Architecture

There are three main components Amarisoft RAN, Edge Cloud node and Core DC where Security Framework tools are deployed. Amarisoft RAN provides an API for collecting 5G metrics. In Edge node a Prometheus server and the two exporters are running. In Core DC an Influx DB is deployed. Also, the anomaly detection software and a provided UI through Grafana are deployed. Amarisoft Exporter collects 5G metrics from Amarisoft RAN through a socket. Node Exporter collects metrics from the Edge Node and Prometheus server scrapes both exporters. Prometheus publishes collected metrics to Influx DB every 15 seconds. Anomaly Detection model fetches ingested data from Influx DB and decides if a record is an anomaly compared to normal records or not. Detected anomalies are saved to Influx DB. Grafana UI depicts metrics gathered from Edge Node and Amarisoft, and also keeps a table with all detected anomalies. For each anomaly there is the feature to show more info about collected and monitored metrics.