<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>the ACK for the 200ok of INVITE is a separate transaction. You
should do record routing and if the ACK is routed with loose
routing, just send out, no transaction check.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 24.09.20 11:48, Joey Golan wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAAOPBYfjhRj9U55nmbQPApoo95wHgsO4yU4-ygkZczafkF60zw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div>
<div name="messageBodySection">
<div dir="auto">Hi Daniel,</div>
<div dir="auto"><br>
</div>
<div>Yes, the TLS connection is terminated to kamailio.</div>
<div>I can have multiple kamailio instances (not limited to
two).</div>
<div><br>
</div>
<div>I managed to get some progress and establish the call
but the ACK is not reaching its destination.</div>
<div>I attached a PNG that shows the sequence and what I'm
doing in kamailio. any help would be appreciated.</div>
<div><br>
</div>
<div>Thanks</div>
<div>Joey.</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
<br>
</div>
</div>
<div name="messageReplySection">On 23 Sep 2020, 11:29 +0300,
Daniel-Constantin Mierla <<a
href="mailto:miconda@gmail.com" target="_blank"
moz-do-not-send="true">miconda@gmail.com</a>>, wrote:<br>
<blockquote type="cite"
style="border-left-color:grey;border-left-width:thin;border-left-style:solid;margin:5px
5px;padding-left:10px">
<p>Hello,</p>
<p>if tls connection from client is terminated to
Kamailio, then a phone can be reachable only via the
Kamailio that accepted its connection. You can add local
path to the registration and then enable:</p>
<p>* <a
href="https://www.kamailio.org/docs/modules/stable/modules/registrar.html#registrar.p.path_check_local"
target="_blank" moz-do-not-send="true">https://www.kamailio.org/docs/modules/stable/modules/registrar.html#registrar.p.path_check_local</a></p>
<p>Now, just some different ideas to explore: if you just
have only two Kamailio systems and do not expect more,
you can skip replication and just route to the other
Kamailio if lookup() location returns false for traffic
coming from endpoints. If traffic is coming from the
other Kamailio, return 404. This works fine and can be
simpler approach if there is a single phone per user
account. In case there can be many phones per user
account, then after lookup location add a branch with
the address of the other Kamailio.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div>On 23.09.20 09:07, Joey Golan wrote:<br>
</div>
<blockquote type="cite">
<div name="messageBodySection">
<div dir="auto">Hello,<br>
<br>
I’m trying to make a call between 2 users registered
(TLS) on two different kamailio instances behind
haproxy with NAT handling.<br>
<br>
UE1 is registered to kamailio1<br>
UE2 is registered to kamailio2<br>
<br>
DMQ and dmq_usrloc are enabled so each kamailio can
see all registered users.<br>
<br>
What else do I need to do in order to make it work
properly?<br>
<br>
Thanks,<br>
<br>
Joey.</div>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Kamailio (SER) - Users Mailing List
<a href="mailto:sr-users@lists.kamailio.org" target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre cols="72">--
Daniel-Constantin Mierla -- <a href="http://www.asipto.com" target="_blank" moz-do-not-send="true">www.asipto.com</a>
<a href="http://www.twitter.com/miconda" target="_blank" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a href="http://www.linkedin.com/in/miconda" target="_blank" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Funding: <a href="https://www.paypal.me/dcmierla" target="_blank" moz-do-not-send="true">https://www.paypal.me/dcmierla</a></pre>
</blockquote>
</div>
</div>
</div>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
</body>
</html>