plmn_id:
+      mcc: 001
+      mnc: 01
+    tac: 1
+  security:
+      integrity_order : [ EIA2, EIA1, EIA0 ]
+      ciphering_order : [ EEA0, EEA1, EEA2 ]
+
+  network_name:
+      full: Open5GS
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.2.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+      s_nssai:
+        - sst: 1
+  security:
+      integrity_order : [ NIA2, NIA1, NIA0 ]
+      ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+      full: Open5GS
+  amf_name: open5gs-amf0
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-315-010-ue-001-01.yaml.in

@@ -0,0 +1,335 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.3.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-315-010-ue-315-010.yaml.in

@@ -0,0 +1,330 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    plmn_id:
+      mcc: 315
+      mnc: 010
+    mme_gid: 2
+    mme_code: 1
+  tai:
+    plmn_id:
+      mcc: 315
+      mnc: 010
+    tac: 1
+  security:
+      integrity_order : [ EIA2, EIA1, EIA0 ]
+      ciphering_order : [ EEA0, EEA1, EEA2 ]
+
+  network_name:
+      full: Open5GS
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.3.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      s_nssai:
+        - sst: 1
+  security:
+      integrity_order : [ NIA2, NIA1, NIA0 ]
+      ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+      full: Open5GS
+  amf_name: open5gs-amf0
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+    sbi:
+      server:
+        - address: 127.0.0.15
+          port: 7777
+      client:
+        scp:
+          - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-315-010-ue-999-70.yaml.in

@@ -0,0 +1,335 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.3.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-999-70-ue-001-01.yaml.in

@@ -0,0 +1,335 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 001
+        mnc: 01
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.1.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+          - uri: http://127.0.0.10:7777
+            s_nssai:
+              sst: 1
+bsf:
+    sbi:
+      server:
+        - address: 127.0.0.15
+          port: 7777
+      client:
+        scp:
+          - uri: http://127.0.0.200:7777
+
+udr:
+    sbi:
+      server:
+        - address: 127.0.0.20
+          port: 7777
+      client:
+        scp:
+          - uri: http://127.0.0.200:7777

configs/examples/gnb-999-70-ue-315-010.yaml.in

@@ -0,0 +1,335 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 315
+        mnc: 010
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 3240
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.1.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/gnb-999-70-ue-999-70.yaml.in

@@ -0,0 +1,330 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+
+global:
+  parameter:
+    no_nrf: true
+    no_scp: true
+    no_sepp: true
+    no_amf: true
+    no_smf: true
+    no_upf: true
+    no_ausf: true
+    no_udm: true
+    no_pcf: true
+    no_nssf: true
+    no_bsf: true
+    no_udr: true
+    no_mme: true
+    no_sgwc: true
+    no_sgwu: true
+    no_pcrf: true
+    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    plmn_id:
+      mcc: 999
+      mnc: 70
+    mme_gid: 2
+    mme_code: 1
+  tai:
+    plmn_id:
+      mcc: 999
+      mnc: 70
+    tac: 1
+  security:
+      integrity_order : [ EIA2, EIA1, EIA0 ]
+      ciphering_order : [ EEA0, EEA1, EEA2 ]
+
+  network_name:
+      full: Open5GS
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.1.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+      integrity_order : [ NIA2, NIA1, NIA0 ]
+      ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+      full: Open5GS
+  amf_name: open5gs-amf0
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udm:
+  hnet:
+    - id: 1
+      scheme: 1
+      key: @build_configs_dir@/open5gs/hnet/curve25519-1.key
+    - id: 2
+      scheme: 2
+      key: @build_configs_dir@/open5gs/hnet/secp256r1-2.key
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      scp:
+        - uri: http://127.0.0.200:7777

configs/examples/meson.build

@@ -0,0 +1,41 @@
+# Copyright (C) 2023 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+examples_conf = '''
+    5gc-sepp1-999-70.yaml
+    5gc-sepp2-001-01.yaml
+    5gc-sepp3-315-010.yaml
+    5gc-tls-sepp1-999-70.yaml
+    5gc-tls-sepp2-001-01.yaml
+    5gc-tls-sepp3-315-010.yaml
+    gnb-999-70-ue-999-70.yaml
+    gnb-999-70-ue-001-01.yaml
+    gnb-999-70-ue-315-010.yaml
+    gnb-001-01-ue-999-70.yaml
+    gnb-001-01-ue-001-01.yaml
+    gnb-001-01-ue-315-010.yaml
+    gnb-315-010-ue-999-70.yaml
+    gnb-315-010-ue-001-01.yaml
+    gnb-315-010-ue-315-010.yaml
+'''.split()
+
+foreach file : examples_conf
+    gen = configure_file(
+            input : file + '.in',
+            output : file,
+            configuration : conf_data)
+endforeach

configs/freeDiameter/hss.conf.in

@@ -0,0 +1,266 @@
+# This is a sample configuration file for freeDiameter daemon.
+
+# Most of the options can be omitted, as they default to reasonable values.
+# Only TLS-related options must be configured properly in usual setups.
+
+# It is possible to use "include" keyword to import additional files
+# e.g.: include "/etc/freeDiameter.d/*.conf"
+# This is exactly equivalent as copy & paste the content of the included file(s) 
+# where the "include" keyword is found.
+
+
+##############################################################
+##  Peer identity and realm 
+
+# The Diameter Identity of this daemon.
+# This must be a valid FQDN that resolves to the local host.
+# Default: hostname's FQDN
+#Identity = "aaa.koganei.freediameter.net";
+Identity = "hss.localdomain";
+
+# The Diameter Realm of this daemon.
+# Default: the domain part of Identity (after the first dot).
+#Realm = "koganei.freediameter.net";
+Realm = "localdomain";
+
+##############################################################
+##  Transport protocol configuration
+
+# The port this peer is listening on for incoming connections (TCP and SCTP).
+# Default: 3868. Use 0 to disable.
+#Port = 3868;
+
+# The port this peer is listening on for incoming TLS-protected connections (TCP and SCTP).
+# See TLS_old_method for more information about TLS flavours.
+# Note: we use TLS/SCTP instead of DTLS/SCTP at the moment. This will change in future version of freeDiameter.
+# Default: 5868. Use 0 to disable.
+#SecPort = 5868;
+
+# Use RFC3588 method for TLS protection, where TLS is negociated after CER/CEA exchange is completed 
+# on the unsecure connection. The alternative is RFC6733 mechanism, where TLS protects also the 
+# CER/CEA exchange on a dedicated secure port.
+# This parameter only affects outgoing connections. 
+# The setting can be also defined per-peer (see Peers configuration section).
+# Default: use RFC6733 method with separate port for TLS.
+#TLS_old_method;
+
+# Disable use of TCP protocol (only listen and connect over SCTP)
+# Default : TCP enabled
+#No_TCP;
+
+# Disable use of SCTP protocol (only listen and connect over TCP)
+# Default : SCTP enabled
+#No_SCTP;
+# This option is ignored if freeDiameter is compiled with DISABLE_SCTP option.
+
+# Prefer TCP instead of SCTP for establishing new connections.
+# This setting may be overwritten per peer in peer configuration blocs.
+# Default : SCTP is attempted first.
+#Prefer_TCP;
+
+# Default number of streams per SCTP associations.
+# This setting may be overwritten per peer basis.
+# Default : 30 streams
+#SCTP_streams = 30;
+
+##############################################################
+##  Endpoint configuration
+
+# Disable use of IP addresses (only IPv6)
+# Default : IP enabled
+#No_IP;
+
+# Disable use of IPv6 addresses (only IP)
+# Default : IPv6 enabled
+#No_IPv6;
+
+# Specify local addresses the server must bind to
+# Default : listen on all addresses available.
+#ListenOn = "202.249.37.5";
+#ListenOn = "2001:200:903:2::202:1";
+#ListenOn = "fe80::21c:5ff:fe98:7d62%eth0";
+ListenOn = "127.0.0.8";
+
+
+##############################################################
+##  Server configuration
+
+# How many Diameter peers are allowed to be connecting at the same time ?
+# This parameter limits the number of incoming connections from the time
+# the connection is accepted until the first CER is received.
+# Default: 5 unidentified clients in paralel.
+#ThreadsPerServer = 5;
+
+##############################################################
+##  TLS Configuration
+
+# TLS is managed by the GNUTLS library in the freeDiameter daemon.
+# You may find more information about parameters and special behaviors
+# in the relevant documentation.
+# http://www.gnu.org/software/gnutls/manual/
+
+# Credentials of the local peer
+# The X509 certificate and private key file to use for the local peer.
+# The files must contain PKCS-1 encoded RSA key, in PEM format.
+# (These parameters are passed to gnutls_certificate_set_x509_key_file function)
+# Default : NO DEFAULT
+#TLS_Cred = "<x509 certif file.PEM>" , "<x509 private key file.PEM>";
+#TLS_Cred = "/etc/ssl/certs/freeDiameter.pem", "/etc/ssl/private/freeDiameter.key";
+TLS_Cred = "@sysconfdir@/open5gs/tls/hss.crt", "@sysconfdir@/open5gs/tls/hss.key";
+
+# Certificate authority / trust anchors
+# The file containing the list of trusted Certificate Authorities (PEM list)
+# (This parameter is passed to gnutls_certificate_set_x509_trust_file function)
+# The directive can appear several times to specify several files.
+# Default : GNUTLS default behavior
+#TLS_CA = "<file.PEM>";
+TLS_CA = "@sysconfdir@/open5gs/tls/ca.crt";
+
+# Certificate Revocation List file
+# The information about revoked certificates.
+# The file contains a list of trusted CRLs in PEM format. They should have been verified before. 
+# (This parameter is passed to gnutls_certificate_set_x509_crl_file function)
+# Note: openssl CRL format might have interoperability issue with GNUTLS format.
+# Default : GNUTLS default behavior
+#TLS_CRL = "<file.PEM>";
+
+# GNU TLS Priority string
+# This string allows to configure the behavior of GNUTLS key exchanges 
+# algorithms. See gnutls_priority_init function documentation for information.
+# You should also refer to the Diameter required TLS support here:
+#   http://tools.ietf.org/html/rfc6733#section-13.1
+# Default : "NORMAL"
+# Example: TLS_Prio = "NONE:+VERS-TLS1.1:+AES-128-CBC:+RSA:+SHA1:+COMP-NULL";
+#TLS_Prio = "NORMAL";
+
+# Diffie-Hellman parameters size
+# Set the number of bits for generated DH parameters
+# Valid value should be 768, 1024, 2048, 3072 or 4096.
+# (This parameter is passed to gnutls_dh_params_generate2 function, 
+# it usually should match RSA key size)
+# Default : 1024
+#TLS_DH_Bits = 1024;
+
+# Alternatively, you can specify a file to load the PKCS#3 encoded
+# DH parameters directly from. This accelerates the daemon start 
+# but is slightly less secure. If this file is provided, the
+# TLS_DH_Bits parameters has no effect.
+# Default : no default.
+#TLS_DH_File = "<file.PEM>";
+
+
+##############################################################
+##  Timers configuration
+
+# The Tc timer of this peer.
+# It is the delay before a new attempt is made to reconnect a disconnected peer.
+# The value is expressed in seconds. The recommended value is 30 seconds.
+# Default: 30
+#TcTimer = 30;
+
+# The Tw timer of this peer.
+# It is the delay before a watchdog message is sent, as described in RFC 3539.
+# The value is expressed in seconds. The default value is 30 seconds. Value must
+# be greater or equal to 6 seconds. See details in the RFC.
+# Default: 30
+#TwTimer = 30;
+
+##############################################################
+##  Applications configuration
+
+# Disable the relaying of Diameter messages?
+# For messages not handled locally, the default behavior is to forward the
+# message to another peer if any is available, according to the routing 
+# algorithms. In addition the "0xffffff" application is advertised in CER/CEA 
+# exchanges.
+# Default: Relaying is enabled.
+#NoRelay;
+NoRelay;
+
+# Number of server threads that can handle incoming messages at the same time.
+# Default: 4
+#AppServThreads = 4;
+
+# Other applications are configured by loaded extensions.
+
+##############################################################
+##  Extensions configuration
+
+#  The freeDiameter framework merely provides support for
+# Diameter Base Protocol. The specific application behaviors,
+# as well as advanced functions, are provided
+# by loadable extensions (plug-ins).
+#  These extensions may in addition receive the name of a 
+# configuration file, the format of which is extension-specific.
+#
+# Format:
+#LoadExtension = "/path/to/extension" [ : "/optional/configuration/file" ] ;
+#
+# Examples:
+#LoadExtension = "extensions/sample.fdx";
+#LoadExtension = "extensions/sample.fdx":"conf/sample.conf";
+
+# Extensions are named as follow:
+# dict_* for extensions that add content to the dictionary definitions.
+# dbg_*  for extensions useful only to retrieve more information on the framework execution.
+# acl_*  : Access control list, to control which peers are allowed to connect.
+# rt_*   : routing extensions that impact how messages are forwarded to other peers.
+# app_*  : applications, these extensions usually register callbacks to handle specific messages.
+# test_* : dummy extensions that are useful only in testing environments.
+
+
+# The dbg_msg_dump.fdx extension allows you to tweak the way freeDiameter displays some
+# information about some events. This extension does not actually use a configuration file
+# but receives directly a parameter in the string passed to the extension. Here are some examples:
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x1111"; # Removes all default hooks, very quiet even in case of errors.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x2222"; # Display all events with few details.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x0080"; # Dump complete information about sent and received messages.
+# The four digits respectively control: connections, routing decisions, sent/received messages, errors.
+# The values for each digit are:
+#  0 - default - keep the default behavior
+#  1 - quiet   - remove any specific log
+#  2 - compact - display only a summary of the information
+#  4 - full    - display the complete information on a single long line
+#  8 - tree    - display the complete information in an easier to read format spanning several lines.
+
+LoadExtension = "@libdir@/freeDiameter/dbg_msg_dumps.fdx" : "0x8888";
+LoadExtension = "@libdir@/freeDiameter/dict_rfc5777.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_mip6i.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nasreq.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nas_mipv6.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca_3gpp.fdx";
+
+
+##############################################################
+##  Peers configuration
+
+#  The local server listens for incoming connections. By default,
+# all unknown connecting peers are rejected. Extensions can override this behavior (e.g., acl_wl).
+# 
+#  In addition to incoming connections, the local peer can
+# be configured to establish and maintain connections to some 
+# Diameter nodes and allow connections from these nodes.
+#  This is achieved with the ConnectPeer directive described below.
+#
+# Note that the configured Diameter Identity MUST match
+# the information received inside CEA, or the connection will be aborted.
+#
+# Format:
+#ConnectPeer = "diameterid" [ { parameter1; parameter2; ...} ] ;
+# Parameters that can be specified in the peer's parameter list:
+#  No_TCP; No_SCTP; No_IP; No_IPv6; Prefer_TCP; TLS_old_method;
+#  No_TLS;       # assume transparent security instead of TLS. DTLS is not supported yet (will change in future versions).
+#  Port = 5868;  # The port to connect to
+#  TcTimer = 30;
+#  TwTimer = 30;
+#  ConnectTo = "202.249.37.5";
+#  ConnectTo = "2001:200:903:2::202:1";
+#  TLS_Prio = "NORMAL";
+#  Realm = "realm.net"; # Reject the peer if it does not advertise this realm.
+# Examples:
+#ConnectPeer = "aaa.wide.ad.jp";
+#ConnectPeer = "old.diameter.serv" { TcTimer = 60; TLS_old_method; No_SCTP; Port=3868; } ;
+ConnectPeer = "mme.localdomain" { ConnectTo = "127.0.0.2"; No_TLS; };
+
+##############################################################

configs/freeDiameter/meson.build

@@ -0,0 +1,36 @@
+# Copyright (C) 2019 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+freediameter_sysconfdir = join_paths(sysconfdir, 'freeDiameter')
+meson.add_install_script(python3_exe, '-c',
+        mkdir_p.format(freediameter_sysconfdir))
+
+freediameter_conf = '''
+    mme.conf
+    hss.conf
+    smf.conf
+    pcrf.conf
+'''.split()
+
+foreach file : freediameter_conf
+    gen = configure_file(
+            input : file + '.in',
+            output : file,
+            configuration : conf_data)
+    meson.add_install_script(python3_exe, '-c',
+            install_conf.format(gen, freediameter_sysconfdir))
+endforeach

configs/freeDiameter/mme.conf.in

@@ -0,0 +1,267 @@
+# This is a sample configuration file for freeDiameter daemon.
+
+# Most of the options can be omitted, as they default to reasonable values.
+# Only TLS-related options must be configured properly in usual setups.
+
+# It is possible to use "include" keyword to import additional files
+# e.g.: include "/etc/freeDiameter.d/*.conf"
+# This is exactly equivalent as copy & paste the content of the included file(s) 
+# where the "include" keyword is found.
+
+
+##############################################################
+##  Peer identity and realm 
+
+# The Diameter Identity of this daemon.
+# This must be a valid FQDN that resolves to the local host.
+# Default: hostname's FQDN
+#Identity = "aaa.koganei.freediameter.net";
+Identity = "mme.localdomain";
+
+# The Diameter Realm of this daemon.
+# Default: the domain part of Identity (after the first dot).
+#Realm = "koganei.freediameter.net";
+Realm = "localdomain";
+
+##############################################################
+##  Transport protocol configuration
+
+# The port this peer is listening on for incoming connections (TCP and SCTP).
+# Default: 3868. Use 0 to disable.
+#Port = 3868;
+
+# The port this peer is listening on for incoming TLS-protected connections (TCP and SCTP).
+# See TLS_old_method for more information about TLS flavours.
+# Note: we use TLS/SCTP instead of DTLS/SCTP at the moment. This will change in future version of freeDiameter.
+# Default: 5868. Use 0 to disable.
+#SecPort = 5868;
+
+# Use RFC3588 method for TLS protection, where TLS is negociated after CER/CEA exchange is completed 
+# on the unsecure connection. The alternative is RFC6733 mechanism, where TLS protects also the 
+# CER/CEA exchange on a dedicated secure port.
+# This parameter only affects outgoing connections. 
+# The setting can be also defined per-peer (see Peers configuration section).
+# Default: use RFC6733 method with separate port for TLS.
+#TLS_old_method;
+
+# Disable use of TCP protocol (only listen and connect over SCTP)
+# Default : TCP enabled
+#No_TCP;
+
+# Disable use of SCTP protocol (only listen and connect over TCP)
+# Default : SCTP enabled
+#No_SCTP;
+# This option is ignored if freeDiameter is compiled with DISABLE_SCTP option.
+
+# Prefer TCP instead of SCTP for establishing new connections.
+# This setting may be overwritten per peer in peer configuration blocs.
+# Default : SCTP is attempted first.
+#Prefer_TCP;
+
+# Default number of streams per SCTP associations.
+# This setting may be overwritten per peer basis.
+# Default : 30 streams
+#SCTP_streams = 30;
+
+##############################################################
+##  Endpoint configuration
+
+# Disable use of IP addresses (only IPv6)
+# Default : IP enabled
+#No_IP;
+
+# Disable use of IPv6 addresses (only IP)
+# Default : IPv6 enabled
+#No_IPv6;
+
+# Specify local addresses the server must bind to
+# Default : listen on all addresses available.
+#ListenOn = "202.249.37.5";
+#ListenOn = "2001:200:903:2::202:1";
+#ListenOn = "fe80::21c:5ff:fe98:7d62%eth0";
+ListenOn = "127.0.0.2";
+
+
+##############################################################
+##  Server configuration
+
+# How many Diameter peers are allowed to be connecting at the same time ?
+# This parameter limits the number of incoming connections from the time
+# the connection is accepted until the first CER is received.
+# Default: 5 unidentified clients in paralel.
+#ThreadsPerServer = 5;
+
+##############################################################
+##  TLS Configuration
+
+# TLS is managed by the GNUTLS library in the freeDiameter daemon.
+# You may find more information about parameters and special behaviors
+# in the relevant documentation.
+# http://www.gnu.org/software/gnutls/manual/
+
+# Credentials of the local peer
+# The X509 certificate and private key file to use for the local peer.
+# The files must contain PKCS-1 encoded RSA key, in PEM format.
+# (These parameters are passed to gnutls_certificate_set_x509_key_file function)
+# Default : NO DEFAULT
+#TLS_Cred = "<x509 certif file.PEM>" , "<x509 private key file.PEM>";
+#TLS_Cred = "/etc/ssl/certs/freeDiameter.pem", "/etc/ssl/private/freeDiameter.key";
+TLS_Cred = "@sysconfdir@/open5gs/tls/mme.crt", "@sysconfdir@/open5gs/tls/mme.key";
+
+# Certificate authority / trust anchors
+# The file containing the list of trusted Certificate Authorities (PEM list)
+# (This parameter is passed to gnutls_certificate_set_x509_trust_file function)
+# The directive can appear several times to specify several files.
+# Default : GNUTLS default behavior
+#TLS_CA = "<file.PEM>";
+TLS_CA = "@sysconfdir@/open5gs/tls/ca.crt";
+
+# Certificate Revocation List file
+# The information about revoked certificates.
+# The file contains a list of trusted CRLs in PEM format. They should have been verified before. 
+# (This parameter is passed to gnutls_certificate_set_x509_crl_file function)
+# Note: openssl CRL format might have interoperability issue with GNUTLS format.
+# Default : GNUTLS default behavior
+#TLS_CRL = "<file.PEM>";
+
+# GNU TLS Priority string
+# This string allows to configure the behavior of GNUTLS key exchanges 
+# algorithms. See gnutls_priority_init function documentation for information.
+# You should also refer to the Diameter required TLS support here:
+#   http://tools.ietf.org/html/rfc6733#section-13.1
+# Default : "NORMAL"
+# Example: TLS_Prio = "NONE:+VERS-TLS1.1:+AES-128-CBC:+RSA:+SHA1:+COMP-NULL";
+#TLS_Prio = "NORMAL";
+
+# Diffie-Hellman parameters size
+# Set the number of bits for generated DH parameters
+# Valid value should be 768, 1024, 2048, 3072 or 4096.
+# (This parameter is passed to gnutls_dh_params_generate2 function, 
+# it usually should match RSA key size)
+# Default : 1024
+#TLS_DH_Bits = 1024;
+
+# Alternatively, you can specify a file to load the PKCS#3 encoded
+# DH parameters directly from. This accelerates the daemon start 
+# but is slightly less secure. If this file is provided, the
+# TLS_DH_Bits parameters has no effect.
+# Default : no default.
+#TLS_DH_File = "<file.PEM>";
+
+
+##############################################################
+##  Timers configuration
+
+# The Tc timer of this peer.
+# It is the delay before a new attempt is made to reconnect a disconnected peer.
+# The value is expressed in seconds. The recommended value is 30 seconds.
+# Default: 30
+#TcTimer = 30;
+
+# The Tw timer of this peer.
+# It is the delay before a watchdog message is sent, as described in RFC 3539.
+# The value is expressed in seconds. The default value is 30 seconds. Value must
+# be greater or equal to 6 seconds. See details in the RFC.
+# Default: 30
+#TwTimer = 30;
+
+##############################################################
+##  Applications configuration
+
+# Disable the relaying of Diameter messages?
+# For messages not handled locally, the default behavior is to forward the
+# message to another peer if any is available, according to the routing 
+# algorithms. In addition the "0xffffff" application is advertised in CER/CEA 
+# exchanges.
+# Default: Relaying is enabled.
+#NoRelay;
+NoRelay;
+
+# Number of server threads that can handle incoming messages at the same time.
+# Default: 4
+#AppServThreads = 4;
+
+# Other applications are configured by loaded extensions.
+
+##############################################################
+##  Extensions configuration
+
+#  The freeDiameter framework merely provides support for
+# Diameter Base Protocol. The specific application behaviors,
+# as well as advanced functions, are provided
+# by loadable extensions (plug-ins).
+#  These extensions may in addition receive the name of a 
+# configuration file, the format of which is extension-specific.
+#
+# Format:
+#LoadExtension = "/path/to/extension" [ : "/optional/configuration/file" ] ;
+#
+# Examples:
+#LoadExtension = "extensions/sample.fdx";
+#LoadExtension = "extensions/sample.fdx":"conf/sample.conf";
+
+# Extensions are named as follow:
+# dict_* for extensions that add content to the dictionary definitions.
+# dbg_*  for extensions useful only to retrieve more information on the framework execution.
+# acl_*  : Access control list, to control which peers are allowed to connect.
+# rt_*   : routing extensions that impact how messages are forwarded to other peers.
+# app_*  : applications, these extensions usually register callbacks to handle specific messages.
+# test_* : dummy extensions that are useful only in testing environments.
+
+
+# The dbg_msg_dump.fdx extension allows you to tweak the way freeDiameter displays some
+# information about some events. This extension does not actually use a configuration file
+# but receives directly a parameter in the string passed to the extension. Here are some examples:
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x1111"; # Removes all default hooks, very quiet even in case of errors.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x2222"; # Display all events with few details.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x0080"; # Dump complete information about sent and received messages.
+# The four digits respectively control: connections, routing decisions, sent/received messages, errors.
+# The values for each digit are:
+#  0 - default - keep the default behavior
+#  1 - quiet   - remove any specific log
+#  2 - compact - display only a summary of the information
+#  4 - full    - display the complete information on a single long line
+#  8 - tree    - display the complete information in an easier to read format spanning several lines.
+
+LoadExtension = "@libdir@/freeDiameter/dbg_msg_dumps.fdx" : "0x8888";
+LoadExtension = "@libdir@/freeDiameter/dict_rfc5777.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_mip6i.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nasreq.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nas_mipv6.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca_3gpp.fdx";
+
+
+##############################################################
+##  Peers configuration
+
+#  The local server listens for incoming connections. By default,
+# all unknown connecting peers are rejected. Extensions can override this behavior (e.g., acl_wl).
+# 
+#  In addition to incoming connections, the local peer can
+# be configured to establish and maintain connections to some 
+# Diameter nodes and allow connections from these nodes.
+#  This is achieved with the ConnectPeer directive described below.
+#
+# Note that the configured Diameter Identity MUST match
+# the information received inside CEA, or the connection will be aborted.
+#
+# Format:
+#ConnectPeer = "diameterid" [ { parameter1; parameter2; ...} ] ;
+# Parameters that can be specified in the peer's parameter list:
+#  No_TCP; No_SCTP; No_IP; No_IPv6; Prefer_TCP; TLS_old_method;
+#  No_TLS;       # assume transparent security instead of TLS. DTLS is not supported yet (will change in future versions).
+#  Port = 5868;  # The port to connect to
+#  TcTimer = 30;
+#  TwTimer = 30;
+#  ConnectTo = "202.249.37.5";
+#  ConnectTo = "2001:200:903:2::202:1";
+#  TLS_Prio = "NORMAL";
+#  Realm = "realm.net"; # Reject the peer if it does not advertise this realm.
+# Examples:
+#ConnectPeer = "aaa.wide.ad.jp";
+#ConnectPeer = "old.diameter.serv" { TcTimer = 60; TLS_old_method; No_SCTP; Port=3868; } ;
+ConnectPeer = "hss.localdomain" { ConnectTo = "127.0.0.8"; No_TLS; };
+
+
+##############################################################

configs/freeDiameter/pcrf.conf.in

@@ -0,0 +1,266 @@
+# This is a sample configuration file for freeDiameter daemon.
+
+# Most of the options can be omitted, as they default to reasonable values.
+# Only TLS-related options must be configured properly in usual setups.
+
+# It is possible to use "include" keyword to import additional files
+# e.g.: include "/etc/freeDiameter.d/*.conf"
+# This is exactly equivalent as copy & paste the content of the included file(s) 
+# where the "include" keyword is found.
+
+
+##############################################################
+##  Peer identity and realm 
+
+# The Diameter Identity of this daemon.
+# This must be a valid FQDN that resolves to the local host.
+# Default: hostname's FQDN
+#Identity = "aaa.koganei.freediameter.net";
+Identity = "pcrf.localdomain";
+
+# The Diameter Realm of this daemon.
+# Default: the domain part of Identity (after the first dot).
+#Realm = "koganei.freediameter.net";
+Realm = "localdomain";
+
+##############################################################
+##  Transport protocol configuration
+
+# The port this peer is listening on for incoming connections (TCP and SCTP).
+# Default: 3868. Use 0 to disable.
+#Port = 3868;
+
+# The port this peer is listening on for incoming TLS-protected connections (TCP and SCTP).
+# See TLS_old_method for more information about TLS flavours.
+# Note: we use TLS/SCTP instead of DTLS/SCTP at the moment. This will change in future version of freeDiameter.
+# Default: 5868. Use 0 to disable.
+#SecPort = 5868;
+
+# Use RFC3588 method for TLS protection, where TLS is negociated after CER/CEA exchange is completed 
+# on the unsecure connection. The alternative is RFC6733 mechanism, where TLS protects also the 
+# CER/CEA exchange on a dedicated secure port.
+# This parameter only affects outgoing connections. 
+# The setting can be also defined per-peer (see Peers configuration section).
+# Default: use RFC6733 method with separate port for TLS.
+#TLS_old_method;
+
+# Disable use of TCP protocol (only listen and connect over SCTP)
+# Default : TCP enabled
+#No_TCP;
+
+# Disable use of SCTP protocol (only listen and connect over TCP)
+# Default : SCTP enabled
+#No_SCTP;
+# This option is ignored if freeDiameter is compiled with DISABLE_SCTP option.
+
+# Prefer TCP instead of SCTP for establishing new connections.
+# This setting may be overwritten per peer in peer configuration blocs.
+# Default : SCTP is attempted first.
+#Prefer_TCP;
+
+# Default number of streams per SCTP associations.
+# This setting may be overwritten per peer basis.
+# Default : 30 streams
+#SCTP_streams = 30;
+
+##############################################################
+##  Endpoint configuration
+
+# Disable use of IP addresses (only IPv6)
+# Default : IP enabled
+#No_IP;
+
+# Disable use of IPv6 addresses (only IP)
+# Default : IPv6 enabled
+#No_IPv6;
+
+# Specify local addresses the server must bind to
+# Default : listen on all addresses available.
+#ListenOn = "202.249.37.5";
+#ListenOn = "2001:200:903:2::202:1";
+#ListenOn = "fe80::21c:5ff:fe98:7d62%eth0";
+ListenOn = "127.0.0.9";
+
+
+##############################################################
+##  Server configuration
+
+# How many Diameter peers are allowed to be connecting at the same time ?
+# This parameter limits the number of incoming connections from the time
+# the connection is accepted until the first CER is received.
+# Default: 5 unidentified clients in paralel.
+#ThreadsPerServer = 5;
+
+##############################################################
+##  TLS Configuration
+
+# TLS is managed by the GNUTLS library in the freeDiameter daemon.
+# You may find more information about parameters and special behaviors
+# in the relevant documentation.
+# http://www.gnu.org/software/gnutls/manual/
+
+# Credentials of the local peer
+# The X509 certificate and private key file to use for the local peer.
+# The files must contain PKCS-1 encoded RSA key, in PEM format.
+# (These parameters are passed to gnutls_certificate_set_x509_key_file function)
+# Default : NO DEFAULT
+#TLS_Cred = "<x509 certif file.PEM>" , "<x509 private key file.PEM>";
+#TLS_Cred = "/etc/ssl/certs/freeDiameter.pem", "/etc/ssl/private/freeDiameter.key";
+TLS_Cred = "@sysconfdir@/open5gs/tls/pcrf.crt", "@sysconfdir@/open5gs/tls/pcrf.key";
+
+# Certificate authority / trust anchors
+# The file containing the list of trusted Certificate Authorities (PEM list)
+# (This parameter is passed to gnutls_certificate_set_x509_trust_file function)
+# The directive can appear several times to specify several files.
+# Default : GNUTLS default behavior
+#TLS_CA = "<file.PEM>";
+TLS_CA = "@sysconfdir@/open5gs/tls/ca.crt";
+
+# Certificate Revocation List file
+# The information about revoked certificates.
+# The file contains a list of trusted CRLs in PEM format. They should have been verified before. 
+# (This parameter is passed to gnutls_certificate_set_x509_crl_file function)
+# Note: openssl CRL format might have interoperability issue with GNUTLS format.
+# Default : GNUTLS default behavior
+#TLS_CRL = "<file.PEM>";
+
+# GNU TLS Priority string
+# This string allows to configure the behavior of GNUTLS key exchanges 
+# algorithms. See gnutls_priority_init function documentation for information.
+# You should also refer to the Diameter required TLS support here:
+#   http://tools.ietf.org/html/rfc6733#section-13.1
+# Default : "NORMAL"
+# Example: TLS_Prio = "NONE:+VERS-TLS1.1:+AES-128-CBC:+RSA:+SHA1:+COMP-NULL";
+#TLS_Prio = "NORMAL";
+
+# Diffie-Hellman parameters size
+# Set the number of bits for generated DH parameters
+# Valid value should be 768, 1024, 2048, 3072 or 4096.
+# (This parameter is passed to gnutls_dh_params_generate2 function, 
+# it usually should match RSA key size)
+# Default : 1024
+#TLS_DH_Bits = 1024;
+
+# Alternatively, you can specify a file to load the PKCS#3 encoded
+# DH parameters directly from. This accelerates the daemon start 
+# but is slightly less secure. If this file is provided, the
+# TLS_DH_Bits parameters has no effect.
+# Default : no default.
+#TLS_DH_File = "<file.PEM>";
+
+
+##############################################################
+##  Timers configuration
+
+# The Tc timer of this peer.
+# It is the delay before a new attempt is made to reconnect a disconnected peer.
+# The value is expressed in seconds. The recommended value is 30 seconds.
+# Default: 30
+#TcTimer = 30;
+
+# The Tw timer of this peer.
+# It is the delay before a watchdog message is sent, as described in RFC 3539.
+# The value is expressed in seconds. The default value is 30 seconds. Value must
+# be greater or equal to 6 seconds. See details in the RFC.
+# Default: 30
+#TwTimer = 30;
+
+##############################################################
+##  Applications configuration
+
+# Disable the relaying of Diameter messages?
+# For messages not handled locally, the default behavior is to forward the
+# message to another peer if any is available, according to the routing 
+# algorithms. In addition the "0xffffff" application is advertised in CER/CEA 
+# exchanges.
+# Default: Relaying is enabled.
+#NoRelay;
+NoRelay;
+
+# Number of server threads that can handle incoming messages at the same time.
+# Default: 4
+#AppServThreads = 4;
+
+# Other applications are configured by loaded extensions.
+
+##############################################################
+##  Extensions configuration
+
+#  The freeDiameter framework merely provides support for
+# Diameter Base Protocol. The specific application behaviors,
+# as well as advanced functions, are provided
+# by loadable extensions (plug-ins).
+#  These extensions may in addition receive the name of a 
+# configuration file, the format of which is extension-specific.
+#
+# Format:
+#LoadExtension = "/path/to/extension" [ : "/optional/configuration/file" ] ;
+#
+# Examples:
+#LoadExtension = "extensions/sample.fdx";
+#LoadExtension = "extensions/sample.fdx":"conf/sample.conf";
+
+# Extensions are named as follow:
+# dict_* for extensions that add content to the dictionary definitions.
+# dbg_*  for extensions useful only to retrieve more information on the framework execution.
+# acl_*  : Access control list, to control which peers are allowed to connect.
+# rt_*   : routing extensions that impact how messages are forwarded to other peers.
+# app_*  : applications, these extensions usually register callbacks to handle specific messages.
+# test_* : dummy extensions that are useful only in testing environments.
+
+
+# The dbg_msg_dump.fdx extension allows you to tweak the way freeDiameter displays some
+# information about some events. This extension does not actually use a configuration file
+# but receives directly a parameter in the string passed to the extension. Here are some examples:
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x1111"; # Removes all default hooks, very quiet even in case of errors.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x2222"; # Display all events with few details.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x0080"; # Dump complete information about sent and received messages.
+# The four digits respectively control: connections, routing decisions, sent/received messages, errors.
+# The values for each digit are:
+#  0 - default - keep the default behavior
+#  1 - quiet   - remove any specific log
+#  2 - compact - display only a summary of the information
+#  4 - full    - display the complete information on a single long line
+#  8 - tree    - display the complete information in an easier to read format spanning several lines.
+
+LoadExtension = "@libdir@/freeDiameter/dbg_msg_dumps.fdx" : "0x8888";
+LoadExtension = "@libdir@/freeDiameter/dict_rfc5777.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_mip6i.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nasreq.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nas_mipv6.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca_3gpp.fdx";
+
+
+##############################################################
+##  Peers configuration
+
+#  The local server listens for incoming connections. By default,
+# all unknown connecting peers are rejected. Extensions can override this behavior (e.g., acl_wl).
+# 
+#  In addition to incoming connections, the local peer can
+# be configured to establish and maintain connections to some 
+# Diameter nodes and allow connections from these nodes.
+#  This is achieved with the ConnectPeer directive described below.
+#
+# Note that the configured Diameter Identity MUST match
+# the information received inside CEA, or the connection will be aborted.
+#
+# Format:
+#ConnectPeer = "diameterid" [ { parameter1; parameter2; ...} ] ;
+# Parameters that can be specified in the peer's parameter list:
+#  No_TCP; No_SCTP; No_IP; No_IPv6; Prefer_TCP; TLS_old_method;
+#  No_TLS;       # assume transparent security instead of TLS. DTLS is not supported yet (will change in future versions).
+#  Port = 5868;  # The port to connect to
+#  TcTimer = 30;
+#  TwTimer = 30;
+#  ConnectTo = "202.249.37.5";
+#  ConnectTo = "2001:200:903:2::202:1";
+#  TLS_Prio = "NORMAL";
+#  Realm = "realm.net"; # Reject the peer if it does not advertise this realm.
+# Examples:
+#ConnectPeer = "aaa.wide.ad.jp";
+#ConnectPeer = "old.diameter.serv" { TcTimer = 60; TLS_old_method; No_SCTP; Port=3868; } ;
+ConnectPeer = "smf.localdomain" { ConnectTo = "127.0.0.4"; No_TLS; };
+
+##############################################################

configs/freeDiameter/smf.conf.in

@@ -0,0 +1,267 @@
+# This is a sample configuration file for freeDiameter daemon.
+
+# Most of the options can be omitted, as they default to reasonable values.
+# Only TLS-related options must be configured properly in usual setups.
+
+# It is possible to use "include" keyword to import additional files
+# e.g.: include "/etc/freeDiameter.d/*.conf"
+# This is exactly equivalent as copy & paste the content of the included file(s) 
+# where the "include" keyword is found.
+
+
+##############################################################
+##  Peer identity and realm 
+
+# The Diameter Identity of this daemon.
+# This must be a valid FQDN that resolves to the local host.
+# Default: hostname's FQDN
+#Identity = "aaa.koganei.freediameter.net";
+Identity = "smf.localdomain";
+
+# The Diameter Realm of this daemon.
+# Default: the domain part of Identity (after the first dot).
+#Realm = "koganei.freediameter.net";
+Realm = "localdomain";
+
+##############################################################
+##  Transport protocol configuration
+
+# The port this peer is listening on for incoming connections (TCP and SCTP).
+# Default: 3868. Use 0 to disable.
+#Port = 3868;
+
+# The port this peer is listening on for incoming TLS-protected connections (TCP and SCTP).
+# See TLS_old_method for more information about TLS flavours.
+# Note: we use TLS/SCTP instead of DTLS/SCTP at the moment. This will change in future version of freeDiameter.
+# Default: 5868. Use 0 to disable.
+#SecPort = 5868;
+
+# Use RFC3588 method for TLS protection, where TLS is negociated after CER/CEA exchange is completed 
+# on the unsecure connection. The alternative is RFC6733 mechanism, where TLS protects also the 
+# CER/CEA exchange on a dedicated secure port.
+# This parameter only affects outgoing connections. 
+# The setting can be also defined per-peer (see Peers configuration section).
+# Default: use RFC6733 method with separate port for TLS.
+#TLS_old_method;
+
+# Disable use of TCP protocol (only listen and connect over SCTP)
+# Default : TCP enabled
+#No_TCP;
+
+# Disable use of SCTP protocol (only listen and connect over TCP)
+# Default : SCTP enabled
+#No_SCTP;
+# This option is ignored if freeDiameter is compiled with DISABLE_SCTP option.
+
+# Prefer TCP instead of SCTP for establishing new connections.
+# This setting may be overwritten per peer in peer configuration blocs.
+# Default : SCTP is attempted first.
+#Prefer_TCP;
+
+# Default number of streams per SCTP associations.
+# This setting may be overwritten per peer basis.
+# Default : 30 streams
+#SCTP_streams = 30;
+
+##############################################################
+##  Endpoint configuration
+
+# Disable use of IP addresses (only IPv6)
+# Default : IP enabled
+#No_IP;
+
+# Disable use of IPv6 addresses (only IP)
+# Default : IPv6 enabled
+#No_IPv6;
+
+# Specify local addresses the server must bind to
+# Default : listen on all addresses available.
+#ListenOn = "202.249.37.5";
+#ListenOn = "2001:200:903:2::202:1";
+#ListenOn = "fe80::21c:5ff:fe98:7d62%eth0";
+ListenOn = "127.0.0.4";
+
+
+##############################################################
+##  Server configuration
+
+# How many Diameter peers are allowed to be connecting at the same time ?
+# This parameter limits the number of incoming connections from the time
+# the connection is accepted until the first CER is received.
+# Default: 5 unidentified clients in paralel.
+#ThreadsPerServer = 5;
+
+##############################################################
+##  TLS Configuration
+
+# TLS is managed by the GNUTLS library in the freeDiameter daemon.
+# You may find more information about parameters and special behaviors
+# in the relevant documentation.
+# http://www.gnu.org/software/gnutls/manual/
+
+# Credentials of the local peer
+# The X509 certificate and private key file to use for the local peer.
+# The files must contain PKCS-1 encoded RSA key, in PEM format.
+# (These parameters are passed to gnutls_certificate_set_x509_key_file function)
+# Default : NO DEFAULT
+#TLS_Cred = "<x509 certif file.PEM>" , "<x509 private key file.PEM>";
+#TLS_Cred = "/etc/ssl/certs/freeDiameter.pem", "/etc/ssl/private/freeDiameter.key";
+TLS_Cred = "@sysconfdir@/open5gs/tls/smf.crt", "@sysconfdir@/open5gs/tls/smf.key";
+
+# Certificate authority / trust anchors
+# The file containing the list of trusted Certificate Authorities (PEM list)
+# (This parameter is passed to gnutls_certificate_set_x509_trust_file function)
+# The directive can appear several times to specify several files.
+# Default : GNUTLS default behavior
+#TLS_CA = "<file.PEM>";
+TLS_CA = "@sysconfdir@/open5gs/tls/ca.crt";
+
+# Certificate Revocation List file
+# The information about revoked certificates.
+# The file contains a list of trusted CRLs in PEM format. They should have been verified before. 
+# (This parameter is passed to gnutls_certificate_set_x509_crl_file function)
+# Note: openssl CRL format might have interoperability issue with GNUTLS format.
+# Default : GNUTLS default behavior
+#TLS_CRL = "<file.PEM>";
+
+# GNU TLS Priority string
+# This string allows to configure the behavior of GNUTLS key exchanges 
+# algorithms. See gnutls_priority_init function documentation for information.
+# You should also refer to the Diameter required TLS support here:
+#   http://tools.ietf.org/html/rfc6733#section-13.1
+# Default : "NORMAL"
+# Example: TLS_Prio = "NONE:+VERS-TLS1.1:+AES-128-CBC:+RSA:+SHA1:+COMP-NULL";
+#TLS_Prio = "NORMAL";
+
+# Diffie-Hellman parameters size
+# Set the number of bits for generated DH parameters
+# Valid value should be 768, 1024, 2048, 3072 or 4096.
+# (This parameter is passed to gnutls_dh_params_generate2 function, 
+# it usually should match RSA key size)
+# Default : 1024
+#TLS_DH_Bits = 1024;
+
+# Alternatively, you can specify a file to load the PKCS#3 encoded
+# DH parameters directly from. This accelerates the daemon start 
+# but is slightly less secure. If this file is provided, the
+# TLS_DH_Bits parameters has no effect.
+# Default : no default.
+#TLS_DH_File = "<file.PEM>";
+
+
+##############################################################
+##  Timers configuration
+
+# The Tc timer of this peer.
+# It is the delay before a new attempt is made to reconnect a disconnected peer.
+# The value is expressed in seconds. The recommended value is 30 seconds.
+# Default: 30
+#TcTimer = 30;
+
+# The Tw timer of this peer.
+# It is the delay before a watchdog message is sent, as described in RFC 3539.
+# The value is expressed in seconds. The default value is 30 seconds. Value must
+# be greater or equal to 6 seconds. See details in the RFC.
+# Default: 30
+#TwTimer = 30;
+
+##############################################################
+##  Applications configuration
+
+# Disable the relaying of Diameter messages?
+# For messages not handled locally, the default behavior is to forward the
+# message to another peer if any is available, according to the routing 
+# algorithms. In addition the "0xffffff" application is advertised in CER/CEA 
+# exchanges.
+# Default: Relaying is enabled.
+#NoRelay;
+NoRelay;
+
+# Number of server threads that can handle incoming messages at the same time.
+# Default: 4
+#AppServThreads = 4;
+
+# Other applications are configured by loaded extensions.
+
+##############################################################
+##  Extensions configuration
+
+#  The freeDiameter framework merely provides support for
+# Diameter Base Protocol. The specific application behaviors,
+# as well as advanced functions, are provided
+# by loadable extensions (plug-ins).
+#  These extensions may in addition receive the name of a 
+# configuration file, the format of which is extension-specific.
+#
+# Format:
+#LoadExtension = "/path/to/extension" [ : "/optional/configuration/file" ] ;
+#
+# Examples:
+#LoadExtension = "extensions/sample.fdx";
+#LoadExtension = "extensions/sample.fdx":"conf/sample.conf";
+
+# Extensions are named as follow:
+# dict_* for extensions that add content to the dictionary definitions.
+# dbg_*  for extensions useful only to retrieve more information on the framework execution.
+# acl_*  : Access control list, to control which peers are allowed to connect.
+# rt_*   : routing extensions that impact how messages are forwarded to other peers.
+# app_*  : applications, these extensions usually register callbacks to handle specific messages.
+# test_* : dummy extensions that are useful only in testing environments.
+
+
+# The dbg_msg_dump.fdx extension allows you to tweak the way freeDiameter displays some
+# information about some events. This extension does not actually use a configuration file
+# but receives directly a parameter in the string passed to the extension. Here are some examples:
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x1111"; # Removes all default hooks, very quiet even in case of errors.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x2222"; # Display all events with few details.
+## LoadExtension = "dbg_msg_dumps.fdx" : "0x0080"; # Dump complete information about sent and received messages.
+# The four digits respectively control: connections, routing decisions, sent/received messages, errors.
+# The values for each digit are:
+#  0 - default - keep the default behavior
+#  1 - quiet   - remove any specific log
+#  2 - compact - display only a summary of the information
+#  4 - full    - display the complete information on a single long line
+#  8 - tree    - display the complete information in an easier to read format spanning several lines.
+
+LoadExtension = "@libdir@/freeDiameter/dbg_msg_dumps.fdx" : "0x8888";
+LoadExtension = "@libdir@/freeDiameter/dict_rfc5777.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_mip6i.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nasreq.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_nas_mipv6.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca.fdx";
+LoadExtension = "@libdir@/freeDiameter/dict_dcca_3gpp.fdx";
+
+
+##############################################################
+##  Peers configuration
+
+#  The local server listens for incoming connections. By default,
+# all unknown connecting peers are rejected. Extensions can override this behavior (e.g., acl_wl).
+# 
+#  In addition to incoming connections, the local peer can
+# be configured to establish and maintain connections to some 
+# Diameter nodes and allow connections from these nodes.
+#  This is achieved with the ConnectPeer directive described below.
+#
+# Note that the configured Diameter Identity MUST match
+# the information received inside CEA, or the connection will be aborted.
+#
+# Format:
+#ConnectPeer = "diameterid" [ { parameter1; parameter2; ...} ] ;
+# Parameters that can be specified in the peer's parameter list:
+#  No_TCP; No_SCTP; No_IP; No_IPv6; Prefer_TCP; TLS_old_method;
+#  No_TLS;       # assume transparent security instead of TLS. DTLS is not supported yet (will change in future versions).
+#  Port = 5868;  # The port to connect to
+#  TcTimer = 30;
+#  TwTimer = 30;
+#  ConnectTo = "202.249.37.5";
+#  ConnectTo = "2001:200:903:2::202:1";
+#  TLS_Prio = "NORMAL";
+#  Realm = "realm.net"; # Reject the peer if it does not advertise this realm.
+# Examples:
+#ConnectPeer = "aaa.wide.ad.jp";
+#ConnectPeer = "old.diameter.serv" { TcTimer = 60; TLS_old_method; No_SCTP; Port=3868; } ;
+ConnectPeer = "pcrf.localdomain" { ConnectTo = "127.0.0.9"; No_TLS; };
+
+
+##############################################################

configs/logrotate/meson.build

@@ -0,0 +1,19 @@
+# Copyright (C) 2019 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+file = 'open5gs'
+configure_file(input : file + '.in', output : file, configuration : conf_data)

configs/logrotate/open5gs.in

@@ -0,0 +1,16 @@
+@localstatedir@/log/open5gs/*.log {
+    daily
+    sharedscripts
+    missingok
+    compress
+    rotate 14
+    create 640 open5gs open5gs
+
+    postrotate
+        for i in nrfd scpd seppd pcrfd hssd ausfd udmd udrd upfd sgwcd sgwud smfd mmed amfd; do
+            if systemctl --quiet is-active open5gs-$i; then
+                 systemctl reload open5gs-$i
+            fi
+        done
+    endscript
+}

configs/meson.build

@@ -0,0 +1,56 @@
+# Copyright (C) 2019 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+conf_data = configuration_data()
+
+conf_data.set('bindir', bindir)
+conf_data.set('sysconfdir', sysconfdir)
+conf_data.set('libdir', libdir)
+conf_data.set('localstatedir', localstatedir)
+
+build_configs_dir = join_paths(open5gs_build_dir, 'configs')
+conf_data.set('build_configs_dir', build_configs_dir)
+
+build_subprojects_freeDiameter_extensions_dir = join_paths(
+        open5gs_build_dir, 'subprojects', 'freeDiameter', 'extensions')
+conf_data.set('build_subprojects_freeDiameter_extensions_dir',
+        build_subprojects_freeDiameter_extensions_dir)
+
+example_conf = '''
+    sample.yaml
+    310014.yaml
+    csfb.yaml
+    volte.yaml
+    vonr.yaml
+    slice.yaml
+    srsenb.yaml
+    non3gpp.yaml
+'''.split()
+
+foreach file : example_conf
+    gen = configure_file(
+            input : file + '.in',
+            output : file,
+            configuration : conf_data)
+endforeach
+
+subdir('open5gs')
+subdir('freeDiameter')
+subdir('systemd')
+subdir('logrotate')
+subdir('newsyslog')
+subdir('examples')

configs/newsyslog/meson.build

@@ -0,0 +1,19 @@
+# Copyright (C) 2019 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+file = 'open5gs.conf'
+configure_file(input : file + '.in', output : file, configuration : conf_data)

configs/newsyslog/open5gs.conf.in

@@ -0,0 +1,17 @@
+# truncate rails logs every day at midnight, keep 14 previous logs, compress previous logs
+#
+# logfilename                         [owner:group] mode count size  when  flags [/pid_file]        [sig_num]
+@localstatedir@/log/open5gs/nrf.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-nrfd/pid`
+@localstatedir@/log/open5gs/scp.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-scpd/pid`
+@localstatedir@/log/open5gs/sepp.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-seppd/pid`
+@localstatedir@/log/open5gs/pcrf.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-pcrfd/pid`
+@localstatedir@/log/open5gs/hss.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-hssd/pid`
+@localstatedir@/log/open5gs/ausf.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-ausfd/pid`
+@localstatedir@/log/open5gs/udm.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-udmd/pid`
+@localstatedir@/log/open5gs/udr.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-udrd/pid`
+@localstatedir@/log/open5gs/upf.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-upfd/pid`
+@localstatedir@/log/open5gs/sgwc.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-sgwcd/pid`
+@localstatedir@/log/open5gs/sgwu.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-sgwud/pid`
+@localstatedir@/log/open5gs/smf.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-smfd/pid`
+@localstatedir@/log/open5gs/mme.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-mmed/pid`
+@localstatedir@/log/open5gs/amf.log               644  14    *     $D0   GZ    @localstatedir@/run/open5gs-amfd/pid`

configs/non3gpp.yaml.in

@@ -0,0 +1,310 @@
+db_uri: mongodb://localhost/open5gs
+
+logger:
+
+test:
+  serving:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+
+global:
+  parameter:
+#    no_nrf: true
+#    no_scp: true
+    no_sepp: true
+#    no_amf: true
+#    no_smf: true
+#    no_upf: true
+#    no_ausf: true
+#    no_udm: true
+#    no_pcf: true
+#    no_nssf: true
+#    no_bsf: true
+#    no_udr: true
+#    no_mme: true
+#    no_sgwc: true
+#    no_sgwu: true
+#    no_pcrf: true
+#    no_hss: true
+
+mme:
+  freeDiameter:
+    identity: mme.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.2
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: hss.localdomain
+        address: 127.0.0.8
+
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  gummei:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+  time:
+    t3412:
+      value: 540
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+  freeDiameter:
+    identity: smf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.4
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: pcrf.localdomain
+        address: 127.0.0.9
+      - identity: aaa.localdomain
+        address: 127.0.0.1
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+  ngap:
+    server:
+      - address: 127.0.0.5
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+  amf_name: open5gs-amf0
+  time:
+    t3512:
+      value: 540     # 9 mintues * 60 = 540 seconds
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+upf:
+  pfcp:
+    server:
+      - address: 127.0.0.7
+  gtpu:
+    server:
+      - address: 127.0.0.7
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  metrics:
+    server:
+      - address: 127.0.0.7
+        port: 9090
+
+hss:
+  freeDiameter:
+    identity: hss.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.8
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: mme.localdomain
+        address: 127.0.0.2
+      - identity: aaa.localdomain
+        address: 127.0.0.1
+pcrf:
+  freeDiameter:
+    identity: pcrf.localdomain
+    realm: localdomain
+    listen_on: 127.0.0.9
+    no_fwd: true
+    load_extension:
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dbg_msg_dumps.fdx
+        conf: 0x8888
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_rfc5777.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_mip6i.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nasreq.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_nas_mipv6.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca.fdx
+      - module: @build_subprojects_freeDiameter_extensions_dir@/dict_dcca_3gpp/dict_dcca_3gpp.fdx
+    connect:
+      - identity: smf.localdomain
+        address: 127.0.0.4
+
+nrf:
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+udm:
+  sbi:
+    server:
+      - address: 127.0.0.12
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+udr:
+  sbi:
+    server:
+      - address: 127.0.0.20
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777

configs/open5gs/amf.yaml.in

@@ -0,0 +1,239 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/amf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+amf:
+  sbi:
+    server:
+      - address: 127.0.0.5
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+  ngap:
+    server:
+      - address: 127.0.0.5
+  metrics:
+    server:
+      - address: 127.0.0.5
+        port: 9090
+  guami:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      amf_id:
+        region: 2
+        set: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  plmn_support:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      s_nssai:
+        - sst: 1
+  security:
+    integrity_order : [ NIA2, NIA1, NIA0 ]
+    ciphering_order : [ NEA0, NEA1, NEA2 ]
+  network_name:
+    full: Open5GS
+    short: Next
+  amf_name: open5gs-amf0
+  time:
+#    t3502:
+#      value: 720   # 12 minutes * 60 = 720 seconds
+    t3512:
+      value: 540    # 9 minutes * 60 = 540 seconds
+
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev:eth0
+#        advertise: open5gs-amf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+#  o Indirect communication with delegated discovery
+#  sbi:
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#
+#  o Indirect communication without delegated discovery
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  discovery:
+#    delegated: no
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/amf.key
+#        cert: @sysconfdir@/open5gs/tls/amf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: amf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/amf.key
+#        cert: @sysconfdir@/open5gs/tls/amf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/amf.key
+#        client_cert: @sysconfdir@/open5gs/tls/amf.crt
+#  sbi:
+#    server:
+#      - address: amf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+################################################################################
+# NGAP Server
+################################################################################
+#  o Listen on address available in `eth0` interface
+#  ngap:
+#    server:
+#      - dev: eth0
+#
+################################################################################
+# 3GPP Specification
+################################################################################
+#  o GUAMI
+#  guami:
+#    - plmn_id:
+#        mcc: 999
+#        mnc: 70
+#      amf_id:
+#        region: 2
+#        set: 1
+#        pointer: 4
+#    - plmn_id:
+#        mcc: 001
+#        mnc: 01
+#      amf_id:
+#        region: 5
+#        set: 2
+#
+#  o TAI
+#  tai:
+#    - plmn_id:
+#        mcc: 001
+#        mnc: 01
+#      tac: [1, 3, 5]
+#  tai:
+#    - plmn_id:
+#        mcc: 002
+#        mnc: 02
+#      tac: [6-10, 15-18]
+#  tai:
+#    - plmn_id:
+#        mcc: 003
+#        mnc: 03
+#      tac: 20
+#    - plmn_id:
+#        mcc: 004
+#        mnc: 04
+#      tac: 21
+#  tai:
+#    - plmn_id:
+#        mcc: 005
+#        mnc: 05
+#      tac: [22, 28]
+#    - plmn_id:
+#        mcc: 006
+#        mnc: 06
+#      tac: [30-32, 34, 36-38, 40-42, 44, 46, 48]
+#    - plmn_id:
+#        mcc: 007
+#        mnc: 07
+#      tac: 50
+#    - plmn_id:
+#        mcc: 008
+#        mnc: 08
+#      tac: 60
+#    - plmn_id:
+#        mcc: 009
+#        mnc: 09
+#      tac: [70, 80]
+#
+#  o PLMN Support
+#  plmn_support:
+#    - plmn_id:
+#        mcc: 999
+#        mnc: 70
+#      s_nssai:
+#        - sst: 1
+#          sd: 010000
+#    - plmn_id:
+#        mcc: 999
+#        mnc: 70
+#      s_nssai:
+#        - sst: 1
+#
+#  o Access Control
+#  access_control:
+#    - default_reject_cause: 13
+#    - plmn_id:
+#        reject_cause: 15
+#        mcc: 001
+#        mnc: 01
+#    - plmn_id:
+#        mcc: 002
+#        mnc: 02
+#    - plmn_id:
+#        mcc: 999
+#        mnc: 70
+#
+#  o Relative Capacity
+#  relative_capacity: 100

configs/open5gs/ausf.yaml.in

@@ -0,0 +1,102 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/ausf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+ausf:
+  sbi:
+    server:
+      - address: 127.0.0.11
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-ausf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+#  o Indirect communication with delegated discovery
+#  sbi:
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#
+#  o Indirect communication without delegated discovery
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  discovery:
+#    delegated: no
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/ausf.key
+#        cert: @sysconfdir@/open5gs/tls/ausf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: ausf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/ausf.key
+#        cert: @sysconfdir@/open5gs/tls/ausf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/ausf.key
+#        client_cert: @sysconfdir@/open5gs/tls/ausf.crt
+#  sbi:
+#    server:
+#      - address: ausf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain

configs/open5gs/bsf.yaml.in

@@ -0,0 +1,102 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/bsf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+bsf:
+  sbi:
+    server:
+      - address: 127.0.0.15
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-bsf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+#  o Indirect communication with delegated discovery
+#  sbi:
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#
+#  o Indirect communication without delegated discovery
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  discovery:
+#    delegated: no
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/bsf.key
+#        cert: @sysconfdir@/open5gs/tls/bsf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: bsf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/bsf.key
+#        cert: @sysconfdir@/open5gs/tls/bsf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/bsf.key
+#        client_cert: @sysconfdir@/open5gs/tls/bsf.crt
+#  sbi:
+#    server:
+#      - address: bsf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain

configs/open5gs/hnet/curve25519-1.key

@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VuBCIEIBDJxn6GGlYloduPaEEjiW2bNQYZnT3xlo4HtshEi7FH
+-----END PRIVATE KEY-----

configs/open5gs/hnet/curve25519-3.key

@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VuBCIEIFAK2WjCQjB8TU7COXwdIKVhKGjPa+SJuyOVObjfW9hM
+-----END PRIVATE KEY-----

configs/open5gs/hnet/curve25519-5.key

@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VuBCIEIHh8rsYF8otbnyb8bcrhD1AAV5C9iBtjTlYJY3k5k0dt
+-----END PRIVATE KEY-----

configs/open5gs/hnet/meson.build

@@ -0,0 +1,38 @@
+# Copyright (C) 2022 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+hnet_sysconfdir = join_paths(open5gs_sysconfdir, 'hnet')
+meson.add_install_script(python3_exe, '-c',
+        mkdir_p.format(hnet_sysconfdir))
+
+hnet_security = '''
+  curve25519-1.key
+  secp256r1-2.key
+  curve25519-3.key
+  secp256r1-4.key
+  curve25519-5.key
+  secp256r1-6.key
+'''.split()
+
+foreach file : hnet_security
+    gen = configure_file(
+            input : file,
+            output : file,
+            configuration : conf_data)
+    meson.add_install_script(python3_exe, '-c',
+            install_conf.format(gen, hnet_sysconfdir))
+endforeach

configs/open5gs/hnet/secp256r1-2.key

@@ -0,0 +1,8 @@
+-----BEGIN EC PARAMETERS-----
+BggqhkjOPQMBBw==
+-----END EC PARAMETERS-----
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIHSp+RhHH1bzvv2lxR1zij+U9aUtS8nbl5n1Il+8zd5BoAoGCCqGSM49
+AwEHoUQDQgAEre/NExfRzoVi7CW5G0gAEg4SNtbiZh6kI1qE48hdokS8QqWUz1YS
+9J6PvihX2OSZ+RMixzf8zxu9tuTUJKgKlQ==
+-----END EC PRIVATE KEY-----

configs/open5gs/hnet/secp256r1-4.key

@@ -0,0 +1,8 @@
+-----BEGIN EC PARAMETERS-----
+BggqhkjOPQMBBw==
+-----END EC PARAMETERS-----
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIAGZvsOAU0YMHhBK33hRkGMPkA3Xefq5b5hPQD6qnf5goAoGCCqGSM49
+AwEHoUQDQgAEdXfTAGY+0ibQoO9bfmk7+M/l//BiMzO6lNIUEMSj1k3k9SQPygGY
+jAuUHpVM4Uo6cWxuyurEn8pWn1vF3tVhbg==
+-----END EC PRIVATE KEY-----

configs/open5gs/hnet/secp256r1-6.key

@@ -0,0 +1,8 @@
+-----BEGIN EC PARAMETERS-----
+BggqhkjOPQMBBw==
+-----END EC PARAMETERS-----
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIG3VKSXh/3WK0HzCkN1DgeUjF7TSLgAUyMn/WGHsxrZ3oAoGCCqGSM49
+AwEHoUQDQgAENU1ibHe7oWu4m6M8P0XoA78ZNKtdIsJgVU0nCk/c5sC3V+/4GuxU
+owtbASEXQZg4SGvts+1Yqz0p4WwCAAcwpQ==
+-----END EC PRIVATE KEY-----

configs/open5gs/hss.yaml.in

@@ -0,0 +1,15 @@
+db_uri: mongodb://localhost/open5gs
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/hss.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+hss:
+  freeDiameter: @sysconfdir@/freeDiameter/hss.conf
+#  sms_over_ims: "sip:smsc.mnc001.mcc001.3gppnetwork.org:7060;transport=tcp"
+#  use_mongodb_change_stream: true

configs/open5gs/meson.build

@@ -0,0 +1,53 @@
+# Copyright (C) 2019 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+open5gs_sysconfdir = join_paths(sysconfdir, 'open5gs')
+meson.add_install_script(python3_exe, '-c',
+        mkdir_p.format(open5gs_sysconfdir))
+
+open5gs_conf = '''
+    mme.yaml
+    sgwc.yaml
+    sgwu.yaml
+    smf.yaml
+    amf.yaml
+    upf.yaml
+    hss.yaml
+    pcrf.yaml
+    nrf.yaml
+    scp.yaml
+    sepp1.yaml
+    sepp2.yaml
+    ausf.yaml
+    udm.yaml
+    udr.yaml
+    pcf.yaml
+    nssf.yaml
+    bsf.yaml
+'''.split()
+
+foreach file : open5gs_conf
+    gen = configure_file(
+            input : file + '.in',
+            output : file,
+            configuration : conf_data)
+    meson.add_install_script(python3_exe, '-c',
+            install_conf.format(gen, open5gs_sysconfdir))
+endforeach
+
+subdir('tls')
+subdir('hnet')

configs/open5gs/mme.yaml.in

@@ -0,0 +1,281 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/mme.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+mme:
+  freeDiameter: @sysconfdir@/freeDiameter/mme.conf
+  s1ap:
+    server:
+      - address: 127.0.0.2
+  gtpc:
+    server:
+      - address: 127.0.0.2
+    client:
+      sgwc:
+        - address: 127.0.0.3
+      smf:
+        - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.2
+        port: 9090
+  gummei:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      mme_gid: 2
+      mme_code: 1
+  tai:
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+      tac: 1
+  security:
+    integrity_order : [ EIA2, EIA1, EIA0 ]
+    ciphering_order : [ EEA0, EEA1, EEA2 ]
+  network_name:
+    full: Open5GS
+    short: Next
+  mme_name: open5gs-mme0
+  time:
+#    t3402:
+#      value: 720   # 12 minutes * 60 = 720 seconds
+#    t3412:
+#      value: 3240  # 54 minutes * 60 = 3240 seconds
+#    t3423:
+#      value: 720   # 12 minutes * 60 = 720 seconds
+
+################################################################################
+# S1AP Server
+################################################################################
+#  o Listen on address available in `eth0` interface
+#  ngap:
+#    server:
+#      - dev: eth0
+#
+################################################################################
+# GTP-C Server
+################################################################################
+#  o Listen on IPv4 and IPv6
+#  gtpc:
+#    server:
+#      - address: 127.0.0.2
+#      - address: ::1
+#
+################################################################################
+# GTP-C Client
+################################################################################
+#  o SGW selection by eNodeB TAC
+#   (either single TAC or multiple TACs, DECIMAL representation)
+#  gtpc:
+#    client:
+#      sgwc:
+#        - address: 127.0.0.3
+#          tac: 26000
+#        - address: 127.0.2.2
+#          tac: [25000, 27000, 28000]
+#
+#  o SGW selection by e_cell_id(28bit)
+#   (either single or multiple e_cell_id, HEX representation)
+#  gtpc:
+#    client:
+#      sgwc:
+#        - address: 127.0.0.3
+#          e_cell_id: abcde01
+#        - address: 127.0.2.2
+#          e_cell_id: [12345, a9413, 98765]
+#
+#  o SMF selection by APN
+#  gtpc:
+#    client:
+#      smf:
+#        - address: 127.0.0.4
+#          apn: internet
+#        - address: 127.0.0.5
+#          apn: volte
+#
+#  o SMF selection by eNodeB TAC
+#   (either single TAC or multiple TACs, DECIMAL representation)
+#  gtpc:
+#    client:
+#      smf:
+#        - address: 127.0.0.4
+#          tac: 26000
+#        - address: 127.0.2.4
+#          tac: [25000, 27000, 28000]
+#
+#  o SMF selection by e_cell_id(28bit)
+#   (either single or multiple e_cell_id, HEX representation)
+#  gtpc:
+#    client:
+#      smf:
+#        - address: 127.0.0.4
+#          e_cell_id: abcde01
+#        - address: 127.0.2.4
+#          e_cell_id: [12345, a9413, 98765]
+#
+#  o One SGSN is defined.
+#    If prefer_ipv4 is not true, [fd69:f21d:873c:fa::2] is selected.
+#  gtpc:
+#    client:
+#      sgsn:
+#        - address:
+#          - 127.0.0.3
+#          - fd69:f21d:873c:fa::2
+#          routes:
+#          - rai:
+#              lai:
+#                plmn_id:
+#                  mcc: 001
+#                  mnc: 01
+#                lac: 43690
+#              rac: 187
+#            ci: 1223
+#
+#
+#  o Two SGSNs are defined. Last one is used by default if no
+#    matching RAI+CI route is found.
+#  gtpc:
+#    client:
+#      sgsn:
+#        - address:
+#          - 127.0.0.3
+#          - fd69:f21d:873c:fa::2
+#          routes:
+#          - rai:
+#              lai:
+#                plmn_id:
+#                  mcc: 001
+#                  mnc: 01
+#                lac: 43690
+#              rac: 187
+#            ci: 1223
+#        - name: sgsn3.open5gs.org
+#          default_route: true
+#
+################################################################################
+# SGaAP Server
+################################################################################
+#  o MSC/VLR
+#  sgsap:
+#    server:
+#      - address: 127.0.0.2
+#        map:
+#          tai:
+#            plmn_id:
+#              mcc: 001
+#              mnc: 01
+#            tac: 4131
+#          lai:
+#            plmn_id:
+#              mcc: 001
+#              mnc: 01
+#            lac: 43691
+#        map:
+#          tai:
+#            plmn_id:
+#              mcc: 002
+#              mnc: 02
+#            tac: 4132
+#          lai:
+#            plmn_id:
+#              mcc: 002
+#              mnc: 02
+#            lac: 43692
+#      - address: msc.open5gs.org
+#        map:
+#          tai:
+#            plmn_id:
+#              mcc: 001
+#              mnc: 01
+#            tac: 4133
+#          lai:
+#            plmn_id:
+#              mcc: 002
+#              mnc: 02
+#            lac: 43693
+#
+################################################################################
+# 3GPP Specification
+################################################################################
+#  o GUMMEI
+#  gummei:
+#    - plmn_id:
+#        mcc: 001
+#        mnc: 01
+#      mme_gid: 2
+#      mme_code: 1
+#    - plmn_id:
+#        - mcc: 002
+#          mnc: 02
+#        - mcc: 003
+#          mnc: 03
+#      mme_gid: [3, 4]
+#      mme_code:
+#        - 2
+#        - 3
+#
+#  o TAI
+#  tai:
+#    - plmn_id:
+#        mcc: 001
+#        mnc: 01
+#      tac: [1, 3, 5]
+#  tai:
+#    - plmn_id:
+#        mcc: 002
+#        mnc: 02
+#      tac: [6-10, 15-18]
+#  tai:
+#    - plmn_id:
+#        mcc: 003
+#        mnc: 03
+#      tac: 20
+#    - plmn_id:
+#        mcc: 004
+#        mnc: 04
+#      tac: 21
+#  tai:
+#    - plmn_id:
+#        mcc: 005
+#        mnc: 05
+#      tac: [22, 28]
+#    - plmn_id:
+#        mcc: 006
+#        mnc: 06
+#      tac: [30-32, 34, 36-38, 40-42, 44, 46, 48]
+#    - plmn_id:
+#        mcc: 007
+#        mnc: 07
+#      tac: 50
+#    - plmn_id:
+#        mcc: 008
+#        mnc: 08
+#      tac: 60
+#    - plmn_id:
+#        mcc: 009
+#        mnc: 09
+#      tac: [70, 80]
+#
+#  o Access Control
+#  access_control:
+#    - default_reject_cause: 13
+#    - plmn_id:
+#        reject_cause: 15
+#        mcc: 001
+#        mnc: 01
+#    - plmn_id:
+#        mcc: 002
+#        mnc: 02
+#    - plmn_id:
+#        mcc: 999
+#        mnc: 70
+#
+#  o Relative Capacity
+#  relative_capacity: 100

configs/open5gs/nrf.yaml.in

@@ -0,0 +1,70 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/nrf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+nrf:
+  serving:  # 5G roaming requires PLMN in NRF
+    - plmn_id:
+        mcc: 999
+        mnc: 70
+  sbi:
+    server:
+      - address: 127.0.0.10
+        port: 7777
+
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-nrf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/nrf.key
+#        cert: @sysconfdir@/open5gs/tls/nrf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/nrf.key
+#        cert: @sysconfdir@/open5gs/tls/nrf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/nrf.key
+#        client_cert: @sysconfdir@/open5gs/tls/nrf.crt
+#  sbi:
+#    server:
+#      - address: nrf.localdomain

configs/open5gs/nssf.yaml.in

@@ -0,0 +1,136 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/nssf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+nssf:
+  sbi:
+    server:
+      - address: 127.0.0.14
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+      nsi:
+        - uri: http://127.0.0.10:7777
+          s_nssai:
+            sst: 1
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-nssf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Network Slice Instance(NSI)
+#   1. NRF[http://::1:7777/nnrf-nfm/v1/nf-instances]
+#      S-NSSAI[SST:1]
+#   2. NRF[http://127.0.0.19:7777/nnrf-nfm/v1/nf-instances]
+#      NSSAI[SST:1, SD:000080]
+#   3. NRF[http://127.0.0.10:7777/nnrf-nfm/v1/nf-instances]
+#      NSSAI[SST:1, SD:009000]
+#
+#  sbi:
+#    client:
+#      nsi:
+#        - uri: http://[::1]:7777
+#          s_nssai:
+#            sst: 1
+#        - uri: http://127.0.0.19:7777
+#          s_nssai:
+#            sst: 1
+#            sd: 000080
+#        - uri: http://127.0.0.10:7777
+#          s_nssai:
+#            sst: 1
+#            sd: 009000
+#
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+#  o Indirect communication with delegated discovery
+#  sbi:
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#
+#  o Indirect communication without delegated discovery
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  discovery:
+#    delegated: no
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/nssf.key
+#        cert: @sysconfdir@/open5gs/tls/nssf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: nssf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#      nsi:
+#        - uri: https://nrf.localdomain
+#          s_nssai:
+#            sst: 1
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/nssf.key
+#        cert: @sysconfdir@/open5gs/tls/nssf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/nssf.key
+#        client_cert: @sysconfdir@/open5gs/tls/nssf.crt
+#  sbi:
+#    server:
+#      - address: nssf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#      nsi:
+#        - uri: https://nrf.localdomain
+#          s_nssai:
+#            sst: 1

configs/open5gs/pcf.yaml.in

@@ -0,0 +1,228 @@
+db_uri: mongodb://localhost/open5gs
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/pcf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+pcf:
+  sbi:
+    server:
+      - address: 127.0.0.13
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+  metrics:
+    server:
+      - address: 127.0.0.13
+        port: 9090
+
+################################################################################
+# Locally configured policy
+# - The PCF in the VPLMN uses locally configured policies
+#   according to the roaming agreement with the HPLMN operator
+#   as input for PCC Rule generation.
+################################################################################
+#
+#  o You don't have to use MongoDB if you use the policy configuration as below.
+#
+#  policy:
+#    - plmn_id:
+#        mcc: 999
+#        mnc: 70
+#      slice:
+#        - sst: 1  # 1,2,3,4
+#          default_indicator: true
+#          session:
+#            - name: internet
+#              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+#              ambr:
+#                downlink:
+#                  value: 1
+#                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                uplink:
+#                  value: 1
+#                  unit: 3
+#              qos:
+#                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#                arp:
+#                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+#                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+#            - name: ims
+#              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+#              ambr:
+#                downlink:
+#                  value: 1
+#                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                uplink:
+#                  value: 1
+#                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#              qos:
+#                index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#                arp:
+#                  priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+#                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+#              pcc_rule:
+#                - qos:
+#                    index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#                    arp:
+#                      priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#                      pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+#                      pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+#                    mbr:
+#                      downlink:
+#                        value: 82
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                      uplink:
+#                        value: 82
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                    gbr:
+#                      downlink:
+#                        value: 82
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                      uplink:
+#                        value: 82
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                  flow:
+#                    - direction: 2
+#                      description: "permit out icmp from any to assigned"
+#                    - direction: 1
+#                      description: "permit out icmp from any to assigned"
+#                    - direction: 2
+#                      description: "permit out udp from 10.200.136.98/32 23455 to assigned 1-65535"
+#                    - direction: 1
+#                      description: "permit out udp from 10.200.136.98/32 1-65535 to assigned 50021"
+#                - qos:
+#                    index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#                    arp:
+#                      priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#                      pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+#                      pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+#                    mbr:
+#                      downlink:
+#                        value: 802
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                      uplink:
+#                        value: 802
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                    gbr:
+#                      downlink:
+#                        value: 802
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                      uplink:
+#                        value: 802
+#                        unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#    - plmn_id:
+#        mcc: 001
+#        mnc: 01
+#      slice:
+#        - sst: 1  # 1,2,3,4
+#          sd: 000001
+#          default_indicator: true
+#          session:
+#            - name: internet
+#              type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+#              ambr:
+#                downlink:
+#                  value: 1
+#                  unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#                uplink:
+#                  value: 1
+#                  unit: 3
+#              qos:
+#                index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#                arp:
+#                  priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#                  pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+#                  pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+#
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-pcf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+#  o Indirect communication with delegated discovery
+#  sbi:
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#
+#  o Indirect communication without delegated discovery
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  discovery:
+#    delegated: no
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/pcf.key
+#        cert: @sysconfdir@/open5gs/tls/pcf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: pcf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/pcf.key
+#        cert: @sysconfdir@/open5gs/tls/pcf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/pcf.key
+#        client_cert: @sysconfdir@/open5gs/tls/pcf.crt
+#  sbi:
+#    server:
+#      - address: pcf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain

configs/open5gs/pcrf.yaml.in

@@ -0,0 +1,101 @@
+db_uri: mongodb://localhost/open5gs
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/pcrf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+pcrf:
+  freeDiameter: @sysconfdir@/freeDiameter/pcrf.conf
+
+################################################################################
+# Locally configured policy
+################################################################################
+#
+#  o You don't have to use MongoDB if you use the policy configuration as below.
+#
+#  session:
+#    - name: internet
+#      type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+#      ambr:
+#        downlink:
+#          value: 1
+#          unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#        uplink:
+#          value: 1
+#          unit: 3
+#      qos:
+#        index: 9  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#        arp:
+#          priority_level: 8  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#          pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+#          pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+#    - name: ims
+#      type: 3  # 1:IPv4, 2:IPv6, 3:IPv4v6
+#      ambr:
+#        downlink:
+#          value: 1
+#          unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#        uplink:
+#          value: 1
+#          unit: 3  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#      qos:
+#        index: 5  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#        arp:
+#          priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#          pre_emption_vulnerability: 1  # 1: Disabled, 2:Enabled
+#          pre_emption_capability: 1  # 1: Disabled, 2:Enabled
+#      pcc_rule:
+#        - qos:
+#            index: 1  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#            arp:
+#              priority_level: 1  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#              pre_emption_vulnerability: 1   # 1: Disabled, 2:Enabled
+#              pre_emption_capability: 1   # 1: Disabled, 2:Enabled
+#            mbr:
+#              downlink:
+#                value: 82
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#              uplink:
+#                value: 82
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#            gbr:
+#              downlink:
+#                value: 82
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#              uplink:
+#                value: 82
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#          flow:
+#            - direction: 2
+#              description: "permit out icmp from any to assigned"
+#            - direction: 1
+#              description: "permit out icmp from any to assigned"
+#            - direction: 2
+#              description: "permit out udp from 10.200.136.98/32 23455 to assigned 1-65535"
+#            - direction: 1
+#              description: "permit out udp from 10.200.136.98/32 1-65535 to assigned 50021"
+#        - qos:
+#            index: 2  # 1, 2, 3, 4, 65, 66, 67, 75, 71, 72, 73, 74, 76, 5, 6, 7, 8, 9, 69, 70, 79, 80, 82, 83, 84, 85, 86
+#            arp:
+#              priority_level: 4  # 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
+#              pre_emption_vulnerability: 2   # 1: Disabled, 2:Enabled
+#              pre_emption_capability: 2   # 1: Disabled, 2:Enabled
+#            mbr:
+#              downlink:
+#                value: 802
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#              uplink:
+#                value: 802
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#            gbr:
+#              downlink:
+#                value: 802
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#              uplink:
+#                value: 802
+#                unit: 1  # 0:bps, 1:Kbps, 2:Mbps, 3:Gbps, 4:Tbps
+#

configs/open5gs/scp.yaml.in

@@ -0,0 +1,127 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/scp.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+scp:
+  sbi:
+    server:
+      - address: 127.0.0.200
+        port: 7777
+    client:
+      nrf:
+        - uri: http://127.0.0.10:7777
+
+################################################################################
+# SCP Info
+################################################################################
+#  o SCP port number(s) WITHOUT SCP Domain
+#   - If no SCP port information is present in ScpInfo or
+#     in ScpDomainInfo for a specific SCP domain,
+#     the HTTP client shall use the default HTTP port number,
+#     i.e. TCP port 80 for "http" URIs or TCP port 443
+#     for "https" URIs as specified in IETF RFC 7540 [9]
+#     when sending a request to the SCP within the specific SCP domain.
+#  info:
+#    port:
+#      http: 7777
+#      https: 8888
+#
+#  o SCP port number(s) WITH SCP Domain
+#   - If this attribute is present,
+#     it has precedence over the scpPorts attribute of ScpInfo.
+#  info:
+#    domain:
+#      - name: SCP_Domain_1
+#        fqdn: scp.localdomain
+#        port:
+#          http: 7777
+#          https: 8888
+#
+#  o Complex Example
+#  info:
+#    port:
+#      http: 7777
+#      https: 8888
+#    domain:
+#      - name: SCP_Domain_1
+#        fqdn: scp.hplmndomain
+#        port:
+#          http: 3333
+#          https: 4444
+#      - name: SCP_Domain_2
+#        fqdn: scp.vplmndomain
+#        port:
+#          http: 5555
+#          https: 6666
+#
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-scp.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/scp.key
+#        cert: @sysconfdir@/open5gs/tls/scp.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: scp.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/scp.key
+#        cert: @sysconfdir@/open5gs/tls/scp.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/scp.key
+#        client_cert: @sysconfdir@/open5gs/tls/scp.crt
+#  sbi:
+#    server:
+#      - address: scp.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain

configs/open5gs/sepp1.yaml.in

@@ -0,0 +1,255 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/sepp1.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @sysconfdir@/open5gs/tls/sepp1.key
+        cert: @sysconfdir@/open5gs/tls/sepp1.crt
+      client:
+        cacert: @sysconfdir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.1.250
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+  n32:
+    server:
+      - sender: sepp1.localdomain
+        scheme: https
+        address: 127.0.1.251
+        port: 7777
+        n32f:
+          scheme: https
+          address: 127.0.1.252
+          port: 7777
+    client:
+      sepp:
+        - receiver: sepp2.localdomain
+          uri: https://sepp2.localdomain:7777
+          resolve: 127.0.2.251
+          n32f:
+            uri: https://sepp2.localdomain:7777
+            resolve: 127.0.2.252
+
+################################################################################
+# SEPP Info
+################################################################################
+#  o SEPP port number(s) for HTTP and/or HTTPS
+#   - This attribute shall be present if the SEPP uses non-default HTTP and/or
+#     HTTPS ports. When present, it shall contain the HTTP and/or HTTPS ports.
+#     (Minimum: 0 Maximum: 65535)
+#  info:
+#    port:
+#      http: 7777
+#      https: 8888
+#
+################################################################################
+# No TLS - N32 Server/Client
+################################################################################
+#  o SEPP uses the same interface that other NFs(NRF, AMF, ...) use.
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: http://127.0.2.250:7777
+#
+#  o SEPP uses a separate interface
+#    that is different from those used by other NFs.
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#        address: 127.0.1.251
+#        port: 7777
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: http://127.0.2.251:7777
+#
+#  o Not only SEPP but also the N32 forwarding uses a separate interface
+#    that is different from those used by other NFs.
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#        address: 127.0.1.251
+#        port: 7777
+#        n32f:
+#          address: 127.0.1.252
+#          port: 7777
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: http://127.0.2.251:7777
+#          n32f:
+#            uri: http://127.0.2.252:7777
+#
+################################################################################
+# HTTPS scheme with TLS - N32 Server/Client
+################################################################################
+#
+#  o Only N32 uses HTTPS with TLS, while other NFs use HTTP without TLS.
+#  default:
+#    tls:
+#      server:
+#        private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#        cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#      client:
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#        scheme: https
+#        address: 127.0.1.251
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: https://sepp2.localdomain
+#          resolve: 127.0.2.251
+#
+#  o Add client TLS verification to N32 interface
+#  default:
+#    tls:
+#      server:
+#        private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#        cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#        client_cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#        scheme: https
+#        address: 127.0.1.251
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: https://sepp2.localdomain
+#          resolve: 127.0.2.251
+#
+#  o Both SEPP and N32 forwarding also uses HTTPS with TLS,
+#    while other NFs use HTTP without TLS.
+#  default:
+#    tls:
+#      server:
+#        private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#        cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#        client_cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#        scheme: https
+#        address: 127.0.1.251
+#        n32f:
+#          scheme: https
+#          address: 127.0.1.252
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: https://sepp2.localdomain
+#          resolve: 127.0.2.251
+#          n32f:
+#            uri: https://sepp2.localdomain
+#            resolve: 127.0.2.252
+#
+#  o N32 control and N32 forwarding interface use different key/certificate.
+#  sbi:
+#    server:
+#      - address: 127.0.1.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp1.localdomain
+#        scheme: https
+#        address: 127.0.1.251
+#        private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#        cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        n32f:
+#          scheme: https
+#          address: 127.0.1.252
+#          private_key: @sysconfdir@/open5gs/tls/sepp1-n32f.key
+#          cert: @sysconfdir@/open5gs/tls/sepp1-n32f.crt
+#          verify_client: true
+#          verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#    client:
+#      sepp:
+#        - receiver: sepp2.localdomain
+#          uri: https://sepp2.localdomain
+#          resolve: 127.0.2.251
+#          cacert: @sysconfdir@/open5gs/tls/ca.crt
+#          client_private_key: @sysconfdir@/open5gs/tls/sepp1.key
+#          client_cert: @sysconfdir@/open5gs/tls/sepp1.crt
+#          n32f:
+#            uri: https://sepp2.localdomain
+#            resolve: 127.0.2.252
+#            cacert: @sysconfdir@/open5gs/tls/ca.crt
+#            client_private_key: @sysconfdir@/open5gs/tls/sepp1-n32f.key
+#            client_cert: @sysconfdir@/open5gs/tls/sepp1-n32f.crt

configs/open5gs/sepp2.yaml.in

@@ -0,0 +1,255 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/sepp2.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+sepp:
+  default:
+    tls:
+      server:
+        private_key: @sysconfdir@/open5gs/tls/sepp2.key
+        cert: @sysconfdir@/open5gs/tls/sepp2.crt
+      client:
+        cacert: @sysconfdir@/open5gs/tls/ca.crt
+  sbi:
+    server:
+      - address: 127.0.2.250
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+  n32:
+    server:
+      - sender: sepp2.localdomain
+        scheme: https
+        address: 127.0.2.251
+        port: 7777
+        n32f:
+          scheme: https
+          address: 127.0.2.252
+          port: 7777
+    client:
+      sepp:
+        - receiver: sepp1.localdomain
+          uri: https://sepp1.localdomain:7777
+          resolve: 127.0.1.251
+          n32f:
+            uri: https://sepp1.localdomain:7777
+            resolve: 127.0.1.252
+
+################################################################################
+# SEPP Info
+################################################################################
+#  o SEPP port number(s) for HTTP and/or HTTPS
+#   - This attribute shall be present if the SEPP uses non-default HTTP and/or
+#     HTTPS ports. When present, it shall contain the HTTP and/or HTTPS ports.
+#     (Minimum: 0 Maximum: 65535)
+#  info:
+#    port:
+#      http: 7777
+#      https: 8888
+#
+################################################################################
+# No TLS - N32 Server/Client
+################################################################################
+#  o SEPP uses the same interface that other NFs(NRF, AMF, ...) use.
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: http://127.0.1.250:7777
+#
+#  o SEPP uses a separate interface
+#    that is different from those used by other NFs.
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#        address: 127.0.2.251
+#        port: 7777
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: http://127.0.1.251:7777
+#
+#  o Not only SEPP but also the N32 forwarding uses a separate interface
+#    that is different from those used by other NFs.
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#        address: 127.0.2.251
+#        port: 7777
+#        n32f:
+#          address: 127.0.2.252
+#          port: 7777
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: http://127.0.1.251:7777
+#          n32f:
+#            uri: http://127.0.1.252:7777
+#
+################################################################################
+# HTTPS scheme with TLS - N32 Server/Client
+################################################################################
+#
+#  o Only N32 uses HTTPS with TLS, while other NFs use HTTP without TLS.
+#  default:
+#    tls:
+#      server:
+#        private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#        cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#      client:
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#        scheme: https
+#        address: 127.0.2.251
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: https://sepp1.localdomain
+#          resolve: 127.0.1.251
+#
+#  o Add client TLS verification to N32 interface
+#  default:
+#    tls:
+#      server:
+#        private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#        cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#        client_cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#        scheme: https
+#        address: 127.0.2.251
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: https://sepp1.localdomain
+#          resolve: 127.0.1.251
+#
+#  o Both SEPP and N32 forwarding also uses HTTPS with TLS,
+#    while other NFs use HTTP without TLS.
+#  default:
+#    tls:
+#      server:
+#        private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#        cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#        client_cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#        scheme: https
+#        address: 127.0.2.251
+#        n32f:
+#          scheme: https
+#          address: 127.0.2.252
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: https://sepp1.localdomain
+#          resolve: 127.0.1.251
+#          n32f:
+#            uri: https://sepp1.localdomain
+#            resolve: 127.0.1.252
+#
+#  o N32 control and N32 forwarding interface use different key/certificate.
+#  sbi:
+#    server:
+#      - address: 127.0.2.250
+#        port: 7777
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  n32:
+#    server:
+#      - sender: sepp2.localdomain
+#        scheme: https
+#        address: 127.0.2.251
+#        private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#        cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        n32f:
+#          scheme: https
+#          address: 127.0.2.252
+#          private_key: @sysconfdir@/open5gs/tls/sepp2-n32f.key
+#          cert: @sysconfdir@/open5gs/tls/sepp2-n32f.crt
+#          verify_client: true
+#          verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#    client:
+#      sepp:
+#        - receiver: sepp1.localdomain
+#          uri: https://sepp1.localdomain
+#          resolve: 127.0.1.251
+#          cacert: @sysconfdir@/open5gs/tls/ca.crt
+#          client_private_key: @sysconfdir@/open5gs/tls/sepp2.key
+#          client_cert: @sysconfdir@/open5gs/tls/sepp2.crt
+#          n32f:
+#            uri: https://sepp1.localdomain
+#            resolve: 127.0.1.252
+#            cacert: @sysconfdir@/open5gs/tls/ca.crt
+#            client_private_key: @sysconfdir@/open5gs/tls/sepp2-n32f.key
+#            client_cert: @sysconfdir@/open5gs/tls/sepp2-n32f.crt

configs/open5gs/sgwc.yaml.in

@@ -0,0 +1,70 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/sgwc.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+sgwc:
+  gtpc:
+    server:
+      - address: 127.0.0.3
+  pfcp:
+    server:
+      - address: 127.0.0.3
+    client:
+      sgwu:
+        - address: 127.0.0.6
+
+################################################################################
+# GTP-C Server
+################################################################################
+#  o Listen on IPv4 and IPv6
+#  gtpc:
+#    server:
+#      - address: 127.0.0.3
+#      - address: fd69:f21d:873c:fa::2
+#
+################################################################################
+# PFCP Server
+################################################################################
+#  o Override PFCP address to be advertised to SGW-U in PFCP association
+#  pfcp:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-sgwc.svc.local
+#
+################################################################################
+# PFCP Client
+################################################################################
+#  o SGWU selection by eNodeB TAC
+#   (either single TAC or multiple TACs, DECIMAL representation)
+#  pfcp:
+#    client:
+#      sgwu:
+#        - address: 127.0.0.6
+#          tac: 1
+#        - address: 127.0.0.12
+#          tac: [3,5,8]
+#
+#  o SGWU selection by UE's APN (either single APN or multiple APNs)
+#  pfcp:
+#    client:
+#      sgwu:
+#        - address: 127.0.0.6
+#          apn: ims
+#        - address: 127.0.0.12
+#          apn: [internet, web]
+#
+#  o SGWU selection by CellID(e_cell_id: 28bit)
+#   (either single e_cell_id or multiple e_cell_id, HEX representation)
+#  pfcp:
+#    client:
+#      sgwu:
+#        - address: 127.0.0.6
+#          e_cell_id: 463
+#        - address: 127.0.0.12
+#          e_cell_id: [123456789, 9413]

configs/open5gs/sgwu.yaml.in

@@ -0,0 +1,52 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/sgwu.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+sgwu:
+  pfcp:
+    server:
+      - address: 127.0.0.6
+    client:
+#      sgwc:    # SGW-U PFCP Client try to associate SGW-C PFCP Server
+#        - address: 127.0.0.3
+  gtpu:
+    server:
+      - address: 127.0.0.6
+
+################################################################################
+# PFCP Server
+################################################################################
+#  o Override PFCP address to be advertised to SGW-C in PFCP association
+#  pfcp:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-sgwu.svc.local
+#
+################################################################################
+# GTP-U Server
+################################################################################
+#  o Override SGW-U GTP-U address to be advertised inside S1AP messages 
+#  gtpu:
+#    server:
+#      - dev: ens3
+#        advertise: sgw1.epc.mnc001.mcc001.3gppnetwork.org
+#
+#  o User Plane IP Resource information
+#  gtpu:
+#    server:
+#      - address: 127.0.0.6
+#        teid_range_indication: 4
+#        teid_range: 10
+#        network_instance: internet
+#        source_interface: 0
+#      - address: 127.0.10.4
+#        teid_range_indication: 4
+#        teid_range: 5
+#        network_instance: ims
+#        source_interface: 1

configs/open5gs/smf.yaml.in

@@ -0,0 +1,362 @@
+logger:
+  file:
+    path: @localstatedir@/log/open5gs/smf.log
+#  level: info   # fatal|error|warn|info(default)|debug|trace
+
+global:
+  max:
+    ue: 1024  # The number of UE can be increased depending on memory size.
+#    peer: 64
+
+smf:
+  sbi:
+    server:
+      - address: 127.0.0.4
+        port: 7777
+    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+      scp:
+        - uri: http://127.0.0.200:7777
+  pfcp:
+    server:
+      - address: 127.0.0.4
+    client:
+      upf:
+        - address: 127.0.0.7
+  gtpc:
+    server:
+      - address: 127.0.0.4
+  gtpu:
+    server:
+      - address: 127.0.0.4
+  metrics:
+    server:
+      - address: 127.0.0.4
+        port: 9090
+  session:
+    - subnet: 10.45.0.0/16
+      gateway: 10.45.0.1
+    - subnet: 2001:db8:cafe::/48
+      gateway: 2001:db8:cafe::1
+  dns:
+    - 8.8.8.8
+    - 8.8.4.4
+    - 2001:4860:4860::8888
+    - 2001:4860:4860::8844
+  mtu: 1400
+#  p-cscf:
+#    - 127.0.0.1
+#    - ::1
+#  ctf:
+#    enabled: auto   # auto(default)|yes|no
+  freeDiameter: @sysconfdir@/freeDiameter/smf.conf
+
+################################################################################
+# SMF Info
+################################################################################
+#  <SMF Selection - 5G Core only>
+#  1. SMF sends SmfInfo(S-NSSAI, DNN, TAI) to the NRF
+#  2. NRF responds to AMF with SmfInfo during NF-Discovery.
+#  3. AMF selects SMF based on S-NSSAI, DNN and TAI in SmfInfo.
+#
+#  Note that if there is no SmfInfo, any AMF can select this SMF.
+#
+#  o S-NSSAI[SST:1] and DNN[internet] - At least 1 DNN is required in S-NSSAI
+#  info:
+#    - s_nssai:
+#        - sst: 1
+#          dnn:
+#            - internet
+#
+#  o S-NSSAI[SST:1 SD:009000] and DNN[internet or ims]
+#  info:
+#    - s_nssai:
+#        - sst: 1
+#          sd: 009000
+#          dnn:
+#            - internet
+#            - ims
+#
+#  o S-NSSAI[SST:1] and DNN[internet] and TAI[PLMN-ID:99970 TAC:1]
+#  info:
+#    - s_nssai:
+#        - sst: 1
+#          dnn:
+#            - internet
+#      tai:
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac: 1
+#
+#  o If any of conditions below are met:
+#   - S-NSSAI[SST:1] and DNN[internet] and TAI[PLMN-ID:99970 TAC:1-9]
+#   - S-NSSAI[SST:2 SD:000080] and DNN[internet or ims]
+#   - S-NSSAI[SST:4] and DNN[internet] and TAI[PLMN-ID:99970 TAC:10-20,30-40]
+#  info:
+#    - s_nssai:
+#        - sst: 1
+#          dnn:
+#            - internet
+#      tai:
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac:
+#            - 1-9
+#    - s_nssai:
+#        - sst: 2
+#          sd: 000080
+#          dnn:
+#            - internet
+#            - ims
+#    - s_nssai:
+#        - sst: 4
+#          dnn:
+#            - internet
+#      tai:
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac:
+#            - 10-20
+#            - 30-40
+#
+#  o Complex Example
+#  info:
+#    - s_nssai:
+#        - sst: 1
+#          dnn:
+#            - internet
+#        - sst: 1
+#          sd: 000080
+#          dnn:
+#            - internet
+#            - ims
+#        - sst: 1
+#          sd: 009000
+#          dnn:
+#            [internet, ims]
+#        - sst: 2
+#          dnn:
+#            - internet
+#        - sst: 3
+#          sd: 123456
+#          dnn:
+#            - internet
+#      tai:
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac: [1, 2, 3]
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac: 4
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac:
+#            - 5
+#            - 6
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac:
+#            - 100-200
+#            - 300-400
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac:
+#            - 500-600
+#            - 700-800
+#            - 900-1000
+#    - s_nssai:
+#        - sst: 4
+#          dnn:
+#            - internet
+#      tai:
+#        - plmn_id:
+#            mcc: 999
+#            mnc: 70
+#          tac: 99
+#
+################################################################################
+# SBI Server
+################################################################################
+#  o Override SBI address to be advertised to NRF
+#  sbi:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-smf.svc.local
+#
+#  sbi:
+#    server:
+#      - address: localhost
+#        advertise:
+#          - 127.0.0.99
+#          - ::1
+#
+################################################################################
+# SBI Client
+################################################################################
+#  o Direct communication with NRF interaction
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#
+#  o Indirect communication with delegated discovery
+#  sbi:
+#    client:
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#
+#  o Indirect communication without delegated discovery
+#  sbi:
+#    client:
+#      nrf:
+#        - uri: http://127.0.0.10:7777
+#      scp:
+#        - uri: http://127.0.0.200:7777
+#  discovery:
+#    delegated: no
+#
+################################################################################
+# HTTPS scheme with TLS
+################################################################################
+#  o Set as default if not individually set
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/smf.key
+#        cert: @sysconfdir@/open5gs/tls/smf.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#  sbi:
+#    server:
+#      - address: smf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+#  o Add client TLS verification
+#  default:
+#    tls:
+#      server:
+#        scheme: https
+#        private_key: @sysconfdir@/open5gs/tls/smf.key
+#        cert: @sysconfdir@/open5gs/tls/smf.crt
+#        verify_client: true
+#        verify_client_cacert: @sysconfdir@/open5gs/tls/ca.crt
+#      client:
+#        scheme: https
+#        cacert: @sysconfdir@/open5gs/tls/ca.crt
+#        client_private_key: @sysconfdir@/open5gs/tls/smf.key
+#        client_cert: @sysconfdir@/open5gs/tls/smf.crt
+#  sbi:
+#    server:
+#      - address: smf.localdomain
+#    client:
+#      nrf:
+#        - uri: https://nrf.localdomain
+#
+################################################################################
+# PFCP Server
+################################################################################
+#  o Override PFCP address to be advertised to UPF in PFCP association
+#  pfcp:
+#    server:
+#      - dev: eth0
+#        advertise: open5gs-smf.svc.local
+#
+################################################################################
+# PFCP Client
+################################################################################
+#  o UPF selection by eNodeB TAC
+#   (either single TAC or multiple TACs, DECIMAL representation)
+#  pfcp:
+#    client:
+#      upf:
+#        - address: 127.0.0.7
+#          tac: 1
+#        - address: 127.0.0.12
+#          tac: [3,5,8]
+#
+#  o UPF selection by UE's DNN/APN (either single DNN/APN or multiple DNNs/APNs)
+#  pfcp:
+#    client:
+#      upf:
+#        - address: 127.0.0.7
+#          dnn: ims
+#        - address: 127.0.0.12
+#          dnn: [internet, web]
+#
+#  o UPF selection by CellID(e_cell_id: 28bit, nr_cell_id: 36bit)
+#    (either single enb_id or multiple enb_ids, HEX representation)
+#  pfcp:
+#    client:
+#      upf:
+#        - address: 127.0.0.7
+#          e_cell_id: 463
+#        - address: 127.0.0.12
+#          nr_cell_id: [123456789, 9413]
+#
+################################################################################
+# GTP-C Server
+################################################################################
+#  o Listen on IPv4 and IPv6
+#  gtpc:
+#    server:
+#      - address: 127.0.0.4
+#      - address: fd69:f21d:873c:fa::3
+#
+################################################################################
+# GTP-U Server
+################################################################################
+#  o Listen on IPv4 and IPv6
+#  gtpu:
+#    server:
+#      - address: 127.0.0.4
+#      - address: ::1
+#
+################################################################################
+# 3GPP Specification
+################################################################################
+#  o Specific DNN/APN(e.g 'ims') uses 10.46.0.1/16, 2001:db8:babe::1/48
+#   (If the UE has unknown DNN/APN(not internet/ims), SMF/UPF will crash.)
+#  session:
+#    - subnet: 10.45.0.0/16
+#      gateway: 10.45.0.1
+#      dnn: internet
+#    - subnet: 2001:db8:cafe::/48
+#      dnn: internet
+#    - subnet: 10.46.0.0/16
+#      gateway: 10.46.0.1
+#      dnn: ims
+#    - subnet: 2001:db8:babe::/48
+#      dnn: ims
+#
+#  o Pool Range
+#  session:
+#    - subnet: 10.45.0.0/16
+#      gateway: 10.45.0.1
+#      range:
+#        - 10.45.0.100-10.45.0.200
+#        - 10.45.1.100-
+#        - -10.45.0.200
+#    - subnet: 2001:db8:cafe::/48
+#      range:
+#        - 2001:db8:cafe:a0::0-2001:db8:cafe:b0::0
+#        - 2001:db8:cafe:c0::0-2001:db8:cafe:d0::0
+#
+#  o Security Indication(5G Core only)
+#  security_indication:
+#    integrity_protection_indication: required|preferred|not-needed
+#    confidentiality_protection_indication: required|preferred|not-needed
+#    maximum_integrity_protected_data_rate_uplink: bitrate64kbs|maximum-UE-rate
+#    maximum_integrity_protected_data_rate_downlink: bitrate64kbs|maximum-UE-rate

configs/open5gs/tls/amf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDWzCCAkOgAwIBAgIBATANBgkqhkiG9w0BAQsFADBJMRcwFQYDVQQDDA5jYS5s
+b2NhbGRvbWFpbjELMAkGA1UEBhMCS08xDjAMBgNVBAgMBVNlb3VsMREwDwYDVQQK
+DAhOZW9QbGFuZTAeFw0yMzA5MzAyMjU5MDZaFw0zMzA5MjcyMjU5MDZaMEoxCzAJ
+BgNVBAYTAktPMQ4wDAYDVQQIDAVTZW91bDERMA8GA1UECgwITmVvUGxhbmUxGDAW
+BgNVBAMMD2FtZi5sb2NhbGRvbWFpbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
+AQoCggEBAMgxuA/+na3AK01hZtQ0x202EBOHlaenDJiN34N8XnOpv9QG4/OYeY7P
+kWqB1A/K0baSVik4kRsuQV5RArDDB71eLujnVmAl/AATvUS+6Lwp9VPdX40gfSbX
+XvDQIoXUXKD6Y4TpzZcTuoJjK7d25a402gs4fbQNi3+cUu0bGgqVRO6rDWYFiQYA
+bC8tSB8ze+Rpk37AleHtp72zQyjGSsAkmFf8Orf0VMBzOX0RcTWwXk31qJgd6L07
+gkIr+FTr0Qn/HHKaax4ipFQFGIZHGNXmArgUTh5gzAFHkhf3GGicJ9CQdARh8/65
+Gtf1LUHCG9o4ZLZuY5jbGa1LdjiLydMCAwEAAaNNMEswCQYDVR0TBAIwADAdBgNV
+HQ4EFgQUj77fWkkYf0fjHacP0JoGd8w72w0wHwYDVR0jBBgwFoAU2xbCTj9E9Ha4
+EurcTxHWMflmx3wwDQYJKoZIhvcNAQELBQADggEBAKXR8GHfuUWI1EJzDK0pSrKm
+vezZYYBgy1QSgdPlVCyeprJlrKKstOA7P103hKI+OhTCqx6DOVsa0N3NdipSt0NF
+walBbW+LbvcjTOYExjSwydv+wkran2fJVpnPA/ZYoWvm8e9tulsM79PRTD//B4Vq
+6DRDQehryNr+O5ML5A8x9pFdXGGcv1ker8kgaW2IrtXv6PLH3A6u9+90ffdQwFET
+Q/qaDD6UXcTBZGTPrlf70GDvc1COMi2tlIM1NmXHImo5L7Z8knLThq3e0waJECnM
+SABIMkvjijnoVXKjMrKgQ9gd9Osp95E1Pysc23TtLH3jtYxfxPOYMJvpK1O2S4M=
+-----END CERTIFICATE-----

configs/open5gs/tls/amf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICjzCCAXcCAQAwSjEYMBYGA1UEAwwPYW1mLmxvY2FsZG9tYWluMQswCQYDVQQG
+EwJLTzEOMAwGA1UECAwFU2VvdWwxETAPBgNVBAoMCE5lb1BsYW5lMIIBIjANBgkq
+hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDG4D/6drcArTWFm1DTHbTYQE4eVp6cM
+mI3fg3xec6m/1Abj85h5js+RaoHUD8rRtpJWKTiRGy5BXlECsMMHvV4u6OdWYCX8
+ABO9RL7ovCn1U91fjSB9Jtde8NAihdRcoPpjhOnNlxO6gmMrt3blrjTaCzh9tA2L
+f5xS7RsaCpVE7qsNZgWJBgBsLy1IHzN75GmTfsCV4e2nvbNDKMZKwCSYV/w6t/RU
+wHM5fRFxNbBeTfWomB3ovTuCQiv4VOvRCf8ccpprHiKkVAUYhkcY1eYCuBROHmDM
+AUeSF/cYaJwn0JB0BGHz/rka1/UtQcIb2jhktm5jmNsZrUt2OIvJ0wIDAQABoAAw
+DQYJKoZIhvcNAQELBQADggEBACPQGxY87LUNIvvWqwDDLnZmV5sj5EA6O9gtlmbs
+Eukjh3xnvGOEo7hpka0eM1EYX63trB3pv21kfU/SNiZNiqaKtBWbL3dvrEF7DERd
+1HQDHOmpNUc9WvZ2vfrXhUqR7eDp6lyHiqu1Ij0fQOoV3h7uEFqw/wDFEzi/aIOp
+66xKiqlsaPKbRQn0wmbUHNgLzjlllw+BQxIupCg83T2z77Mjz3gTiKIxcF3yZmRP
+oOOHD39tcBT0DgpzafPC83WzGjoxbeQ0DRTvUTGWayz+7NsFmxrsqVsJcx0Q8gNw
+HL2+9OHptC2DH1cj9FqbcU5KvdyzDYaUKSZualNkgAo5nuI=
+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/amf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/ausf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

configs/open5gs/tls/ausf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/ausf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/bsf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

configs/open5gs/tls/bsf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/bsf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC3H4rd9WbI+A5v
+LwS2isKzu4nTzaMTe41EEz3QUefhAOoNWzGbciqg0k4qPxUdgZyhqAhvXkZs+8iH
+Tf3LY4qTP3/nOOBJcVq9lKayYoX2nibY9Mg8MQIVrMXW8xkwQJM+fEKANITgB5PI
+0u5+YxwpQ7VByx6WsAcb6SG0sqUVEez9QTl7Sry7wgEnGN9bIG6l6Mnqx9ceinQK
+vh9aPKIbOlEIRd8d33HmNMPe1jiuBjc+iSoIoLnPGTZibd6/zaLY0qnwx6LHlJgi
+8WNZ2YEQ4QusjpQIYGbd8FOr3GQRmaHfkSu3T6m+nWemsMrmWL9r2OHJPk0MHWzE
+F+qVOINTAgMBAAECggEAApHf2VD0aGiWwN4VJllyW9Xxz4LPJ/RWNxJzQR7Z7rEc
+SvCwx9PFbMYjkHmb9CYmZELFgrtjdWvfh6Qpph0kMjNnbTLB1Wk3H61cEE/MPa0N
+fxwisGzA1zxtkFOPOTttKMJsp0ju/m4//cb8AtKlCaBohRJZJqTOWYifHCtcbRwl
+OsSh1hRTJfLX7KH3JRHTGv3M+soYD0PCj3/5C2GZRdc0w8WGmp55pQWf13OmYbb3
+oVXZAg9aZmaFV1oeVoRAVqS1WZNiufsnbaOjzNrBoz+FbZRJCu8QFAawKx2yU15u
+Svsn6mq1jp6DoxzWtP151ZG4V+h41UIMx4KwQqN46QKBgQC3iwe8eIbV/ygIuHGe
+S2vNxhBd7AEQvRwE0p0rgSPOSYpQz/H8F4wEiqWtvOpeoiD2CEcTcUgAPNwGxUM7
+wSgk70DBDjEy4a76Pf9ET60RFNQn6sv0pKX7B+/s5A8m0A6D4uuBADxrNYI7etR/
+hTbNqMBhlODoGZV1PpWhJjUUOwKBgQD/ahRa4bU5eGE42XWvnOTfqoLyuFxgEe2+
+1selHXnYgyR9UUVHuEgp/1JjWpiWY5cqIseZ+JXq75ejf8/JF133zdVFzaVM6yKo
+HJje6LpQwJP6+KXAXnAgNfyPzu/wKYimg9tVfc+yEkkrGyqIm9d6gPG5EF6irWvQ
+rLW03q3TyQKBgEj49bJxGOqr73bIHiQZSFsfjBJLaoEFLsacFfDd/yZdBqjqhAL+
+OaT0mrpgia3mN8SZteh8+WtexvvKIdj4CsXkeZJH2jeokrDbRUobg2tvJIpaR4yU
+iYkstq8wXPXJcnvtFETNmzfkpkqPozyv8gICPbqOPn0I7usWXtcbIa9RAoGAU3+p
+ceCR71zUY9Jrr+KZzCkhMBpnUJzr3VS35dnSCJ8u4a0c+gpbxScMFyD5+0hJlePS
+3xouYKS9LR1On439EVMAIxbMsG26Yb0fmNf6eQXMGuMIxO/ath0QGS9sr1XUr6Mx
+pCxCJxPlSatS52ATPKBE5dxdI8+QDKM5sAyQRUkCgYBWu9dBiZVHQMAM3fwRXH0j
+MUxkvZCqXN532oY/DzN7KSpEidj/pifFSkfCtxSsMNYEt8TjxQ3aGngbo3KLLSgR
+KHveNNAC/cmsm+vOcwkByegxg3V1UjMBZZPDa8D5+EjdyMmw644kYsY+/MLaeC3f
++0AkmcNkkGEMf/vTkitaGg==
+-----END PRIVATE KEY-----

configs/open5gs/tls/ca.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

configs/open5gs/tls/ca.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/hss.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

configs/open5gs/tls/hss.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/hss.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/meson.build

@@ -0,0 +1,65 @@
+# Copyright (C) 2022 by Sukchan Lee <acetcom@gmail.com>
+
+# This file is part of Open5GS.
+
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+tls_sysconfdir = join_paths(open5gs_sysconfdir, 'tls')
+meson.add_install_script(python3_exe, '-c',
+        mkdir_p.format(tls_sysconfdir))
+
+tls_security = '''
+    ca.crt
+    amf.key
+    ausf.key
+    bsf.key
+    hss.key
+    mme.key
+    nrf.key
+    nssf.key
+    pcf.key
+    pcrf.key
+    scp.key
+    smf.key
+    udm.key
+    udr.key
+    amf.crt
+    ausf.crt
+    bsf.crt
+    hss.crt
+    mme.crt
+    nrf.crt
+    nssf.crt
+    pcf.crt
+    pcrf.crt
+    scp.crt
+    smf.crt
+    udm.crt
+    udr.crt
+    sepp1.key
+    sepp1.crt
+    sepp2.key
+    sepp2.crt
+    sepp3.key
+    sepp3.crt
+'''.split()
+
+foreach file : tls_security
+    gen = configure_file(
+            input : file,
+            output : file,
+            configuration : conf_data)
+    meson.add_install_script(python3_exe, '-c',
+            install_conf.format(gen, tls_sysconfdir))
+endforeach

configs/open5gs/tls/mme.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

configs/open5gs/tls/mme.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/mme.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/nrf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

configs/open5gs/tls/nrf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/nrf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCFvXrvgofr1rZT
+cotpCUZjMxQyN50oN1ArUhIKW/Rj+O27zkjtNf6bMIdmDCmhhUJZxwTBHx6SA2bo
+SOQg+z5xCVakhDvJiJCEmqc/sA2sI3Kim4pwzz0l5ImqPCVkPlzUc58OHSS+lkTE
+J65gG52sTXxQV9/JM7b1+Vbpt4a5U+CIpFaM6jtzvwbXSl0jjTIxNAI2up7QOeWy
+COPTS4kj+9CONlqOpRT+4efHDY21mc0Yo47Pu3ou9pludwa7PEk1hBAErXxxr6DV
+nt5b4sLyAU+hF1YW2qXVeh81DtXax9bgYeWYZJKgmJrsYYLhmhJCeOf9Q3tpfGt8
+fT6jNb3VAgMBAAECggEAC496bfOpjiBMOGBhXp33oKGMsF6QTiah3mzEtHKIaI/e
+9On68c5GCOIkAhUxEA410w7aAVuQR+zVW2TZm2Q8XIcDH0ty45PTcjLwHBg6xlN2
+GEo7qE6xqXHc2INEdCrT2WV5LT4lq/fPT+liMFqSwY8dHNDLvlejDBYWhjNgCOrw
+M48lXj+j8rx88qfjjFKEMMfGStSyw1XVu02VylByIUlsEA79yCeVO0Ri+UnXQx7q
+WcEKwWpEjkZuoGCMgD5HFZU13mlWz/0RvUKie5SgTr/amjCs9t8WKTVm74x7cU3j
+6IZ9V3fGnSvnSRNFpsuacsIuMQLL4iTCs2aPsrViTQKBgQC5IDipNwmn3I/ArgUY
+vSwlE8YNKPBM79BtekrjzRvhfcqxCSPys+LliTbyqcrXlSVwrxob9kTvvbwWl8Io
+5JoEbkzpIISKDaqnptArkViM3FqPTbUJwA4XftBURlFRJJLpkgeOEz83Tj0SAtVI
+UY1OixcR35tnD6RntgLkMtuHFwKBgQC48Q8KltwYBlTucP59pVNV5vo5FRD4Q4gD
+zXybNdnGNaT5UA/WSq1V4LHFLsHlTn6wKe/qfcWfyuK2OmMfsHVhY71MxwDO5uTy
+NW7z8fDAe90CHrmwLweeGK7BznS31L1vhjCAjehNOZH3w4SaohGt35KZMP+SV7xp
+LIEsJwF18wKBgDSMg+jsmY4PmrKb8xBpql0/9qkHpOaB8E0TOKzfLPneBiooqQ6c
+p1x2jaVmMxDs4jrRSX0Ec98FoZ1cKJ4I/fsiACzwsQ6rAHUkcdTcJiGd7wrciPYi
+kR10PtidOTnqQtWQQRrANeKSD93L9hTYKV9RNhQ5v9gKZaWW0c1K7muzAoGAQkJb
+WTfjctgR5bul8e4hhU1TqM/bXJcVTAd69UC93T2q9YexpNzsbTArgLHX1gfha8wa
+oLCe9TkDMLaKfPgDlfjeAXvq1jXzILP0JIIx90RpUjEf5fdzizjco6MMPjCCDkrN
+ZcFx0PknStVJ1PzryJepNilP52Z3olbHkMIIy/ECgYBVExbAI5E1JsLH4+IKmaRK
+gaUnQSeFjJd4pLAzoZLGomCJ4OXLQEay/GVAXhsaVDqP9VBaSUYOznhJkF5Y2rD0
+8AtoC1jm+X+yCHPIWEbLe8bgnr3HZ/t/byq7dNFPa2ZJt6UZMzYtnJXTl6f7Ez9q
+3/2imAM/UDKwPkr4pjJ6Ew==
+-----END PRIVATE KEY-----

configs/open5gs/tls/nssf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

configs/open5gs/tls/nssf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/nssf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/pcf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

configs/open5gs/tls/pcf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/pcf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/pcrf.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

configs/open5gs/tls/pcrf.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

configs/open5gs/tls/pcrf.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

configs/open5gs/tls/scp.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

configs/open5gs/tls/scp.csr

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----