<html><head></head><body><div class="ydp5d464a6cyahoo-style-wrap" style="font-family: Helvetica Neue, Helvetica, Arial, sans-serif; font-size: 13px;"><div></div>
<div dir="ltr" data-setdir="false">Yes, you are right.</div><div dir="ltr" data-setdir="false">I just couldn't understand the relation between children and IPsec port/spi ranges.</div><div><br></div><div dir="ltr" data-setdir="false">Regards,</div><div dir="ltr" data-setdir="false">Hossein</div><div dir="ltr" data-setdir="false"><br></div>
</div><div id="ydpc0baa897yahoo_quoted_3410680358" class="ydpc0baa897yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Tuesday, June 1, 2021, 02:48:07 AM PDT, Henning Westerholt <hw@skalatan.de> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="ydpc0baa897yiv6828968232"><div>
<div class="ydpc0baa897yiv6828968232WordSection1">
<p class="ydpc0baa897yiv6828968232MsoNormal"><span>Hello,</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB">not sure why you think that the ims_ipsec_pcscf module is listening only on UDP. It seems to be also listening on TCP:</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> //add listen interfaces for IPv4</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> if(add_listen_iface(addr4, NULL, ipsec_client_port + i, PROTO_TCP, 0) != 0) {</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> LM_ERR("Error adding listen ipsec client TCP interface for IPv4\n");</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> return -1;</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> }</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> if(add_listen_iface(addr4, NULL, ipsec_server_port + i, PROTO_TCP, 0) != 0) {</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> LM_ERR("Error adding listen ipsec server TCP interface for IPv4\n");</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> return -1;</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> }</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> if(add_listen_iface(addr4, NULL, ipsec_client_port + i, PROTO_UDP, 0) != 0) {</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> LM_ERR("Error adding listen ipsec client UDP interface for IPv4\n");</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> return -1;</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> }</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> if(add_listen_iface(addr4, NULL, ipsec_server_port + i, PROTO_UDP, 0) != 0) {</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> LM_ERR("Error adding listen ipsec server UDP interface for IPv4\n");</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> return -1;</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> }</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB">Cheers,</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB">Henning</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB">--
</span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB">Henning Westerholt –
</span><span><a shape="rect" href="https://skalatan.de/blog/" rel="nofollow" target="_blank"><span lang="EN-GB" style="color:#0563C1;">https://skalatan.de/blog/</span></a></span><span lang="EN-GB"></span></p>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB">Kamailio services –
</span><span><a shape="rect" href="https://gilawa.com/" rel="nofollow" target="_blank"><span lang="EN-GB" style="color:#0563C1;">https://gilawa.com</span></a></span><span>
<span lang="EN-GB"></span></span></p>
</div>
<p class="ydpc0baa897yiv6828968232MsoNormal"><span lang="EN-GB"> </span></p>
<div class="ydpc0baa897yiv6828968232yqt2945280085" id="ydpc0baa897yiv6828968232yqt29311"><div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm;">
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><b>From:</b> sr-users <sr-users-bounces@lists.kamailio.org>
<b>On Behalf Of </b>H Yavari<br clear="none">
<b>Sent:</b> Thursday, May 20, 2021 3:01 AM<br clear="none">
<b>To:</b> Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org><br clear="none">
<b>Subject:</b> [SR-Users] IMS IPSec does use UDP socket?</p>
</div>
</div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"> </p>
<div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">Hi to all,</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">I am interested in the implementation of IPsec module. When I run Kamailio, it is creating processes based on the below formulate:</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">UDP children * IPSEC_MAX_CONN * interfaces (v4 and v6) + (TCP+UD) processes for each interface.</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">For example: </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">children = 16</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">tcp_children=16</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;color:black;">IPSEC_MAX_CONN = 25</span><span style="font-size:10.0pt;font-family:sans-serif;"></span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">and two interface : IPv6 and V4</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;color:black;">Kamailio process count = (16 * 25 * 2 ) + 16 + 16 = 832</span><span style="font-size:10.0pt;font-family:sans-serif;"></span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">But why IPsec module is listening to UDP not TCP? this is an internal connection?</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">Thank you.</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">Regards,</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;">Hossein</span></p>
</div>
<div>
<p class="ydpc0baa897yiv6828968232MsoNormal" style="margin-left:35.4pt;"><span style="font-size:10.0pt;font-family:sans-serif;"> </span></p>
</div>
</div></div>
</div>
</div></div></div>
</div>
</div></body></html>