Roaming in Cellular Networks

Understanding how mobile roaming works — the signaling architecture, authentication processes, billing mechanisms, roaming agreements, and the evolution from circuit-switched roaming to VoLTE and 5G roaming.

Roaming Fundamentals

Key Terminology

How Roaming Registration Works (GSM/UMTS)

When your phone detects a foreign network:

1. Network Selection — Phone scans available PLMNs and selects one (based on SIM roaming priority list or signal strength)
2. Location Update Request — Phone sends IMSI to visited network's MSC/VLR
3. Authentication Query — VLR contacts your HPLMN's HLR over SS7 signaling network
4. Authentication Vectors — HLR sends authentication triplets/quintuplets to VLR
5. Challenge-Response — VLR authenticates your SIM using the received vectors
6. Registration Confirmation — VLR registers you; HLR records your current visited network
7. Service Activation — You can now make/receive calls and use data

This entire process takes 5-15 seconds — the delay you experience between turning off airplane mode and seeing network bars.

Voice Call Routing While Roaming

Incoming Calls (Mobile Terminated)

When someone calls your number while you are roaming abroad:

1. Call reaches your home MSC (based on your phone number's routing)
2. Home MSC queries HLR: "Where is this subscriber?"
3. HLR responds: "Registered at Visited MSC X in country Y"
4. Home MSC forwards call to Visited MSC via international trunks
5. Visited MSC pages your phone through local base stations
6. Your phone rings in the foreign country

Important: The caller always dials your normal number — they do not know (or need to know) that you are abroad. The routing is handled entirely by the network.

Outgoing Calls (Mobile Originated)

Outgoing calls while roaming are simpler — the visited network routes the call directly to the destination (domestic or international), and records a billing event that is later sent to your home operator.

Data Roaming Architecture

GPRS Roaming Exchange (GRX)

For mobile data, the roaming architecture is more complex because IP packets must be routed:

Home-Routed Model (most common):

All your data traffic is tunneled back to your home network before reaching the internet. This means:

• Your IP address belongs to your home network
• All traffic traverses the international link (adds latency)
• Home network applies your subscription's policies (data caps, content filtering)
• Latency increases by 50-200 ms compared to local usage

Local Breakout Model (newer, LTE):

Traffic exits locally in the visited country — lower latency but requires more trust between operators and complex policy coordination.

Roaming Agreements and Business

Bilateral Agreements

Roaming requires a contract between every pair of operators. A large operator like Vodafone has 500+ roaming agreements worldwide. These agreements specify:

• Which services are available (voice, SMS, data, VoLTE)
• Quality of service commitments
• Inter-operator tariffs (wholesale charges)
• Fraud management responsibilities
• Technical interface specifications

Clearing Houses

With hundreds of bilateral relationships, direct billing would be impossibly complex. Clearing houses (like BICS, Syniverse, and GSMA) aggregate, validate, and settle roaming charges between operators:

EU Roaming Regulation ("Roam Like at Home")

Since June 2017, EU regulations eliminated retail roaming charges within Europe. Your home plan applies anywhere in the EU at no extra cost. This required:

• Wholesale price caps between operators (€2/GB for data in 2022)
• Fair use policies to prevent permanent roaming abuse
• Significant revenue impact on operators ($5+ billion/year industry-wide)

LTE and VoLTE Roaming

LTE Roaming Challenges

LTE roaming is more complex than 2G/3G because:

• Voice over LTE (VoLTE) requires IMS infrastructure at both ends
• Different operators use different LTE bands (interoperability)
• Quality of Service must be maintained across network boundaries
• IPX networks must support adequate bandwidth for data-heavy LTE usage

VoLTE Roaming Models

5G Roaming Architecture

5G introduces Service-Based Architecture (SBA) that changes roaming fundamentals:

• SEPP (Security Edge Protection Proxy) — Secures inter-operator signaling (replaces diameter-based interconnect)
• Network slicing — Roaming users can access specific network slices in visited network
• Edge computing — Local breakout essential for low-latency 5G services
• SUPI privacy — Subscriber identity protected even during roaming registration

Roaming Fraud

Operators use real-time fraud detection systems that flag unusual roaming patterns (sudden activation in high-risk country, abnormal call volumes, rapid country changes).

Key Takeaways

1. Roaming registration involves real-time signaling between visited and home networks — the VLR authenticates you using vectors provided by your home HLR
2. Incoming calls while roaming are routed through your home network first, then forwarded internationally to the visited network — callers dial your normal number
3. Data roaming typically uses home-routing (traffic tunneled back to home PGW), adding latency but maintaining home network policy control
4. Bilateral roaming agreements and clearing houses manage the complex commercial relationships between 800+ operators worldwide
5. EU "Roam Like at Home" regulation eliminated retail roaming charges in Europe, fundamentally changing the roaming business model
6. VoLTE roaming requires IMS coordination between operators and is still being deployed globally (many calls still fall back to 3G)
7. 5G roaming adds new security (SEPP), privacy (SUPI concealment), and capability (network slicing) but increases architectural complexity