IT/ALB
Testbed
The IT/ALB Testbed encompasses the Aveiro Tech City Living Lab (ATCLL), distributed throughout the city and the University of Aveiro campus, and the B5G infrastructure setup at the Altice Labs (ALB) campus. Together, this joint infrastructure forms the overall 6G-PATH architecture of the Aveiro testbed.
Infrastructure
The ATCLL architecture (figure to the left) comprises numerous Internet of Things (IoT) devices with communication, sensing (such as traffic radars and cameras), and edge computing capabilities. The communication infrastructure, built on fibre and millimetre-wave (mmWave) links, integrates a communication network with radio terminals (WiFi, ITS-G5, C-V2X, 5G, and LoRaWAN), supporting multiple protocols, and is deployed across public facades and smart lampposts throughout the city.
The ALB testbed integrates with the city’s infrastructure, extending its technological capabilities to the company campus. It includes user equipment, radio access technology, core network entities, and management and orchestration functionalities. Additionally, it features a data management and analytics platform that enables the collection and integration of data from heterogeneous sources, presenting it in a unified format.
Non-Public 5G and Beyond Network
The RAN infrastructure is made up of various solutions, including OpenAirInterface (OAI) and srsRAN, open-source solutions deployed in Ettus Research USRPs, and CableFree 4G/5G Small Cell n78 indoor/outdoor, commercial solutions. Both open-source solutions are O-RAN compliant gNB with CU/DU split and interconnect with RAN Intelligent Controllers (RICs) for RAN monitoring. For RIC solutions, O-RAN Software Community (SC) RIC and FlexRIC were attested and used for metric collection and data processing through machine learning strategies. The possibilities of user equipment include SIM cards, modems, CPEs, and smartphones. 5G modems from Quectel, SIMCom and SierraWireless are available with development kits and two indoor CPEs in bands n46 and n78. Finally, a wide variety of 5G smartphones, such as Google Pixel, Xiaomi, OPPO, and Samsung, are considered for compatibility with all types of deployed antennas.
The Open5GS Core is a set of software components and network functions that interact with each other. Our Open5GS SA Core uses a Service Based Architecture (SBA) with all the project’s implemented network functions. This core supports local breakout roaming with the aid of the Security Edge Protection Proxy (SEPP) module. It enables the Mobile Network Operator (MNO) to break out internet sessions into the Home Network, providing inbound roamers with the ability to order data, which is provided directly by the visited network. It also supports Voice over New Radio (VoNR) by adding a Network Function (NF) from the 4G Core, the Home Subscriber Server (HSS), the main subscriber database used within the IP Multimedia Subsystem (IMS), and the Kamailio SIP server to provide public telephony service. Open5GS allows for Control User Plane Separation (CUPS), which disaggregates the User Plane Function (UPF) from the control plane, enabling Mobile Edge Computing (MEC) and reducing backhaul distances, and allowing for the integration of multiple UPFs. In collaboration with OneSource, we integrated its Network Exposure Function (NEF) with Open5GS for network interaction directly through the NEF or an external Application Function (AF). We also integrate with ETSI OpenCAPIF (in collaboration with Telefonica) and with CAMARA APIs.
Edge Computing Platform
The MEC system deployment is considered to address smart city scenarios with edge nodes spread out at various locations, with a B5G edge-enabled deployment to address user mobility and the dynamic nature of the edge environment, while improving quality of service (QoS). This is accomplished with extensions to the base edge architecture through the appropriate plug-ins, custom resources, and components to address the dynamic nature of this environment and the mobility of the users. The 5G edge-enabled deployment logic associates each edge node with a gNB and an edge UPF. The gNBs serve as a connection point that provides radio access to end-users using 5G radio technology, while the role of the edge UPF within the context of this architecture is to route user traffic to its closest associated edge node. This deployment ensures that user traffic is routed to the nearest server and additional hops can be avoided, contributing to an optimised QoS in the service consumption. The Slice Manager provides operations on microservices available in the service manager of Open Source MANO (OSM). Those operations include the retrieval of information about the services and the creation, update and deletion of slices from those services. The slice manager interface receives messages from Kafka; it relays the information received onto the OSM, which uses underlying components to configure the raw network to obtain/release resources for the requested slices.
Advanced City Services
The ALB infrastructure comprises the Live!Urban platform, which concentrates on a single operational control point, the functionalities needed to visualise, analyse and act on urban control systems and infrastructures. Live!Urban allows the integration of different services and technologies belonging to different functional domains (verticals) seamlessly and transparently, using specific APIs to interact with the different systems. Live!Urban resorts to the functionalities provided by data management platforms to ingest, process, store and share city information, reinforcing the capability to manage and control city functional domains. The solution supports different data systems and devices from different manufacturers, regardless of the radio access technology.
Networks produce data that can be provided to external entities or consumed internally, enabling insights for triggering actions. The relationship between network and service can go beyond using over-the-top resources, sharing data that can be used to manage each domain. Predictive infrastructure management allows mechanisms to be implemented that enable closed-loop network automation and the evolution of services requiring infrastructure statistics and predictions to support dynamic-based high-quality demands. Artificial Intelligence functionalities can be offered as a service to support enhanced analytics. The 3GPP TS 29.520 network data analytics function (NWDAF) provides analytical information to authorised entities. NWDAF gathers data from different infrastructure entities and provides analytics in subscription and notification mode to interested applications and network functions. Although the interfaces are being normalised, the algorithms and models are scenario-dependent. NWDAF can also be extended to support analytics functions for third-party services. A Service and Network Data Analytical Function (SNWDAF) capability can be available in a cloud-based model. Under the 6G-PATH project, we will build predictive models to create top-level services, answering the need for different scenarios, including smart cities, education, health and farming use cases.
Services
Virtualisation, Management and Orchestration
The orchestration is performed by Kubernetes. The ATCLL has specific descriptors capable of describing the service requirements (e.g., graphics capabilities, service priority, replication, and proximity). Additionally, load-balancing mechanisms can forward the requests of each service to the best replica, considering the network and host state. These elements with the above functionalities are available in a group of repositories. The server infrastructure side is also self-provided. At the core, the infrastructure is complemented by a network and data processing centre. The datacentre consists of multiple servers managed by Proxmox VE, deploying all virtual machines with services, data platform, apps, 5G core (Open5GS), and network functions running in the cloud, such as Kubernetes, OSM, ChirpStack, among others. It should be noted that this infrastructure supports a cloud continuum with a cloud, edge and device continuum. Beyond the server infrastructure in the core, we run the microservices and the detection and actuation algorithms in the edge infrastructure previously described (NVIDIA Jetson Orin and Jetson Xavier with a powerful GPU for graphics-intensive processing) and the access nodes in the vehicles (OBUs, DCUs).
As mentioned, edge orchestration mechanisms were implemented using Kubernetes, supplemented with extensions and plugins to enhance their capabilities. The default Kubernetes platform, designed primarily for cloud environments, struggles to address the dynamic needs of smart-city services, particularly in a vehicular context where users are constantly moving. The following extensions have been introduced to address these challenges:
FogService
This new resource type enables deploying services optimised for edge environments. It allows for defining instantiation locations, the number of replicas, and service-specific metrics to assess the status of replicas and adjust deployment based on node capabilities, node status, application status and node latency/geographic location.
Custom Load Balancer
The default Kubernetes load-balancing algorithm distributes network requests equally among replicas, often inadequate in edge-road environments. A custom Load Balancer was developed to adjust the probability of each replica receiving requests based on service-specific metrics and network latency within the cluster.
Scheduling Plugins
New plugins were added to extend Kubernetes’ scheduling process. These enhancements aim to create a more flexible and comprehensive scheduling system that considers factors such as service priority, existing applications, service dependencies, and performance.
Mobility Management Mechanisms
New components were developed to gather data from external sources and proactively influence service performance and distribution across the edge platform. This data includes 5G and edge computing platform status, city congestion information, and user mobility details.
Monitoring
As shown in the figure, the physical beyond-5G network is structured into four main layers that are jointly monitored and correlated: the RAN, the core network, the UE layer (implemented via a custom Android probe application), and the smart-city mobility layer. Additionally, there is also an Edge Platform layer that provides metrics, although they do not yet relate back to the 5G network.
The RAN layer employs vendor-specific metric servers to collect real-time radio metrics; the core network layer parses Network Function log files to resolve all 5G identifiers to a unique user identity (the IMSI). The UE layer comprises a flexible Android application capable of executing controlled network tests and reporting end-user experience. The smart-city layer integrates real-time radar detections and simulated traffic from the Simulation Application. All layers feed into a common MQTT–Kafka–MongoDB pipeline, where metrics are enriched with persistent identities and made available both in real time and historically.
Radio Access Network
Starting with the RAN, in the ATCLL infrastructure, the access network is implemented with two technologies (not including the extension): the open-source project srsRAN and the commercial solution CableFree. Both gNodeBs (gNBs) solutions provide a way to expose metrics that can be used to infer the performance of the RAN infrastructure, of the UE, and of the applications. The Metric Servers provide pre-processed data to a common Metric Processor, this component’s job is to receive the data and match RAN and core IDs with the identified users from the Core Network Processor. This way, each chunk of data always corresponds to a registered user in the 5G network.
The srsRAN solution exposes metrics in a push-proactive approach, which works by periodically publishing performance data with Hypertext Transfer Protocol (HTTP) requests to a designated address specified in the configuration files. The CableFree solution, on the other hand, works with pull-proactive logic. It exposes a Websocket remote API server that can be scraped by external Websocket clients that wish to get the gNB performance metrics. This way, the solution for data acquisition in the RAN domain consists on developing two metric servers that will interact with each technology to fetch the performance metrics, process them, and then forward them in the appropriate format and to a location where they can be accessible for other third-party entities to use in orchestration decision to improve the performance of the platform. The srsRAN metrics server represents an HTTP server where the antennas can publish their metrics. The CableFree metrics server represents a WebSocket client that periodically scrapes the gNB’s remote API. Both servers process the data in a common format and then forward it to the ATCLL data platform, where the data can persist and be made available for real-time and historical access.
Core Network
The 5G Core (5GC) in the ATCLL infrastructure is implemented, as previously referred, with the open-source solution Open5GS that can be integrated with the Prometheus monitoring tool. A couple of the Open5GS core network functions offer the possibility to configure an HTTP and Prometheus server that can be scrapped by other entities to gather metrics regarding their performance. The data, stored in a time-series database, can then be accessed for analytics, complex processing, or visualised with other software applications.
From RAN to 5GC, different identifiers (such as IMSI, AMF UE NGAP ID, RAN UE NGAP ID, and rnti) are used at each interface, which prevents direct attribution of RAN-level measurements (such as throughput, channel quality indicators, signal-to-noise ratio, and others) to a physical subscriber. To solve this, we designate the IMSI (present both in the physical SIM and in core network logs) as the single, persistent user identity. A custom log parser was developed for Open5GS’s Access and Mobility Management Function (AMF) that continuously processes container logs to extract real-time mappings between the IMSI and all transient identifiers used in the RAN and core. These mappings enable the metric processor to enrich every RAN measurement (vendor agnostic) with the corresponding IMSI and, consequently, the actual UE.
The same parser also detects key control-plane events (UE registration/deregistration, handovers) and maintains current state. An additional parser for the Session Management Function (SMF) extracts session-layer information, including Data Network Name (DNN), and allocated IPv4 addresses.
Digital Twin
The operational NDT is realized through a large-scale, containerized emulation environment that faithfully replicates both the 5G/B5G network and realistic urban mobility within a controlled, repeatable, and fully observable testbed. To achieve this, the entire radio access and core network are deployed on a Kubernetes cluster using UERANSIM for UEs and GNBs, Open5GS for the 5G core, and SUMO for high-fidelity vehicular traffic simulation. All components (GNB pods, UE pods, core network functions, and simulated vehicles) run as containerized microservices, enabling the instantaneous scaling of hundreds of UEs and tens of GNBs within a single cluster.
Resource consumption, network utilization, and application-layer performance of every pod are continuously collected by the Kubernetes built-in metrics pipeline (via Metrics Server and cAdvisor) and exported to Prometheus. The collection sub-flow described in Figure illustrates how the data is outputted to the data platform. This data includes detailed simulation-state KPIs (number of active GNBs and vehicles, simulation timestamps, antenna GPS coordinates, per-vehicle trajectories, etc.) at each SUMO time step. Vehicle positions and dynamics are also broadcast in real time as standardized ETSI CAM messages over a local MQTT broker, thereby feeding the live virtual representation of the NDT.
Network Probe Android Application
To complement passive monitoring of the physical network with controlled, repeatable, and UE-centric measurements, an additional measurement layer is provided by a custom Android application. This probe acts as a flexible traffic generator and diagnostic tool directly from real user equipment, enabling the on-demand injection of diverse traffic patterns (bulk transfer, low-latency, periodic IoT-like, etc.) and the collection of detailed radio environment parameters (such as RSRP, RSRQ, signal-to-noise ratio, and signal strength) from the UE perspective.
The network probe module is designed to monitor the radio environment. Cellular metrics are collected through the Android TelephonyManager API to continuously extract cell identifiers and low-level signal indicators, capturing critical RF (Radio Frequency) parameters such as RSRP (Reference Signal Received Power), RSRQ (Quality), and SINR (Signal-to-Interference-plus-Noise Ratio), along with the ARFCN (Absolute Radio Frequency Channel Number).
The MQTT Service module is responsible for reliably transmitting the collected data to external systems by managing the connection to a designated MQTT broker. Collected data and test results are formatted into JSON payloads and published to predefined topics on the data collection system broker. Finally, the MQTT service enables remote orchestration of the application from the data collection system, allowing coordinated execution of SpeedTest or iPerf3 tests.
Edge Platform
The edge platform implemented by a cluster of the lightweight Kubernetes distribution optimized for edge computing, k3s, supports the Prometheus monitoring tool, which enables real-time metrics collection, automatic service, pods, and node discovery. With this framework complete, a whole set of metrics that reflected the cluster and application status became available. These metrics mainly consist of gauges and counters. In addition to all the metrics provided by default through the Prometheus Helm chart, the Kubernetes extensions developed in the IT testbed allow application developers to define custom metrics that their containerized applications can expose to assess performance. These custom metrics are also available through the Prometheus API and provide valuable, customizable insights into the state of both the cluster and the applications.
Security
The Elastic-Stack (ELK) is attached to VMs or Kubernetes containers in a sidecar configuration to obtain protocol monitoring and security practices. Thus, a pocket Intrusion Detection System (IDS) is ready to perform monitoring and security-related jobs. The IDS comprises five Cloud Native Functions (CNF): Suricata, Filebeat, LogStash, ElasticSearch, and Kibana. Suricata will capture IP packets, and for that, it needs privileged access to the network interface to achieve a promiscuous mode. It will store all captured IP packets in logs (eve.json) inside a directory mounted by the second CNF. Filebeat then picks up the logs and sends them to the following CNF, LogStash, which will be the focus of alarm detection. LogStash is an open-source tool for collecting, parsing, and resending logs for other uses. The inputs can be defined as the sources for parsing, in this case, a stream from Filebeat. The method for parsing the input logs is described in a way that detects the alarms in filters. We also define three outputs from Logstash: access to Elastic Search and a directory in flat files that a light HTTP server will read. This HTTP server will, upon polling from Prometheus, send a warning to the monitor, stating which IP will be under attack, so that the platform can act and mitigate the threat. ElasticSearch is a document database that stores the alarms obtained in LogStash for future use and supports persistence for Kibana, the following CNF. Kibana is the CNF responsible for visualising the alarm packets. It picks those alarms from the ElasticSearch database. It may provide a deep alarm analysis and multiple graphic visualisations in selected contexts.
Remote Access
The platform has remote access via OpenVPN, Wireguard/Tailscale, and Portainer. Portainer is a lightweight container management UI that facilitates the management of various Docker environments, hosts, and Swarms. Portainer supports operations in diverse environments, including data centres, public clouds, network edges, and Industrial IoT devices. It connects all edge nodes, allowing access to Dockerized services running on each node.
Key Features and Assets
Docker
A software platform that builds, tests, and deploys applications by packaging them into standardised units known as containers. Containers provide a lightweight and isolated environment containing all necessary dependencies, libraries, and tools required to run an application.
Kubernetes
An open-source orchestration platform for managing containerised applications. It offers features such as storage orchestration, self-healing capabilities, horizontal scaling, and batch execution. Kubernetes is designed to accommodate extensions without altering its source code.
Prometheus
An open-source monitoring and alerting system that collects and stores metrics as time-series data. It features a flexible query language for a multi-dimensional data model, supports data collection via a pull model over HTTP, and does not rely on distributed storage.
MongoDB
An open-source distributed database system that stores data in a flexible JSON format. It supports ad hoc queries, indexing, and real-time aggregation, providing powerful data access and analysis capabilities. MongoDB also offers high availability and horizontal scaling.
Proxmox
An open-source platform for enterprise virtualisation, featuring a web interface for intuitive management of Virtual Machines (VMs) and containers. It supports software-defined storage and networking and provides high-availability clustering.
Ansible
An open-source automation engine that handles provisioning, configuration management, application deployment, and orchestration. Ansible uses simple, human-readable scripts to automate tasks, minimising repetition and maintenance by avoiding additional software installations.
Grafana
An open-source monitoring platform that allows users to query, visualise, and configure alerts for metrics, independent of their storage location. It enables the creation of dynamic and reusable dashboards.

Kafka
An open-source distributed event streaming platform for high-performance data pipelines streaming analytics, data integration, and mission-critical applications. Provides permanent storage by storing streams of data safely in distributed, fault-tolerant clusters. It provides high throughput and high availability, enabling real-time information consumption.
Testbed Extensions from Open Call #1
OAIBOX (Allbesmart)
In Open Call #1, Allbesmart extended the IT/ALB testbed with the OAIBOX Open RAN software modules (O-CU, O-DU, RIC, and the OAIBOX dashboard), bringing additional 5G Advanced open-source features and improved network performance for the ATCLL cellular infrastructure. To showcase the added value of the OAIBOX extension, network slicing automation was implemented and tested in a 6G-PATH smart city use case, prioritising Intelligent Transport Systems (ITS) safety-critical applications requiring ultra-low latency.
Based on QoS requirements, an xApp automatically configures 5G Network Slices to meet a specific Service Level Agreement (SLA) for different smart city applications. A closed-loop control workflow is implemented where upon detecting a QoS performance degradation, the xApp immediately computes and adjusts the resources allocation in the MAC layer for the degraded slices to restore the expected performance.
As a result of this open call extension, 6G-PATH experimenters gained access to a robust, open-source and Open RAN infrastructure powered by OpenAirInterface. This extension brought to the Aveiro testbed eleven new 5G Advanced and Open RAN software features, including a user-friendly web-based dashboard that enhances the testbed’s usability, along with exceptional support from the Allbesmart team.
Allbesmart is the company behind the OAIBOX product line ( www.oaibox.com), the leading 5G open-source test network for research and experimentation. Allbesmart’s participation in the 6G-PATH open call accelerated the development of advanced features for the OAIBOX Open RAN product, enabling them to further mature the technology for commercial partners and engage potential new customers for proof-of-concept testing and trials. The xApps for RAN slicing automation, developed and tested within the 6G-PATH smart cities use cases, will be integrated into the OAIBOX Open RAN product. Feedback from 6G-PATH experimenters will play a crucial role in refining and enhancing the OAIBOX product line.
Targeted Use Cases
- Smart city vertical use cases are the target of this testbed.
- All use case topics are accepted. Testbed prefers use cases targeting one or more of the following topics:
- V2X sensing and communication;
- Autonomous mobility;
- Security and Safety (V2X network, Vulnerable Road Users, cooperative manoeuvres, AR/VR);
- City Monitoring and Multimodal transportation intelligent systems;
- Edge service and mobility in autonomous environments;
- Private and public 5G networks integration;
- Environmental and Mobility Monitoring (AI-based detection);
- Machine Learning and Federation;
- Use of TSN standards for precise time synchronisation and service differentiation.