<div dir="auto">Hi Daniel,<div dir="auto"> </div><div dir="auto">Thanks for you reply , Yes we indeed do use powerful hardware configuration server ,and we would tune to (centos) OS limits. There are many good blogs available on kamailio for high throughput and performance, we refer the same . One of them is <a href="https://github.com/kamailio/kamailio/blob/master/doc/tutorials/tcp_tunning.txt">https://github.com/kamailio/kamailio/blob/master/doc/tutorials/tcp_tunning.txt</a></div><div dir="auto"><br></div><div dir="auto">Thanks again. </div><div dir="auto">Warm Regards </div><div dir="auto">Pintu</div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto"><br></div><br><br><div class="gmail_quote" dir="auto"><div dir="ltr" class="gmail_attr">On Wed, Feb 27, 2019, 7:36 PM Daniel-Constantin Mierla <<a href="mailto:miconda@gmail.com">miconda@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p>Hello,</p>
<p>there were companies that pushed hundred thousands of active tls
connections to same kamailio and it went fine. You will have to do
some tuning to kamailio params as well as to the operating system
limits, but if you have powerful hardware, having such number of
active tls connections should be fine.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="m_8235441180910789163moz-cite-prefix">On 27.02.19 11:30, Pintu Lohar wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div><span style="color:rgb(0,0,0);font-family:Calibri,Helvetica,sans-serif;font-size:16px">Hi
Yasin, <br>
</span>Not yet tested, My bad - it's 0.1 million with TLS but
yes we are yet to test ), We need to distribute the users to
different Kamailio cluster through API server. However, Would
like to try Option 2 as well and test with it. </div>
<div><br>
Regards </div>
<div>Pintu Lohar </div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, Feb 27, 2019 at 7:16
PM YASIN CANER <<a href="mailto:caner_yaso@hotmail.com" target="_blank" rel="noreferrer">caner_yaso@hotmail.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Hello
Pintu</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">1
million TLS user? Have u ever test with tester on
Kamailio ?Because I remembered in sr-mails that an user
tested on 1000 client on TLS transport , it consumes so
much CPU etc . I guess 1 milliyonTLSUser make big impact
your system for all registration/call.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">I
tested option-2 for relaying registers about 1-2 years
ago for proof of concept. It works fine.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">you
can replicate user location data by Dmq_usrloc module
and can use path header then build a triangle topology
to bridge calls. </div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Or</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">You
can build a Location Information service to find which
kamailio has UAC <span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">
data </span>.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span id="m_8235441180910789163gmail-m_-8050397093345896685" title="Search for
suggestions">Best Regards.</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Yasin
CANER</div>
<div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_8235441180910789163gmail-m_-8050397093345896685divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri,
sans-serif" color="#000000"><b>From:</b> Pintu Lohar
<<a href="mailto:pintulohargcetts@gmail.com" target="_blank" rel="noreferrer">pintulohargcetts@gmail.com</a>><br>
<b>Sent:</b> Wednesday, February 27, 2019 12:27 PM<br>
<b>To:</b> YASIN CANER<br>
<b>Cc:</b> Kamailio (SER) - Users Mailing List<br>
<b>Subject:</b> Re: [SR-Users] Kamailio behind NAT
or With Public IP - Which one is highly recommended</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">Hi Yasin, <br>
Thanks indeed for your valuable input for the
active-active cluster(Option-1) & Option-2<br>
<br>
<div>We definitely would like to try setting up an
active-active cluster for the next phase if not
in current phase.</div>
<div>But In order to use Kamailio in the
active-active cluster, I think we need to
forward or replicate registration to both the
active-active server?</div>
<div>in order to proxy the invite packet through
the server where the UA is registered? <br>
<br>
</div>
<div>We use the following use cases : </div>
<div>1. We use FCM and APNS push to wake up the
app.<br>
2. Multi forking / Late forking cases are also
involved.<br>
3. Using Kamailio as a stateful proxy.</div>
<div><br>
Thanks & Regards </div>
<div>Pintu </div>
</div>
<br>
<div class="m_8235441180910789163gmail-m_-8050397093345896685x_gmail_quote">
<div dir="ltr" class="m_8235441180910789163gmail-m_-8050397093345896685x_gmail_attr">On
Wed, Feb 27, 2019 at 3:10 PM YASIN CANER <<a href="mailto:caner_yaso@hotmail.com" target="_blank" rel="noreferrer">caner_yaso@hotmail.com</a>>
wrote:<br>
</div>
<blockquote class="m_8235441180910789163gmail-m_-8050397093345896685x_gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Hello,</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">My
suggestion is that stay away from NAT if you
dont have to. various sip client/Firewalls
make out troubles for registration and
invites, even if Kamailio can handle it.
If you have a high load TLS connection /
subscriber , I think you should use load
balancer and NAT options.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">For
example;</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">1
- Load balancer like F5 that balancing your
connection active-active Kamailios </div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">UAC
----> F5 ------> Kamailio -1 (<span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">advertises<span> </span></span>public
IP)</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
|</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
-------> <span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">Kamailio
-2 (advertises public IP)</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">2-
Use kamailio as MultiHomed that convert
transport layer to tcp/udp</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">UAC
---------> Kamailio(TLS-PUBLIC
IP-mhomed) ------->
Kamailio-1(TCP/UDP)</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">
|</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">
---------> <span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">Kamailio-2(TCP/UDP)</span></span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
</span></span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
</span></span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline">Good
luck</span></span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><span style="font-family:Calibri,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline"><br>
</span></span></div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">Yasin
CANER</div>
<div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><br>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_8235441180910789163gmail-m_-8050397093345896685x_gmail-m_-8656783917937539143divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> sr-users
<<a href="mailto:sr-users-bounces@lists.kamailio.org" target="_blank" rel="noreferrer">sr-users-bounces@lists.kamailio.org</a>>
on behalf of Pintu Lohar <<a href="mailto:pintulohargcetts@gmail.com" target="_blank" rel="noreferrer">pintulohargcetts@gmail.com</a>><br>
<b>Sent:</b> Tuesday, February 26, 2019
8:09 AM<br>
<b>To:</b> <a href="mailto:sr-users@lists.kamailio.org" target="_blank" rel="noreferrer">sr-users@lists.kamailio.org</a><br>
<b>Subject:</b> [SR-Users] Kamailio
behind NAT or With Public IP - Which one
is highly recommended</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hi Everyone, <br>
<br>
Which one among the below option is
highly recommended for setting up
Kamailio (for production)<br>
1. Kamailio behind NAT <b>or</b> <br>
2. Setting up Kamailio using public
IP?<br>
<br>
are there any disadvantages if we setup
Kamailio behind NAT and use advertise
option in listen parameters?<br>
<br>
We have tested both the options, and
both the options work great for us( a.
Kamailio behind NAT with advertising in
listen parameters b.Kamailio setup with
public IP). So wondering which one is
best and highly recommended? <br>
<br>
Some extra info :<br>
1. We use TLS
<div>2. Using coturn for media <br>
<div> <br>
Thanks</div>
<div>Pintu </div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<br>
<fieldset class="m_8235441180910789163mimeAttachmentHeader"></fieldset>
<pre class="m_8235441180910789163moz-quote-pre">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="m_8235441180910789163moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org" target="_blank" rel="noreferrer">sr-users@lists.kamailio.org</a>
<a class="m_8235441180910789163moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank" rel="noreferrer">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="m_8235441180910789163moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="m_8235441180910789163moz-txt-link-abbreviated" href="http://www.asipto.com" target="_blank" rel="noreferrer">www.asipto.com</a>
<a class="m_8235441180910789163moz-txt-link-abbreviated" href="http://www.twitter.com/miconda" target="_blank" rel="noreferrer">www.twitter.com/miconda</a> -- <a class="m_8235441180910789163moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda" target="_blank" rel="noreferrer">www.linkedin.com/in/miconda</a>
Kamailio World Conference - May 6-8, 2019 -- <a class="m_8235441180910789163moz-txt-link-abbreviated" href="http://www.kamailioworld.com" target="_blank" rel="noreferrer">www.kamailioworld.com</a>
Kamailio Advanced Training - Mar 4-6, 2019 in Berlin; Mar 25-27, 2019, in Washington, DC, USA -- <a class="m_8235441180910789163moz-txt-link-abbreviated" href="http://www.asipto.com" target="_blank" rel="noreferrer">www.asipto.com<br></a></pre>
</div>
</blockquote></div></div>