IPX

Comfone Launches 5G SA Roaming with BroadForward SEPP

BroadForward’s SEPP goes live in Comfone’s IPX, enabling 5G Standalone Roaming services globally

Bern, 20 Oct 2025 – Comfone, a global leader in wholesale mobile roaming interconnect, hubbing, and clearing services, has commercially launched its 5G Standalone (SA) roaming signaling service, powered by BroadForward’s Security Edge Protection Proxy (SEPP). Following a year-long selection process and extensive live trials with two Asian operators, Comfone is now fully operational with live 5G SA roaming, offering mobile operators, MVNOs, and IoT providers scalable, secure, and future-ready roaming solutions. This includes support for GSMA-approved Hosted and Outsourced SEPP Deployment configurations. The BroadForward Security Edge Protection Proxy (SEPP) acts as a gateway that secures and manages all 5G SA roaming signaling, enabling Comfone to provide secure and reliable global connectivity. The BroadForward SEPP runs on the award-winning BFX Unified Signaling Core, a software architecture that supports a range of network functions from 2G to 5G. These include STP, DRA/DEA, SCP, signaling firewalls, and number portability. With a roaming legacy dating back to 1991, Comfone offers a comprehensive suite of IPX interconnect services, including GRX, SS7, Diameter, and HTTP/2 signaling, along with Data and Financial Clearing. The company’s unique centralized Roaming Hub Service, which adheres to GSMA specifications, allows operators to manage all roaming agreements and connections through a single contract connection, handling over 70,000 connections across more than 500 networks. BroadForward is a recognized market leader in signaling innovation, with its software solutions deployed in networks of leading MNOs, MVNOs, IoT connectivity providers, and IPX providers worldwide. Earlier this year, telecommunications market analysts Juniper Research projected that the accelerating rollout of 5G Standalone (SA) technology will be a major catalyst for global wholesale roaming revenue growth, from $9 billion in 2024 to $20 billion by 2028. “This milestone reflects the strength of Comfone’s global capabilities and our commitment to serving more than 600 customers worldwide with a solid and resilient technical infrastructure,” said Daniel Heutschi, CEO of Comfone. “After extensive evaluation and live trials, we chose BroadForward because their BFX product stood out as the most advanced and user-friendly solution. We were equally impressed with their professional collaboration, which has been instrumental in advancing our 5G SA roaming business.” Taco Schoute, CEO of BroadForward, added, "Comfone’s leadership in IPX makes them a natural partner. Our SEPP is well-suited to meet the specific demands of IPX, offering unmatched interoperability, flexibility, and deployment options." About Comfone Providing borderless and easy communications to all people and all things. From the Key2roam Platform, Comfone offers a complete portfolio of services and solutions to more than 600 customers worldwide. These include MNOs, MVNOs, SMS A2P Providers, IoT/ M2M Solution Providers, OTT Web Service Providers and a range of new actors who wish to enter the roaming world. Furthermore, the Key2roam Platform integrates a complete portfolio of services, apps and Value Added Services (VAS) required to build a profitable roaming business. It is built upon a solid foundation integrating the core IPX, Clearing and Hubbing services, thus enabling the seamless transport of Signalling, Data roaming and Clearing traffic. The data streams flowing from our range of roaming services and VAS create the possibility for powerful Big Data and other cross-analytical tools. https://www.comfone.com/ → Read more

Industry perspectives: The adoption of SEPP for 5G roaming – why it matters and what’s next

The role of SEPP in 5G Standalone (SA) core network deployment

The telecom industry is slowly adopting a 5G Standalone (SA) Core to be able to unlock its potential to open new revenue streams. Supporting this transformation is the Security Edge Protection Proxy (SEPP), a key technology for enabling secure and seamless 5G roaming. As operators around the globe adopt SEPP, it’s important to understand why it matters, how it’s evolving, and why independent vendors like BroadForward are leading the way. Why operator cloud readiness matters for SEPP, 5GSA and roaming 5G Standalone (SA) networks are designed to support secure signaling for interconnect. This marks a significant shift from earlier generations like 4G and 2G/3G, which relied on intermediary systems (such as a Gateway STP and DEA) to handle roaming traffic without securing end-to-end integrity/encryption. The SEPP deals with this omission by securing the communication between roaming partners and protecting signaling traffic. And while it is widely understood that establishing secure inter-connectivity is essential for services relying on 5G Standalone (5GSA), the practical reality is that this fully depends on the availability of the mandatory Security Edge Protection Proxy (SEPP). SEPP however is typically implemented in a cloud-native environment - an operational model that at this moment isn't yet available at roughly 70% of operators worldwide (source: Heavy Reading 2025). As a result, SEPP uptake has been slow. Analysts at Juniper and Analysys Mason even project that fewer than half of operators will offer cloud-based network services by 2028, constraining and delaying both 5GSA roaming and slowing 5GSA adoption.

Although the BroadForward SEPP supports cloud-native deployment (as well as bare metal and virtualized environments), not surprisingly nearly every BroadForward SEPP in the field has initially been deployed on virtual machines - immediately enabling interconnectivity for our customers in their existing data centers where rivals cannot. This deployment versatility, combined with the ability to seamlessly move configurations across deployment models, has proven to be a decisive factor in the remarkable rate of adoption of the BroadForward SEPP. It not only positioned us to power the world’s first live 5GSA roaming service with IPX BICS already in 2022 but also helped establish BroadForward as a global frontrunner in SEPP deployments.

Changes in SEPP standardization Despite service providers slowly adopting SEPP for a few years now, its standardization is still evolving. A key topic of debate is the security model, particularly whether to use PRINS (Protocol for N32 Interconnect Security) next to Hop-by-Hop TLS for IPX providers. PRINS enables end-to-end integrity/encryption by negotiating security levels between operators, offering stronger security but also adding complexity. Until now the 3GPP specifications prescribed the application of PRINS for IPX connections. In September 2025 the GSMA nuanced the 3GPP specification (TS 29.573) by stating that hop-by-hop TLS is also an accepted option next to PRINS for IPX connections. The GSMA Permanent Reference Document NG.113 describes these options in table 4 (Model and security mechanisms) as shown below:

Model	Security mechanism
Model 1 ̶ Direct Bilateral	TLS
Model 2.1 ̶ Outsourced SEPP	TLS
Model 2.2 ̶ Hosted SEPP	TLS
Model 2.3 ̶ Operator Group	TLS
Model 3 ̶ Service Hub architecture	Hop-by-Hop TLS or PRINS
Model 4 ̶ Roaming Hub architecture	Hop-by-Hop TLS or PRINS

End-to-End vs. Hop-by-Hop encryption The choice between end-to-end (PRINS) and hop-by-hop security (TLS) highlights the challenges of security in 5G roaming. End-to-end integrity/encryption ensures data stays protected throughout its journey, passing multiple in-between routing hops, while offering higher security. But it requires operators to coordinate encryption keys carefully to allow for the in-between routing hops to perform their IPX services. Hop-by-hop encryption is simpler, as it encrypts data between two individual SEPP nodes representing one hop, but it introduces vulnerabilities where data is decrypted and re-encrypted on each hop. IPX providers need to find the right balance based on industry security needs, technical capabilities, and, most importantly, the services to be applied on the traversing messages. Encryption and authentication keys, often exchanged using Public Key Infrastructure (PKI), are essential for secure communication. These mechanisms also affect the role of IPX providers, who have traditionally acted as intermediaries in roaming scenarios, adding value to the communication with bespoke services. With PRINS security, this becomes significantly more challenging. End-to-end encryption requires every intermediate (IPX) partner to be included in the PKI exchange between networks. This is needed for the IPX providers to decrypt and validate the messages, apply their bespoke services, and secure the message again for the next leg towards its destination. Details are described in FS.34 - GSMA Key Management. Hosted vs. Outsourced SEPP solutions While traditional roaming hubs and value-added services may face challenges in deploying 5G security, IPX providers have the opportunity to expand their offerings by providing hosted or outsourced SEPP solutions. The key distinction between these models lies in where the SEPP is deployed and who manages it within the 5G interconnect security architecture. In the Hosted SEPP model 2.2, the Mobile Network Operator (MNO) hosts and operates its own SEPP within its domain. This Public Mobile Network SEPP (PMN SEPP* in the image below) resides within the operator’s network, ensuring direct control over security, integrity/encryption, and interconnect signaling traffic towards the Service Provider SEPP (SP SEPP) via the N32s interface. To facilitate secure interconnection with external networks, the MNO relies on a Service Provider SEPP (SP SEPP) provided by an IPX partner or hosting provider. This setup allows the MNO to maintain independent security policies while leveraging external infrastructure for roaming services and interconnectivity. The IPX-hosted SEPP (HS SEPP) acts as a secure intermediary for signaling traffic between multiple operators, handling encryption, integrity protection, and interconnect security functions.

source: GSMA PRD NG.113

In the Outsourced SEPP model 2.1 (as shown in the image below), the MNO relies on an IPX provider to host and manage the SEPP on its behalf, rather than deploying its own SEPP infrastructure. The outsourced SEPP also means less control over security policies and key management, as these are handled by the IPX provider rather than the MNO itself. Model 2.1 allows operators to adopt secure 5G roaming more quickly without investing in their own SEPP infrastructure. A drawback of this model 2.1 is that operators should expose their SBI interfaces outside of their own network. These SBI interfaces must be secured by TLS or any VPN connection between the PLMN and the Outsourced SEPP. It is particularly beneficial for smaller MNOs, as it provides a cost-effective, scalable alternative that helps them compete with larger players, despite the disadvantages.

source: GSMA PRD NG.113

Future of SEPP and 5G roaming As the GSMA and the 5GMRR group continue to refine SEPP standards such as the 5G Roaming Guidelines (NG.113), service providers are moving ahead with deployments. Independent vendors like BroadForward have already been deploying SEPP, and have been bridging gaps where standardization lags. IPX providers play a key role in the momentum of 5G penetration, offering hosted SEPP solutions that make secure 5G roaming accessible to more operators. As 5G roaming expands, the combined efforts of operators, vendors, and IPX providers are building a more secure and interoperable future. BroadForward’s leadership in SEPP technology BroadForward is a leader in SEPP technology, offering flexible, feature-rich, and cost-efficient solutions that have accelerated global 5G adoption. The BroadForward SEPP powered the first international 5G SA roaming connection. BroadForward’s technology is highly attractive due to its seamless integration with multiple generations of network functionality across different vendors. This interoperability eliminates vendor lock-in, while giving operators the flexibility to adapt as network technologies evolve. Also see: Comfone Launches 5G SA Roaming with BroadForward SEPP Arelion Launches Global 5G Roaming Solution with BroadForward → Read more

Arelion Launches Global 5G Roaming Solution with BroadForward

Stockholm, April 16, 2024 – Arelion today announced a partnership with BroadForward to launch Arelion’s new 5G Standalone Roaming solution. Building on Arelion’s renowned global 3G and 4G roaming services, this development will enable Arelion’s customers to enhance their global roaming capabilities with the full benefits of 5G technology. As the operator of the world’s #1 ranked IP backbone network, Arelion is ideally positioned to enable the 5G solutions required to deliver high-quality mobile data services and IoT applications. “Our close partnership with Arelion provides BroadForward with an opportunity to enable worldwide 5G services across Arelion’s global network footprint,” said Taco Schoute, CEO of BroadForward. “Arelion’s forward-thinking vision aligns with our commitment to innovative signaling technologies that help mobile network operators transitioning to 5G, enabling collaborative solutions that leverage the power of existing network infrastructure.” "Partnering with BroadForward expands Arelion’s offerings to include 5G roaming capabilities, helping our customers provide new and innovative mobile data solutions on a global scale,” said Mark Currier, Global Product Manager at Arelion. “BroadForward’s multi-technology signaling platform and flexible licensing model enables us to leverage our global network and address our customers’ individual needs, establishing Arelion as the connectivity partner of choice for mobile network operators and IoT providers.” About Arelion Arelion solves global connectivity challenges for multinational enterprises whose businesses rely on digital infrastructure. On top of the world’s #1 ranked IP backbone, we provide an award-winning customer experience to customers in more than 125 countries worldwide. Discover more at Arelion.com, and follow us on LinkedIn and Twitter. About BroadForward BroadForward is a leader in intelligent signaling software for 2G/3G, 4G/LTE, 5G, IMS, Fixed, Wi-Fi, IPX and M2M/IoT networks and winner of the GSMA Global Mobile Award (GLOMO) for Best Mobile & Network Software Breakthrough. BroadForward delivers core network products for routing, interworking, security and number portability, designed for convergence across legacy and next generation networks. Contacts: Arelion Martin Sjögren, Senior Manager PR and Analyst Relations +46 (0)707 770 522 martin.sjogren@arelion.com Media Contact Jeannette Bitz, Engage PR +1 510 295 4972 jbitz@engagepr.com -------------- Also see: BroadForward 5G SEPP Trial Program for 5G Roaming reaping rewards for participating Service Providers → Read 5G SEPP Trial press → Read more

Gibtelecom adopts BroadForward’s Next Generation Diameter Signaling Controller

Gibraltar’s leading communications provider Gibtelecom goes live with the BroadForward Next Generation Diameter Signaling Controller (DSC) Gibraltar, October 9th 2018

Gibtelecom, Gibraltar’s leading communications services company and international communications hub, today announced it has launched services with the BroadForward Next Generation Diameter Signaling Controller (BroadForward DSC). The installation enables Gibtelecom to integrate and operate advanced Diameter signaling scenarios in its mobile core network and independently handle vendor-specific signaling implementations. It also provides them with the ability to configure signaling scenarios across other access networks and protocols such as SS7, SIP, ENUM, RADIUS and HTTP. As the pioneer in the growth and development of communications in Gibraltar, Gibtelecom offers business and residential subscribers a one-stop-shop for landline, broadband and mobile products and services. Today, Gibtelecom is the main provider of communications services on the Rock of Gibraltar, offering the a to z of communications services - more recently announcing a service called Sofi – a digital entertainment platform with over 60 fully-licensed TV channels and on-demand entertainment with Pay TV services such as Amazon's Prime Video and Rakuten TV. Through its ownership in the Europe India Gateway (EIG) submarine cable system, the Company has a network reach spanning half-way around the globe, connecting Asia, the Middle East, Africa and Europe. The group’s data centre business, Rockolo, also operates a number of facilities in Gibraltar, as well as offering secure cloud services and other products. The BroadForward Next Generation DSC provides Gibtelecom with an easy to configure, software based, Diameter routing and multi-protocol interworking solution. It is designed to enable operators to independently orchestrate converged signaling services across 2G/3G, 4G/LTE, Fixed/Wi-Fi networks and ultimately 5G. The BroadForward DSC is widely adopted by leading global Mobile Network Operators, MVNOs and IPX providers. Antonio Media, Gibtelecom Principal Engineer leading the project, commented “The selection and implementation of the BroadForward Next Generation DSC is a direct result of our commitment to invest in leading technology to accelerate service innovation. We are very pleased with the speed of implementation of the BroadForward DSC and the capabilities it provides. It makes our network even more robust and it allows us to independently configure advanced signaling scenarios”. Taco Schoute, CEO BroadForward added “It’s a treat to work with Gibtelecom as they have the signaling expertise and know exactly what they want and where they want to take it. The unique flexibility of the BroadForward DSC is great advantage for Gibtelecom as it supports them with service innovation and network optimization. They appreciate the value of a next generation signaling solution as key enabler to achieve their business goals”. About Gibtelecom Gibtelecom is the leading mobile, broadband and fixed communications services company in Gibraltar. Through its extensive communications networks, Gibtelecom provides a range of voice and data services, including mobile, to the local Gibraltar market, as well as business enterprise products to a number of the world’s top egaming businesses, together with the financial services, shipping and tourist industries based on the Rock. Gibtelecom networks stretch half-way round the world and connect largely through its ownership in the Europe India Gateway (EIG) submarine cable system, Asia, the Middle East, Africa and Europe. The company has several points of presence, including London, Madrid and Marseille. The group’s data centre business, Rockolo, operates a number of facilities in Gibraltar, as well as offering secure cloud services and other products. The European Foundation for Quality Management has certified Gibtelecom as a ‘Recognised for Excellence’ business and the group is also a registered ISO 9001:2008 company. For more information visit Gibtelecom’s website at www.gibtele.com. For more information please contact Dwayne Lara Corporate & Regulatory Manager dwayne.lara@gibtele.com T: +350 20052278 www.gibtele.com → Read more