<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hello,</p>
    <p>there were companies that pushed hundred thousands of active tls
      connections to same kamailio and it went fine. You will have to do
      some tuning to kamailio params as well as to the operating system
      limits, but if you have powerful hardware, having such number of
      active tls connections should be fine.</p>
    <p>Cheers,<br>
      Daniel<br>
    </p>
    <div class="moz-cite-prefix">On 27.02.19 11:30, Pintu Lohar wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAB=mOZT3JLcA0AeXhhp5JGMvuRzEORZLF60-chSFR3i_PKaymg@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div><span
style="color:rgb(0,0,0);font-family:Calibri,Helvetica,sans-serif;font-size:16px">Hi
            Yasin, <br>
          </span>Not yet tested, My bad - it's 0.1 million with TLS but
          yes we are yet to test ), We need to distribute the users to
          different Kamailio cluster through API server. However, Would
          like to try Option 2 as well and test with it. </div>
        <div><br>
          Regards </div>
        <div>Pintu Lohar </div>
        <br>
        <div class="gmail_quote">
          <div dir="ltr" class="gmail_attr">On Wed, Feb 27, 2019 at 7:16
            PM YASIN CANER <<a href="mailto:caner_yaso@hotmail.com"
              moz-do-not-send="true">caner_yaso@hotmail.com</a>>
            wrote:<br>
          </div>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px
            0.8ex;border-left:1px solid
            rgb(204,204,204);padding-left:1ex">
            <div dir="ltr">
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Hello
                Pintu</div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
              </div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">1
                million TLS user? Have u ever test with tester on
                Kamailio ?Because I remembered in sr-mails that an user
                tested on 1000 client on TLS transport , it consumes so
                much CPU etc . I guess 1 milliyonTLSUser make big impact
                your system for all registration/call.</div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
              </div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">I
                tested option-2 for relaying registers about 1-2 years
                ago for proof of concept. It works fine.</div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
              </div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">you
                can replicate user location data by Dmq_usrloc module
                and can use path header then build a triangle topology
                to bridge calls. </div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Or</div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">You
                can build a Location Information service to find which
                kamailio  has UAC <span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">
                  data </span>.</div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
              </div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
                  id="gmail-m_-8050397093345896685" title="Search for
                  suggestions">Best Regards.</span></div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
              </div>
              <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Yasin
                CANER</div>
              <div>
                <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
                </div>
                <hr style="display:inline-block;width:98%">
                <div id="gmail-m_-8050397093345896685divRplyFwdMsg"
                  dir="ltr"><font style="font-size:11pt" face="Calibri,
                    sans-serif" color="#000000"><b>From:</b> Pintu Lohar
                    <<a href="mailto:pintulohargcetts@gmail.com"
                      target="_blank" moz-do-not-send="true">pintulohargcetts@gmail.com</a>><br>
                    <b>Sent:</b> Wednesday, February 27, 2019 12:27 PM<br>
                    <b>To:</b> YASIN CANER<br>
                    <b>Cc:</b> Kamailio (SER) - Users Mailing List<br>
                    <b>Subject:</b> Re: [SR-Users] Kamailio behind NAT
                    or With Public IP - Which one is highly recommended</font>
                  <div> </div>
                </div>
                <div>
                  <div dir="ltr">
                    <div dir="ltr">Hi Yasin, <br>
                      Thanks indeed for your valuable input for the
                      active-active cluster(Option-1) &  Option-2<br>
                      <br>
                      <div>We definitely would like to try setting up an
                        active-active cluster for the next phase if not
                        in current phase.</div>
                      <div>But In order to use  Kamailio in the
                        active-active cluster,  I think we need to
                        forward or replicate registration to both the
                        active-active server?</div>
                      <div>in order to proxy the invite packet through
                        the server where the UA is registered?  <br>
                        <br>
                      </div>
                      <div>We use the following use cases   : </div>
                      <div>1. We use FCM and APNS push to wake up the
                        app.<br>
                        2. Multi forking / Late forking cases are also
                        involved.<br>
                        3. Using Kamailio as a stateful proxy.</div>
                      <div><br>
                        Thanks & Regards </div>
                      <div>Pintu </div>
                    </div>
                    <br>
                    <div
                      class="gmail-m_-8050397093345896685x_gmail_quote">
                      <div dir="ltr"
                        class="gmail-m_-8050397093345896685x_gmail_attr">On
                        Wed, Feb 27, 2019 at 3:10 PM YASIN CANER <<a
                          href="mailto:caner_yaso@hotmail.com"
                          target="_blank" moz-do-not-send="true">caner_yaso@hotmail.com</a>>
                        wrote:<br>
                      </div>
                      <blockquote
                        class="gmail-m_-8050397093345896685x_gmail_quote"
                        style="margin:0px 0px 0px 0.8ex;border-left:1px
                        solid rgb(204,204,204);padding-left:1ex">
                        <div dir="ltr">
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Hello,</div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
                          </div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">My
                            suggestion is that stay away from NAT if you
                            dont have to. various  sip client/Firewalls
                            make out troubles for registration and
                            invites,  even if Kamailio can handle it. 
                            If you have a high load TLS connection /
                            subscriber , I think you should use load
                            balancer and NAT options.</div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
                          </div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">For
                            example;</div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">1
                            - Load balancer like F5  that balancing your
                            connection active-active Kamailios </div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
                          </div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
                          </div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">UAC
                            ----> F5 ------> Kamailio -1 (<span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">advertises<span> </span></span>public
                            IP)</div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> 
                                             |</div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> 
                                              ------->  <span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">Kamailio
                              -2 (advertises public IP)</span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
                            </span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">2-
                              Use kamailio as MultiHomed that convert
                              transport layer to tcp/udp</span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
                            </span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">UAC
                              ---------> Kamailio(TLS-PUBLIC
                              IP-mhomed) -------> 
                              Kamailio-1(TCP/UDP)</span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"> 
                                                                       
                                                                    |</span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"> 
                                                                       
                                                                   
                               ---------> <span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">Kamailio-2(TCP/UDP)</span></span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
                              </span></span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
                              </span></span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">Good
                                luck</span></span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span
style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
                              </span></span></div>
                          <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Yasin
                            CANER</div>
                          <div>
                            <div
style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
                            </div>
                            <hr style="display:inline-block;width:98%">
                            <div
id="gmail-m_-8050397093345896685x_gmail-m_-8656783917937539143divRplyFwdMsg"
                              dir="ltr"><font style="font-size:11pt"
                                face="Calibri, sans-serif"
                                color="#000000"><b>From:</b> sr-users
                                <<a
                                  href="mailto:sr-users-bounces@lists.kamailio.org"
                                  target="_blank" moz-do-not-send="true">sr-users-bounces@lists.kamailio.org</a>>
                                on behalf of Pintu Lohar <<a
                                  href="mailto:pintulohargcetts@gmail.com"
                                  target="_blank" moz-do-not-send="true">pintulohargcetts@gmail.com</a>><br>
                                <b>Sent:</b> Tuesday, February 26, 2019
                                8:09 AM<br>
                                <b>To:</b> <a
                                  href="mailto:sr-users@lists.kamailio.org"
                                  target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a><br>
                                <b>Subject:</b> [SR-Users] Kamailio
                                behind NAT or With Public IP - Which one
                                is highly recommended</font>
                              <div> </div>
                            </div>
                            <div>
                              <div dir="ltr">Hi Everyone, <br>
                                <br>
                                Which one among the below option is
                                highly recommended for setting up
                                Kamailio (for production)<br>
                                  1.  Kamailio behind NAT <b>or</b> <br>
                                   2. Setting up Kamailio using public
                                IP?<br>
                                <br>
                                 are there any disadvantages if we setup
                                Kamailio behind NAT and use advertise
                                option in listen parameters?<br>
                                <br>
                                We have tested both the options, and
                                both the options work great for us( a.
                                Kamailio behind NAT with advertising in
                                listen parameters b.Kamailio setup with
                                public IP).  So wondering which one is
                                best and highly recommended? <br>
                                <br>
                                Some extra info :<br>
                                1. We use TLS
                                <div>2. Using coturn for media <br>
                                  <div> <br>
                                    Thanks</div>
                                  <div>Pintu </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </blockquote>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio World Conference - May 6-8, 2019 -- <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a>
Kamailio Advanced Training - Mar 4-6, 2019 in Berlin; Mar 25-27, 2019, in Washington, DC, USA -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a></pre>
  </body>
</html>