The SS7/Diameter Handshake: How Global Roaming Agreements Dictate International Data Speeds

A traveler steps off a flight at Narita International Airport, disables airplane mode, and watches their smartphone latch onto a local Japanese 5G network. The signal bars fill the screen, and the network indicator promises next-generation speeds. Yet, when they attempt to load a transit map or initiate a video call, the connection hesitates, buffering as if it were struggling for a signal. The phone is physically in Tokyo, but the data it transmits is not.

The hesitation is a product of geometry and international agreements. Because the traveler is using a roaming plan provided by their home carrier in New York or London, the local Japanese cell tower does not simply connect them to the nearest internet exchange. Instead, every byte of data is encapsulated, pushed into an undersea fiber-optic cable, and hauled across the globe to a core network hub in their home country before it is allowed to touch the public internet.[4]

This detour is established in the first milliseconds of the connection through a process known as the signaling handshake. When a foreign device appears on a visited network, the local infrastructure must verify that the device is authorized to connect and determine who will pay for the data it consumes. Historically, this inter-network communication was handled by Signalling System No. 7 (SS7), a protocol suite developed in 1975. In modern 4G and 5G networks, this authentication is managed by an upgraded, IP-based protocol called Diameter.[1][5]

The handshake dictates the architecture of the session. According to the GSMA's Steering of Roaming guidelines, the dominant configuration for international data is "Home Routing." In a home-routed setup, the visited network provides the radio access—the physical connection between the phone and the cell tower—but acts merely as a conduit. The actual processing, policy enforcement, and internet gateway functions are reserved entirely for the home network.[3]

Carriers heavily favor home routing because it preserves their control over the subscriber. By forcing the data back to their own servers, the home operator can accurately meter data consumption in real time, enforce the data caps associated with the user's specific plan, and apply domestic security filters or parental controls. It ensures that the billing apparatus is never out of sync with the user's actual consumption.[3]

The cost of this control is paid in milliseconds. Light traveling through fiber-optic glass moves at roughly two-thirds the speed of light in a vacuum. A round trip between Tokyo and London takes a minimum of 250 to 300 milliseconds, purely due to the physical distance. When a user requests a webpage, the data must traverse this distance multiple times to complete the necessary transmission protocols, turning a fast 5G radio link into a sluggish user experience.[2]

Telecom infrastructure provider BICS describes this as a major bottleneck, noting that this "'hairpin' routing deters low latency in roaming as the data first travels back to the central core network of the home operator before reaching the user." While raw download speeds might remain acceptable for streaming a movie once the buffer is filled, the high latency destroys the responsiveness required for interactive applications. Video calls suffer from noticeable lag, online gaming becomes impossible, and enterprise applications like remote condition monitoring or autonomous vehicle telemetry fail entirely under the delay.

The technical alternative to this global detour is known as "Local Breakout." Under a local breakout architecture, the visited network still uses Diameter signaling to authenticate the user with their home carrier, but once approved, the data is allowed to exit directly onto the local internet. This eliminates the transoceanic hairpin turn, dropping latency to the tens of milliseconds and restoring the snappy performance expected of modern cellular networks.[4]

Despite its performance advantages, local breakout remains rare for consumer data roaming. The reluctance stems from the complexities of inter-operator billing and the loss of direct traffic control. If a user's data exits the network in the visited country, the home operator must rely on delayed accounting records from the foreign carrier to track usage, increasing the risk of billing disputes and fraud.[3]

This architectural divide is the hidden variable in the booming market for travel eSIMs. When a traveler purchases a digital SIM card for a trip, the underlying routing determines the quality of the connection. An eSIM that provisions a true local line utilizes local breakout, keeping all traffic within the destination country. Conversely, many cheap travel eSIMs are actually roaming profiles anchored in third-party countries, meaning a user in France might unknowingly have their data routed through a core network in Hong Kong.[2]

Beyond performance, the reliance on global signaling protocols introduces persistent security vulnerabilities. The European Union Agency for Cybersecurity (ENISA) has repeatedly warned that the inter-network signaling required for roaming—whether SS7 or Diameter—was designed with an implicit trust model. Because operators must accept signaling messages from foreign networks to allow roaming, malicious actors who gain access to the signaling network can exploit these protocols.[1]

As the technical maintainers of the standard note, the legacy SS7 protocol "has been shown to have several security vulnerabilities, allowing location tracking of callers, interception of voice data, intercept two-factor authentication keys, and possibly the delivery of spyware to phones."[5]

The transition to 5G Standalone networks introduces new security proxies designed to authenticate these inter-network messages, but the fundamental routing economics remain unchanged. As long as the business models of mobile operators require strict, real-time control over subscriber billing, the physical distance between a traveler and their home country will continue to dictate the speed of their connection, regardless of the generation of the cell tower they stand beneath.[1][6]