UPF (User Plane Function)

The User Plane Function is the 5G core element that forwards subscriber data packets between the radio access network and external data networks, applies QoS marking, performs packet inspection for charging, and supports lawful interception. It is controlled by the SMF over PFCP. The UPF is the 5G evolution of the 4G SGW/PGW user plane and is typically deployed at the network edge for low-latency use cases, which expands its exposure surface and makes UPF hardening a core 5G security task.

Categories: Radio Access NetworkCore NetworkIdentity and Subscriber

UPF in context

The radio access network is where mobile devices attach to the operator's infrastructure. Attacks in this layer include IMSI catching, rogue base stations and downgrade attacks; defenses rest on mutual authentication, integrity-protected signaling and Open RAN supply-chain hygiene.

The mobile core carries subscriber sessions, mobility and policy. In 4G it is the EPC (MME, HSS, S/PGW); in 5G it is the Service-Based Architecture with AMF, SMF, UPF, AUSF, UDM and the NRF.

To place UPF in the wider telecom-security picture, review Confidentiality, Encryption, FDD, MNO, TMSI and VRAN — each entry cross-references back to this page so you can walk the topic in either direction.

Related terms

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.