PCRF provides proxying requests from fastDPI to the Radius server. It is a part of the standard Stingray Service Gateway installation package, but if necessary, it can be used as a dedicated server.

In order to run PCRF you can use the following hardware or virtual machines matching the following characteristics:

1. CPU 2.5 GHz, 1 pcs
2. RAM 512 MB - 1 GB
3. HDD 50 GB - 250 GB
4. Operating system Cent OS 6.4+, 8+, VEOS
5. NIC ranging from 10 Mb/s

1. Install the Network Time Protocol daemon

   yum install ntp -y
   ntpdate pool.ntp.org
   service ntpd start
   chkconfig ntpd on

2. Add vasexperts repository

   rpm --import http://vasexperts.ru/centos/RPM-GPG-KEY-vasexperts.ru
   rpm -Uvh http://vasexperts.ru/centos/6/x86_64/vasexperts-repo-2-1.noarch.rpm

3. Install the fastPCRF

   yum install fastpcrf

4. Make sure the service is running

   service fastpcrf start

5. Сonfigure fastpcrf service to run at startup

   chkconfig fastpcrf on

6. Open firewall ports in order to access the fastDPI and Radius servers

   vi /etc/sysconfig/iptables
   -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
   #Radius
   -A INPUT -m state --state NEW -m udp -p udp --dport 1812 -j ACCEPT
   -A INPUT -m state --state NEW -m udp -p udp --dport 1813 -j ACCEPT
   -A INPUT -m state --state NEW -m udp -p udp --dport 3799 -j ACCEPT
   #fastDPI
   -A INPUT -m state --state NEW -m tcp -p tcp --dport 29002 -j ACCEPT

and restart firewall for the rules to take effect

service iptables restart

1. Disable selinux ¹⁾

   setenforce 0
   vi /etc/selinux/config
   SELINUX=disabled

You can get these utilities from the server where fastDPI is installed.
The utility files are located in /usr/sbin/.

1. Copy the utilities to the home directory

   cp /usr/sbin/fdpi_cli /home/vasexpertsmnt
   cp /usr/sbin/fdpi_ctrl /home/vasexpertsmnt

2. Move these files to the server where fastPCRF is installed, to /home/vasexpertsmnt

How to use the utility:

fdpi_cli -r 1.1.1.1 dpi config get trace_ip 
fdpi_cli -r 2.2.2.2 pcrf config get verbose
fdpi_ctrl -r 1.1.1.1:29000 list all --bind

Server address – 1.1.1.1 where the fastDPI module is installed.
Server address – 2.2.2.2 where the fastPCRF module is installed.