Ouroboros Telecom
2G / 3G

Every call, every SMS, every data session on your 2G/3G network depends on the HLR. Deploy one that scales from a single MVNO to a multi-brand network without a platform change or a migration event.

AMTP · HLR
Multi-tenancySupported — MNO, MVNO, MVNE, MVNA
AuthenticationAuC integrated · COMP128, Milenage, 5G AKA
RoamingPer-VPLMN profiles · Number Portability
Shared UDRHSS, UDM/AUSF, PCRF/PCF, OCS/CHF, MNP
DeploymentBare metal (COTS) · VMware · KVM · Docker
Standards3GPP compliant
148M+
subscribers on platform
30+
countries in production
10M+
subscribers per HLR
3GPP
standards compliant
00The problem

The HLR is not a component you migrate mid-growth. It holds every subscriber identity, every service profile, every location record on the network. A migration touches all of it — at exactly the moment when the network is busy and the business cannot afford downtime.

Most operators hit this problem in one of two ways. The first: they launched on a lightweight platform, grew past its limits, and now face a costly rebuild. The second: they are running end-of-life hardware from a tier-1 vendor whose renewal pricing no longer fits the business.

Either way, the answer should not be a rip-and-replace.

01How it works

HLRcore
MSC/VLRMobility
MVNOMulti-tenant
AuCAuthentication
HSS-UDMShared UDR
01 / 04

Every transaction starts here

Every call routing decision, every SMS delivery, every data session authorisation on a 2G or 3G network runs through the HLR. The MSC queries it on every transaction. A slow HLR slows the network. A failed HLR stops it.

02 / 04

One platform, many brands

The Ouroboros HLR stores subscriber identity (IMSI), phone number (MSISDN), subscribed services, and real-time location data for every subscriber on the platform. A single instance serves an MNO and its hosted MVNOs at the same time. Each brand gets its own isolated subscriber records, IMSIs, MSISDNs, and service profiles. No custom development. No separate deployment per tenant.

03 / 04

Authentication built in

Authentication is built in. The AuC runs inside the same platform — one vendor, one contract, one call when something needs fixing. It supports COMP128-1, -2 and -3, Milenage for 2G and 3G, and the 4G and 5G AKA vectors with one sequence number shared across generations. Keys can be offloaded to a Thales hardware security module, and new ciphering algorithms deploy on demand.

04 / 04

One subscriber core, shared

The subscriber database (UDR) is shared with the Ouroboros HSS, 5G UDM/AUSF, PCRF/PCF, OCS/CHF and MNP. That means one source of truth across 2G/3G, 4G, charging, and policy systems. No duplicated records. No sync issues. No data migration project when the network adds a generation.

Reference architecture
Radial architecture diagram of the Ouroboros HLR with integrated AuC: MAP-D to the MSC/VLR, MAP-C to the G-MSC, MAP-C send-routing-info-for-SM to the SMSC, SS7/SIGTRAN M3UA to the STP and on to roaming partners per VPLMN, and OSS/BSS provisioning. Subscriber data sits in a separate shared UDR behind the HLR, and it is that repository the HSS/UDM and the OCS/PCRF bind to.

HLR · AuC — subscriber core interfaces

02Use cases

From a single MVNO launch to a multi-country brand portfolio — same platform, no migration events.

01

Hosting multiple MVNOs on one core

An MVNE or MVNA onboarding new MVNO brands runs all tenants on one HLR instance. Each tenant gets isolated subscriber records, service profiles, and roaming policies. New brands go live without a new HLR deployment.

02

Legacy HLR replacement

Running end-of-life hardware? The Ouroboros HLR connects via standard provisioning interfaces. The MSC, SMSC, and STP stay exactly where they are. The network does not notice the change.

03

M2M and multi-identifier deployments

M2M operators managing devices with multiple network identities handle complex subscriber records across IMSI, MSISDN, and operator code on one platform. No custom development required.

04

Roaming management per partner

Each roaming agreement gets its own access policy, configured independently per VPLMN. Commercial teams set margins and service levels at the partner level, not as a blanket network setting.

Legos

We've selected Ouroboros because it was the best company capable of fulfilling our need for a scalable and virtualised full MVNO platform. Moreover, the Ouroboros team is pragmatic, flexible and responsive.

Pascal Prot

CEO-CTO · Legos

03Specifications

Multi-tenancy
Supported — MNO, MVNO, MVNE, MVNA
Capacity
From 1 000 to over 10 million subscribers per node
Interfaces
MAP C, D, Gr, G, H over SS7 TDM or SIGTRAN M3UA, TCAP application context negotiation
Subscriber identifiers
Multiple IMSI, MSISDN, operator code per subscriber, n to n relationships
AuC
XOR, COMP128-1/2/3, Milenage 2G/3G, 4G (EPS-AKA) and 5G AKA with shared SQN, Thales HSM offloading
CAMEL
All CAMEL phases and CSIs in the subscriber profile
USSD routing
Several USSD gateways per short code or subscriber
New ciphering algorithms
Deployable on demand
Roaming profiles
Per-VPLMN
Shared UDR
Compatible with HSS, UDM, OCS, PCRF
Number Portability
Optional, per-country regulation
Options
EIR, Welcome / Bon Voyage SMS VAS
Provisioning
HTTP REST API, SOAP, SQL stored procedures
Monitoring
Prometheus metrics, HTTP, SNMP alarms and counters
Redundancy
Geographic and local
IP support
MAP over SIGTRAN and Diameter on IPv4, IPv6 or dual-stack transport
Deployment
Bare metal (COTS, 1U with SIGTRAN, 2U with SS7 TDM) · VMware · KVM · Docker
NFV
Supported
Standards
3GPP compliant
Lawful Interception
Option for accredited operators: target events handed over to the authorities' mediation (ETSI X1 / X2)
Availability
99.999%
Business model
OPEX rental · CAPEX licence
04Inside the platform

01

AuC integrated

Authentication runs inside the HLR. New ciphering algorithms deploy on demand. One vendor, one contract. When authentication needs attention, one call resolves it.

02

One platform for multiple brands

A single HLR instance serves MNOs, MVNOs, MVNEs, and MVNAs with fully isolated tenant records with different OP/OPc. New MVNO brands go live without deploying new HLR infrastructure. Onboarding is a configuration change, not a procurement cycle.

03

Shared subscriber database across generations

The subscriber data repository is shared across 2G/3G (HLR), 4G (HSS), 5G SA (UDM), and charging/policy (OCS/PCRF). One record per subscriber across the full network stack. No duplicated data, no synchronisation work, no migration project when adding 4G.

04

Per-VPLMN roaming profiles

Each roaming partner gets its own access policy, configured independently. Margins and service levels follow the commercial agreement, not a blanket network setting.

05

NFV deployment

Runs on VMware, KVM, Docker or AWS, or on a 1U server with SIGTRAN (2U with SS7 TDM boards). Deploy on infrastructure already in place. No hardware procurement, no rack space negotiation.

06

Options built on our own code

Because Ouroboros owns the whole HLR code, options are added without a third party: EIR, virtual HLR for USSD offloading, Welcome and Bon Voyage SMS for roamers, number portability adapted to national rules, Diameter connector (HSS), 5G UDM/AUSF on the same UDR, and Lawful Interception for accredited operators.

07

Open provisioning and monitoring

An HTTP REST provisioning API and SQL stored procedures open the HLR to any third-party provisioning tool, with the internal table description provided for user extensions. SNMP, Prometheus metrics and HTTP alarms and counters feed the operator's supervision.

08

IPv4, IPv6 and dual-stack

Every interface runs over IPv4, IPv6 or both. The element fits an IPv6 core or a mixed network without a separate configuration.

05Why Ouroboros

Traditional tier-1 HLR vendors build for networks at tier-1 scale. The minimum deployment size, the hardware assumptions, the contract structure, and the pricing all reflect that. For operators below several million subscribers, or for anyone hosting brands that a tier-1 contract was never sized for, that is the wrong fit.

The Ouroboros HLR is 3GPP compliant, runs at 99.999% availability, and has been in production since 2011. It delivers that carrier-grade capability at a scale and commercial model the tier-1 vendors are not targeting.

OPEX rental is available. Cost scales with subscriber revenue. No upfront commitment before the network generates income.

Ouroboros Telecom

Give us your tenant count and current platform, and we'll come back with a deployment proposal: OPEX or CAPEX, virtualised or bare metal, before growth makes the conversation urgent.