● real radio live stack srsRAN 25.10 Open5GS 2.8.0 5G SA free · open

A 5G network with an actual physical layer.

Every other 5G lab runs UERANSIM — which has no PHY at all. It fabricates NAS and RRC messages over UDP: no OFDM, no PRACH, no HARQ, no scheduler, nothing to measure. This one runs a real srsRAN gNB and a real srsUE exchanging genuine baseband samples into a real Open5GS core — so you can watch a preamble land, a retransmission recover, and an MCS fall as the channel degrades.

5g-realstackpci=1 · n3 FDD · 20 MHz · 106 PRB imsi-999700000000001 · registered
Uu · IQ 23.04 Msps F1-C F1-U E1 N2 · NGAP N3 · GTP-U N4 · PFCP N6 srsUE 5G SA · soft USIM ZeroMQ RF virtual radio srsRAN gNB disaggregated · release 25.10 DU PHY·MAC·RLC CU-CP RRC · NGAP CU-UP PDCP · GTP-U Open5GS core 17 network functions · 2.8.0 AMF N2 · NAS SMF session UPF N3 · N6 AUSF·UDM 5G-AKA Internet HTTPS 200 · 0.30 s

the difference

One of these can be measured. The other can only be read.

Both print “registration complete”. Only one of them produces a signal.

every other 5G lab

UERANSIM + core

  • No physical layer at all — messages are UDP datagrams between processes.
  • No PRACH. Attach is a function call, not a preamble.
  • No HARQ, no retransmissions, no BLER.
  • No scheduler, no MCS, no link adaptation.
  • Nothing ever degrades — the channel is an abstraction.

this lab

srsRAN gNB + srsUE + Open5GS

  • Real OFDM baseband at 23.04 Msps across the radio.
  • Real random access: preamble 0 → ra-rnti 0x39 → c-rnti 0x4601.
  • Real HARQ processes and retransmissions you can count.
  • Real per-slot grants, CSI reports and link adaptation.
  • Degrade the channel — watch MCS, BLER and throughput answer.

coverage

Nine interfaces, all carrying live traffic at once.

The gNB runs a disaggregated CU‑CP / CU‑UP / DU, so F1 and E1 are real protocol exchanges here — not diagrams of one.

UuUE ↔ gNB air interfacePHY·MAC·RLC·PDCP·RRC
F1-CDU ↔ CU-CPF1AP
F1-UDU ↔ CU-UPGTP-U
E1CU-CP ↔ CU-UPE1AP
N2gNB ↔ AMFNGAP / SCTP
N3gNB ↔ UPFGTP-U
N4SMF ↔ UPFPFCP
SBIcore service meshHTTP/2 · TS 29.500
N6UPF ↔ internetreal IP egress

evidence, not claims

Captured from the running stack.

Unedited output from the machine this lab runs on.

root@5g-realstack — ./verify.sh
# random access — a real preamble, not a function call
[MAC-NR] Random Access Transmission: prach_occasion=0, preamble_index=0, ra-rnti=0x39
[MAC-NR] Random Access Complete.     c-rnti=0x4601, ta=0

# the core's own view
[amf] INFO: [imsi-999700000000001] Registration complete
[smf] INFO: UE SUPI[imsi-999700000000001] DNN[internet] IPv4[10.45.0.4]

# live physical layer — per slot, with real measurements
[PHY] PUCCH: rnti=0x4601 format=2 prb=[7, 8) symb=[4, 6) csi1=1111 sinr=11.3dB

# and it is a real network — traffic over the 5G bearer
$ ip netns exec ue1 ping 8.8.8.8
3 packets transmitted, 3 received, 0% packet loss, rtt avg 34.0 ms
$ ip netns exec ue1 curl https://www.google.com
HTTPS 200  0.296 s  dl=82985 B

what you actually do

Six things a simulator cannot teach you.

01

Watch a UE find a cell from nothing

PSS/SSS correlation, MIB decode, SIB1 acquisition — on the real grid, before any message exists.

02

Break the channel on purpose

Inject noise and watch MCS fall, BLER climb, HARQ retransmissions spike and throughput collapse — live.

03

Trace one attach across all nine interfaces

A single power-on, time-aligned from PRACH through F1AP, E1AP, NGAP and the core's HTTP/2 SBI calls.

04

Read real ASN.1, not pretty-printed structs

Genuine UPER-encoded RRC decoded to the bit, cross-referenced to the 3GPP clause that defines it.

05

Follow one IP packet end to end

From the UE socket through PDCP ciphering, RLC, MAC, the air, GTP-U on N3, the UPF, and out.

06

Open the 5G-AKA envelope

RAND, AUTN, XRES*, K_AUSF on the wire — with the K and OPc that produced them, so the maths is checkable.

the machine

Exact configuration.

Nothing here is illustrative — this is the deployed cell.

Core network
Open5GS 2.8.0 · 17 NFs
RAN
srsRAN Project 25.10
UE
srsUE · 5G SA
Radio
ZeroMQ virtual RF · 23.04 Msps
Band
n3 FDD
Downlink / uplink
1842.5 / 1747.5 MHz
Bandwidth · SCS
20 MHz · 15 kHz
Resource blocks
106 PRB
PCI · SSB ARFCN
1 · 368410
PLMN · TAC · slice
999/70 · 1 · SST 1
Architecture
CU-CP + CU-UP + DU
Captures
MAC & NGAP pcap, downloadable

Stop reading about the air interface.

Attach a real UE to a real gNB, and watch the whole network answer.

Enter the live lab → free · no signup

CafeTele · Real 5G RAN + Core Lab · srsRAN × Open5GS