Layer 7 capabilities for Diameter traffic
Diameter is a protocol used primarily for authentication, authorization, and accounting (AAA) in telecom networks (e.g., LTE, 5G). FortiADC provides application-aware control for Diameter traffic, allowing selective modification and session handling.
Packet Processing
Application-Layer Attribute Rewriting
FortiADC allows modification of critical Diameter AVPs (Attribute-Value Pairs), including Origin-Host, Origin-Realm, Vendor-ID, and Product-Name.
Session Handling and Timeout
-
FortiADC supports Idle Timeout configurable up to 86,400 seconds (24 hours). This controls session persistence.
-
FortiADC can keep the client connection alive even if the server closes its side. This ensures resilience in mobile core or AAA networks where clients expect persistent sessions.
Security
FortiADC can enable TLS encryption for Diameter messages on the client side. This is useful for securing AAA communications in environments that require encrypted Diameter signaling (e.g., Diameter over TLS as per 3GPP standards).
Content Routing
FortiADC doesn't support content routing for Diameter traffic.
Load Balancing Methods
Round Robin
Persistence
Source Address, Diameter Session ID (default)
Security Check
FortiADC doesn't support security check for Diameter traffic.