Remote UE tunnel

The tunnel exists for UEs you cannot upload: a proprietary modem, a dev board, a device with a JTAG harness. The control plane crosses the internet; RF stays local to whichever side owns the radio.

Start the agent

aeon agent install --token "$AEON_TOKEN"
sudo systemctl enable --now aeon-agent

aeon tunnel up --lane eu-west-1/lime-03 --local-ue 192.168.10.24:9000
aeon tunnel status --watch

Network requirements

• Outbound TCP 443 only — no inbound ports, no firewall exceptions.
• Round-trip latency under 80 ms for protocol conformance suites.
• Under 25 ms for timing-sensitive RRM cases; otherwise use a hosted or shipped model.
• mTLS between agent and lane; the agent never accepts inbound connections.

Latency and determinism

TTCN-3 timers are specified in 3GPP with real margins, but a jittery tunnel can still turn a PASS into an inconclusive verdict. The platform measures RTT continuously and marks any execution whose jitter exceeded the suite's budget, so you never ship a report built on a noisy link.