5G CORE SOLUTIONS
Titan.ium's 5G Core products provide robust and scalable signaling, security and routing solutions for the 5G core network.
5G Core Technology
After initial 5G NSA deployments the market is rapidly moving to fully-fledged 5G core deployments in order to make full use of the 5G architecture, technologies and capabilities. Cloud-native container-based network functions enable a future-proof, reliable, efficient and dynamically scalable core solution. Titan.ium's 5G Core provides a comprehensive portfolio of signaling, security and routing network functions based on the Titan.ium framework for telecommunications cloud-native solutions.
Based on 3GPP specifications to ensure interoperability Titan.ium offers:
- Security Edge Protection Proxy (SEPP) for secure 5G roaming signaling support- Service
- Service Communication Proxy (SCP) to enable centralized routing for core scalability
- Network Repository Function (NRF) to dynamically expose service information to all 5G Network Functions
- Binding Support Function (BSF) as enabler for Policy Control for applications -Network Slicing Support Function to implement industry specific virtual networks on top of your infrastructure
Benefits of Titan.ium's 5G Core Solution
-
Cloud-Native and Scalable Architecture
By relying on cloud-based architecture, companies are able to achieve unparalleled agility and flexibility in their daily business. Furthermore, cloud methodology is vital for reducing the costs associated with in-house servers.
Titan.ium solutions are fully cloud-based, ensuring better resource utilization, containerization, and utilization of various microservices. Using our product enables you to quickly adapt to changing market demands and stay ahead of the competition. -
3GPP Standards Compliance
Our 5G core is created with 3GPP standards in mind. Titan.ium platform can be used across different ecosystems without ever losing its functionality. High interoperability is critical for companies that conduct their business internationally.
We made sure our products are in accordance with the best specifications, protocols, and guidelines for the telecommunications industry. By staying on top of these standards, you can introduce new technologies such as IoT and mobile broadband into your daily workflow. -
Secure 5G Roaming Signaling
The platform relies on SEPP for securing communication between PLMNs. Aside from protecting signaling traffic, it relies on authentication, confidentiality, and integrity for the safest user experience.
Given the number of devices connecting to modern 5G networks, SEPP is vital for maintaining trust and protecting data. Among other things, Security Edge Protection Proxy streamlines the use of cryptographic keys and filters incoming messages. -
Centralized Signaling and Routing
As the traffic load and network complexity increase, 5G core has to rely on centralized solutions. Through the use of SCP, or Service Communication Proxy, Titan.ium platform manages your routing and signaling.
SCP relies on a hub-and-spoke architecture that minimizes signaling overhead and simplifies the core. With it, you can ensure high efficiency and optimal performance of your 5G network.
-
Efficient Network Function Discovery
NRF, or Network Repository Function, serves as a central directory for handling all of the network’s functions. Besides the fact that the registry is compliant with the latest standards, it is highly dynamic, ensuring efficient registration and discovery.
As a result, functions such as UPF, SMF, and AMF are able to discover each other and communicate. NRF manages access authorization and supports real-time function changes. It is a vital component streamlining the use of various applications and services. -
Policy-Aware Session Control
Titan.ium’s PCC, or Policy-Aware Session Control, has the role of securing 5G network operations and increasing their efficiency. It handles all the policies related to sessions, such as network slicing, security, and QoS.
PCC relies on the Policy Control Function, which helps applications discover the Policy Control Function by utilizing session attributes. Policy Control relies on subscriber-related features to optimize the experience for each person using our network. -
Support for Industry-Specific Network Slicing
To support the needs of every business, our platform relies on NSSF, or Network Slice Selection Function. With this component, the Titan.ium 5G core is able to adequately allocate resources for different industries and use cases.
NSSF works by assessing different requirements, such as reliability, latency, and throughput. By performing a thorough analysis, it is able to identify a suitable slice for a device. In case there are several network slices, NSSF will choose the optimal one based on load balancing, location, and resource availability. -
Modular and Flexible Deployment
Users are able to break down different components into replaceable modules. Later on, these modules can be adjusted to various scenarios, according to your current business needs. Flexibility is vital for 5G networks as it ensures cheaper deployment without jeopardizing scalability.
Titan.ium platform is heavily dependent on open RAN. The component ensures interoperability between different equipment, making it much easier to deploy 5G architecture. Users can deploy their network in phases, adapting to their specific needs.
Benefits of Our 5G Core Solution
Cloud-Native and Scalable Architecture
By relying on cloud-based architecture, companies are able to achieve unparalleled agility and flexibility in their daily business. Furthermore, cloud methodology is vital for reducing the costs associated with in-house servers.
Titan.ium solutions are fully cloud-based, ensuring better resource utilization, containerization, and utilization of various microservices. Using our product enables you to quickly adapt to changing market demands and stay ahead of the competition.
3GPP Standards Compliance
Our 5G core is created with 3GPP standards in mind. Titan.ium platform can be used across different ecosystems without ever losing its functionality. High interoperability is critical for companies that conduct their business internationally.
We made sure our products are in accordance with the best specifications, protocols, and guidelines for the telecommunications industry. By staying on top of these standards, you can introduce new technologies such as IoT and mobile broadband into your daily workflow.
Secure 5G Roaming Signaling
The platform relies on SEPP (Security Edge Protection Proxy for securing communication between PLMNs. Aside from protecting signaling traffic, it relies on authentication, confidentiality, and integrity for the safest user experience.
Given the number of devices connecting to modern 5G networks, SEPP is vital for maintaining trust and protecting data. Among other things, Security Edge Protection Proxy streamlines the use of cryptographic keys and filters incoming messages.
Centralized Signaling and Routing
As the traffic load and network complexity increase, 5G core has to rely on centralized solutions. Through the use of SCP, or Service Communication Proxy, Titan.ium platform manages your routing and signaling.
SCP relies on a hub-and-spoke architecture that minimizes signaling overhead and simplifies the core. With it, you can ensure high efficiency and optimal performance of your 5G network.
Efficient Network Function Discovery
NRF, or Network Repository Function, serves as a central directory for handling all of the network’s functions. Besides the fact that the registry is compliant with the latest standards, it is highly dynamic, ensuring efficient registration and discovery.
As a result, functions such as UPF, SMF, and AMF are able to discover each other and communicate. NRF manages access authorization and supports real-time function changes. It is a vital component streamlining the use of various applications and services.
Policy-Aware Session Control
Titan.ium’s PCC, or Policy-Aware Session Control, has the role of securing 5G network operations and increasing their efficiency. It handles all the policies related to sessions, such as network slicing, security, and QoS.
PCC relies on the Policy Control Function, which helps applications discover the Policy Control Function by utilizing session attributes. Policy Control relies on subscriber-related features to optimize the experience for each person using our network.
Support for Industry-Specific Network Slicing
To support the needs of every business, our platform relies on NSSF, or Network Slice Selection Function. With this component, the Titan.ium 5G core is able to adequately allocate resources for different industries and use cases.
NSSF works by assessing different requirements, such as reliability, latency, and throughput. By performing a thorough analysis, it is able to identify a suitable slice for a device. In case there are several network slices, NSSF will choose the optimal one based on load balancing, location, and resource availability.
Modular and Flexible Deployment
Users are able to break down different components into replaceable modules. Later on, these modules can be adjusted to various scenarios, according to your current business needs. Flexibility is vital for 5G networks as it ensures cheaper deployment without jeopardizing scalability.
Titan.ium platform is heavily dependent on open RAN. The component ensures interoperability between different equipment, making it much easier to deploy 5G architecture. Users can deploy their network in phases, adapting to their specific needs.
5G CORE APPLICATIONS
Titan.ium SEPP provides secure and validated 5G Core signaling interconnections between PLMNs. It supports MNO deployments as well as hosted and outsourced deployments for group operators and IPXs.
Titan.ium SCP serves as central HTTP/2 routing instance in the 5G core signaling network enabling a hub and spoke signaling architecture replacing any to any network function communication. In conjunction with Titan.ium NRF it also is designed to provide delegated discovery in order to greatly simplifying the core architecture and reducing signaling traffic.
Titan.ium NRF serves as a standards-compliant network-wide repository for all 5G network functions.
TITAN.IUM BSF allows application functions to discover the PCF that is holding the information of a distinct data session based on a set of standardized session attributes.
TITAN.IUM NSSF addresses the need to extend network slicing into the 5G core. It allows the operator to assign dedicated core resources to vertical industries.
The Role of Core Network Functions in 5G Architecture
Introduction
5G core is the main part of Titan.ium’s network. It performs many roles, managing connectivity, data handling, and mobile services. Some of its key functions are access and mobility management, authentication server, policy control, network management, and repository function.
Titan.ium’s 5G core functions are highly modular, allowing you to scale them according to your business needs. As cloud-native components, they don’t require in-house architecture. 5G functions perform a specific role in 5G SBA and are defined by the international 3GPP standards.
Functional Overview Table or Grid
Function |
Role in 5G Core |
Key Responsibilities |
| SEPP | Secure roaming interface | Encrypts and validates signaling between operators |
| SCP | Central signaling hub | Routes HTTP/2 messages; reduces signaling complexity |
| NRF | Service registry | Maintains a directory of all active network functions |
| BSF | Policy control enabler | Connects Application Functions (AF) to the correct PCF |
| NSSF | Network slicing manager | Assigns traffic to the appropriate slice for industry use cases |
How They Work Together
During deployment, the infrastructure will undergo a process that includes initial design, implementation, testing, and regular maintenance. During the planning phase, businesses define the roles of different functions, such as UPF, PCF, AMF, and so on.
Then, we integrate service-based architecture by relying on containers, microservices, and other cloud-native tech. During deployment, you have to make sure that the network can scale according to your needs. You must also configure slices for different use cases.
Although the 5G core can be deployed in different ways, Titan.ium uses the following flow: registration → discovery → routing → policy → slicing → interconnect. We deploy functions in the form of virtual machines and containers, while making sure that the infrastructure can adjust to fluctuating traffic.
Why It Matters
The development methodology should be tailor-made for your business. You must consider the number of devices that will connect to the network and the specific needs of each user. Companies must also take into account diverse usage patterns.
By diligently planning your deployment process, you can achieve the following benefits:
- Ensures interoperability across vendors and operators
- Reduces signaling overhead and enhances scalability
- Supports advanced features like roaming and slicing
- Builds a foundation for automation, analytics, and service innovation
Titan.ium utilizes deployment methodology that ensures much higher speed with lower latency. After the deployment, your 5G core should be able to handle much larger capacity, which is vital for new technologies such as virtual reality and IoT.
5G Core Related Content
Titan.ium at MWC 2026: Helping Operators Modernize Their Networks
Titan.ium Demonstrates Advanced Technologies Enabling Network Operators Modernization
Telecom Fraud Management: Best Practices for Real-Time Monitoring and Response
Titanium's Case Studies
Altice France, through SFR, serves more than 27 million customers daily, providing high-speed fixed and mobile network services across France.
With a focus on innovation and customer satisfaction, SFR continues to lead the way in the telecommunications market.
This case study explores how Deutsche Telekom Global Carrier leveraged Titan.ium’s innovative technology to enhance its international roaming environment, delivering secure 5G roaming, value-added services for 5G roaming, network slicing for roaming, and regional and local breakout.
Read More5G ROAMING SOLUTION WITH FLEXIBLE DEPLOYMENT OPTIONS
For 5G core networks TITAN.IUM SEPP represents the gateway to other operators’ networks for roaming purposes. It is used to provide a secure, interoperable and scalable pathway for HTTP/2 signaling within a negotiated security context. Messages are being validated and screened before being forwarded to the 5G core. Mutual TLS security and context validation is provided and individual network specific screening functions can configured. Inter-PLMN routing is performed and customized re-routing, e.g. to external RVAS services, is supported. Multi-tenancy capability has been implemented, so that TITAN.IUM SEPP can be deployed on behalf of a group of operators as foreseen by GSMA 5GMRR for the hosted and outsourced SEPP deployment models.
STANDARDS-BASED 5G CORE INTERCONNECTIVITY
Following 3GPP and GSMA specifications, TITAN.IUM SEPP is fully interoperable with other vendors 5G core NFs, SCPs and SEPPs, while at the same time offering flexible configurability to consider network specific routing and filtering requirements. The main capabilities are:
N32 CONTROL INTERFACE
Is used for security handshake negotiation between 5G core signaling networks, as specified by 3GPP TS 29.573. A security context will only be established for configured interconnections and valid PLMN IDs.
N32 FORWARDING
Received messages will only be forwarded to the connected 5G core or the remote PLMN SEPP for related security contexts that have been established beforehand by the N32-c handshake procedure.
MESSAGE ROUTING
TITAN.IUM SEPP implements highly flexible routing of messages between home and visited PLMNs based on rules for matching criteria. This allows any HTTP/2 information element to be used in any routing decision.
MESSAGE SCREENING
Allows operators to establish Black- or Whitelists using every information element in the incoming request for the screening purpose.
TDR GENERATION
TITAN.IUM SEPP supports configurable generation of TDRs for inbound and/or outbound messages. Operators can select the set of information elements that are included by configuration.
BENEFITS
STANDARDS-COMPLIANT SECURE INTERCONNECTION BETWEEN HOME AND VISITED 5G PLMNs
Supporting 3GPP 5G core and GSMA 5GMRR specifications, TITAN.IUM SEPP can be deployed for direct MNO-MNO interconnections as well as in hosted SEPP scenarios as required by IPXs or group operators. GSMA specified outsourced models, where the interconnecting MNOs do not have to operate their own SEPP are also fully supported.
CONFIGURATION FLEXIBILITY
Powered by TITAN.IUM’s dissector based rules engine, project specific rules for message transformation, re-routing or filtering can be implemented. The configured individual service logic has access to all information elements in the received request.
DELIVERED ON TITAN.IUM CLOUD NATIVE FRAMEWORK
TITAN.IUM SEPP is delivered on the high-performance cloud-native TITAN.IUM platform, providing effortless automated scaling, efficient use of cloud resources, and strong security. It is implemented in a distributed microservice architecture with compute-data separation.
NETWORK REPOSITORY FUNCTION SUPPORTING 5G CORE SCALABILITY
TITAN.IUM NRF is one of the key functions of the 3GPP Service-Based Architecture (SBA) for 5G Core networks, acting as a central Services Discovery broker for all Network Functions (NFs) in the 5G Core. NF Service Producers advertise their capabilities by dynamically registering their NF-Profiles with the NRF, which may then be discovered by NF-Consumers seeking to use needed services. TITAN.IUM NRFs may be deployed as a distributed or hierarchical network of NRFs such that NF-Consumer discovery requests are forwarded to the actual NRF holding matching NF-Producer profile(s). Gateway-NRF functionality is also provided for service discovery in remote PLMN networks in support of Mobile 5G Roaming scenarios.
5G NETWORK REPOSITORY FOR NETWORK FUNCTIONS, SCPs, AND SEPPs
Following 3GPP specifications, TITAN.IUM NRF enables the dynamic registration and retrieval of comprehensive information about all deployed network elements. It serves as a central network-wide information point in order to drastically reduce signaling routing administration and is a pre-requisite to scale the 5G core. The main capabilities are:
NF-PROFILE REGISTRATION AND DISCOVERY
NF Service Producers advertise their capabilities by dynamically registering their NF-Profiles with the NRF, which may then be discovered by NF-Consumers based on multiple compatibility matching rules.
NF-PROFILE SUBSCRIPTION AND NOTIFICATION
NF Service Consumers may subscribe to receive notifications when certain conditions and/or criteria are met as specified by the Service Consumer.
HIERARCHICAL NRF DEPLOYMENTS
TITAN.IUM NRFs may be deployed as a flat or hierarchical collection of Regional / Centralized NRFs such that, NF-Consumer discovery requests are forwarded to the actual NRF holding matching NF-Producer Profile(s).
INTER-PLMN GATEWAY-NRF SUPPORT
Any NRF may also be provisioned as a Gateway-NRF which is made aware of remote PLMN NRFs for Inter-PLMN interconnect purposes. Discovery & Subscription requests are forwarded to remote PLMN NRFs in support of Mobile 5G Roaming scenarios.
OAUTH2.0 AUTHORIZATION SERVER
The NRF can act as OAuth2 Authentication Server. Previously registered NF-Producers declare allowed service access, which the NRF uses to screen prospective NF-Consumers, issuing them a digitally signed OAuth2 token if authorized.
BOOTSTRAPPING SERVICE
Allows new NF-Consumers to determine the actual set of service interface versions supported by an NRF.
5G NETWORK REPOSITORY FUNCTION BENEFITS
NETWORK-WIDE DYNAMIC REPOSITORY OF ALL 5G CORE ELEMENTS
Allowing all 5G core network components to dynamically retrieve information about deployed network functions, NRF drastically reduces routing administration efforts and OPEX.
CENTRAL AUTHORIZATION SERVER
Serving as central instance to issue OAuth 2.0 authorization tokens to NF-Consumers for access to NF-Producer services, NRF fundamentally increases signaling security.
DELIVERED ON TITAN.IUM CLOUD NATIVE FRAMEWORK
TITAN.IUM NRF is delivered on the high-performance cloud-native TITAN.IUM platform, providing effortless automated scaling, efficient use of cloud resources and strong security. It is implemented in a distributed microservice architecture with compute-data separation.
CENTRALIZED 5G CORE SIGNALING ROUTING
TITAN.IUM SCP provides a central HTTP/2 routing instance for in the 5G SBA (Service Bus Architecture). Based on it's dissector-based rules engine it provides a maximum of flexibility when it comes to routing, screening and custom-defined modifying of 5G core signaling requests. It is deployable as stand-alone SCP or in a hierarchical model to allow for unlimited core scalability. It supports 3GPP specified network deployment models C and D (3GPP TS 23.501). It conducts network function (NF) profile discovery from the NRF on behalf of the Consumer-NF and cashes the results in order to minimize signaling traffic and supports the NRF subscribe/notify procedure for the NRF.
SIMPLIFYING 5G CORE ROUTING
Following 3GPP specifications, TITAN.IUM SEPP minimizes the number of signaling connections and provides centralized routing administration and traffic optimization. The main capabilities are:
SECURE INDIRECT COMMUNICATIONS
The SCP provides secure indirect communications between service NF-Consumers and NF-Producers, or between SCPs, with TLS mutual authentication, Server Name Indication (SNI) support, and TLSv1.2/TLSv1.3.
HIGH PERFORMANCE HRRP/2 STACK
The SCP relies on a high-performance HTTP stack with rich configuration options, including settings related to connections, buffers, traffic classes, and TLS.
HTTP PROXY
Message routing function that routes to the destination NF-Producer service directly, or via the next hop Proxy/SCP .
DELEGATED DISCOVERY / DISCOVERY CACHING
NF-Producer service discovery & selection on behalf of the NF-Consumer. The SCP caches NRF NF-Profile information, subscribing to NRF status changes to ensure that cached NF-Profiles are kept up to date with latest service discovery information.
CONSUMER-PRODUCER BINDING
Caching of binding indication and relevant NF profiles for routing of subsequent requests based on routing binding indication. Cached binding indications and NF profiles are automatically removed after expiration of their configurable lifetime.
FLEXIBLE ROUTING
Create rules based on matching criteria for routing table entries, so that any information contained in an HTTP request can be used for a routing decision. Static information like priority/weight, or dynamic information like load, latency and/or endpoint health may be referenced for a matched route entry that may be used to affect routing decisions.
BENEFITS
SIMPLIFIED / CENTRALIZED
Supporting network model C and D as specified in 3GPP TS 23.501, TITAN.IUM SCP centralizes routing administration and serves to optimize signaling routing. By supporting delegated discovery and cashing the NRF discovery results, it minimizes core signaling traffic.
DELIVERED ON TITAN.IUM CLOUD NATIVE FRAMEWORK
TITAN.IUM SCP is delivered on the high-performance cloud-native TITAN.IUM platform, providing effortless automated scaling, efficient use of cloud resources and strong security. It is implemented in a distributed microservice architecture with compute-data separation.
UNIVERSAL SESSION BINDING REPOSITORY
TITAN.IUM BSF is one of the key functions of the 3GPP Service-Based Architecture (SBA) for 5G Core networks. It enables other Network Functions (NFs), for example an IMS Call State Control Function (CSCF) or Network Exposure Functions (NEF), to determine which Policy Control Function (PCF) is holding needed Policy & Accounting information for each active mobile device data session. It also provides Diameter Gateway functionality used to interwork legacy 4G Diameter requests in order to retrieve the PCF Diameter host used in support of dual-binding & 4G / 5G handover cases.
STANDARDS-COMPLIANT NETWORK-WIDE BINDING SUPPORT FUNCTION
Following 3GPP TS 29.512, TITAN.IUM BSF supports the defined session binding data model and the prescribed session binding discovery attributes. It enables applications such as voice (IMS) to access the policy control function for the related data session. The main capabilities are:
PCF BINDING REGISTER, DEREGISTER AND UPDATE
BSF service allows network policy functions (PCFs) to register new Mobile Device data session bindings thus providing a method for other NFs (e.g. CSCFs and NEFs) to find associated policy functions when working with specific Mobile Device data sessions. Registered data service bindings may also be updated or removed via this BSF service.
PCF BINDING DISCOVERY
BSF service allowing other NFs, typically Application Functions (AF) such as IMS CSCFs and NEFs, to find PCF policy functions for specific data sessions that they are working with based on specific discovery criteria.
4G BINDING DIAMETER GATEWAY
Diameter Proxy & Redirect functions allowing access to/from corresponding Diameter-based 4G DRA bindings supporting dual-binding & handover cases.
NRF REGISTRATION
TITAN.IUM BSF support the capability to register itself with an NRF to become discoverable by other NFs.
BENEFITS
STANDARDS-COMPLIANT PCF DISCOVERY
Following the 3GPP specifications the TITAN.IUM BSF provides the foundation to deploy a scalable 5G core network bridging the application layer with the data layer and providing 4G/5G interworking support.
DELIVERED ON TITAN.IUM CLOUD NATIVE FRAMEWORK
TITAN.IUM SCP is delivered on the high-performance cloud-native TITAN.IUM platform, providing effortless automated scaling, efficient use of cloud resources and strong security. It is implemented in a distributed microservice architecture with compute-data separation.
COMPREHENSIVE 5G CORE NETWORK SLICING MANAGEMENT
The NSSF provides the Network Slice Selection API for AMFs (Access and Mobility Function) for Registration, UE Configuration Update and PDU Session Establishment as well as the NSSAI Availability API (Network Slice Selection Assistance Information). For Slice Selection service operations, the NSSF considers the slice availability as well as the operator’s policies on restrictions, slice mapping and configuration. For roaming the requirements for the Home-NSSF and Visited-NSSF are addressed and all 5G service bus signaling needs to support customized network slice instances are addressed, including the standardized Slice/Service types for different industries and customer segments: eMBB : Enhanced Mobile Broadband URLLC : Ultra-reliable Low Latency Communication MIoT : Massive Internet of Things V2X : Vehicle to X Communication
5G CORE NETWORK SLICING
Following 3GPP specifications (TS 29.523) TITAN.IUM NSSF supports the required AMF interfaces, service logic and slice management provisioning capabilities to fully ensure efficient slice deployments. The main capabilities are:
NETWORK SLICING POLICIES
For each of the operator’s serving PLMN-IDs, a list of serving S-NSSAIs with the related mapping to the home S-NSSAIs can be configured per home PLMN, as well as the list of restricted S-NSSAIs in each tracking area. Network Slice Instance (NSI) specific NRF endpoint configuration and identifier is also stored centrally in the NSSF.
NSSAI AVAILABILITY UPDATES
NSSF serves as a repository for the availability of S-NSSAIs in each PLMN/TA and the related AMF ID or AMF Set as signaled by the AMFs to the NSSF.
NSSF NETWORK SLICE SELECTION
In response to AMF requests, NSSF responds, depending on the request options, with the list of allowed/configured NSSAI, NRF endpoint information, NSI identifier, target AMF Set candidate AMFs and the rejected S-NSSAI per PLMN and TA.
ROAMING FUNCTIONS
Slice Information mapping information between home and visited network is provided. Also, acting as V-NSSF, Home Routing PDU Session Establishment requests are adapted and forwarded to the appropriate V-NSSF in order to respond with the NSI Information configured in the Home PLMN.
PROVISIONING
A graphical user interface is provided for the administration of network slicing data . Alternatively, an open REST API is exposed for OSS integration.
BENEFITS
NETWORK-WIDE SLICE MANAGEMENT FOR VERTICAL INDUSTRY SUPPORT
Based on 3GPP TS 29.532, TITAN.IUM NSSF provides comprehensive support to establish network slicing in the 5G core. Vertical industries and customers can be offered virtual cores with their own allocated resources on top of the operator's infrastructure.
DELIVERED ON TITAN.IUM CLOUD NATIVE FRAMEWORK
TITAN.IUM SEPP is delivered on the high-performance cloud-native TITAN.IUM platform, providing effortless automated scaling, efficient use of cloud resources and strong security. It is implemented in a distributed microservice architecture with compute-data separation.