Hello,
Any successful implementation of adding some customized security (encryption) over sip and rtp in kamailio? (non TLS) Also looking for assistance on the concept of rtp over tcp using kamailio and rtpproxy.
Warm Regards Selvam
Hello,
On 3/25/13 9:31 PM, Techie Sup wrote:
using VPN/ipsec tunnel is a way to get both sip and rtp encrypted between two SIP nodes.
Other than TLS, Kamailio does not do any encryption for SIP. What alternatives you would look for?
Cheers, Daniel
26 mar 2013 kl. 09:23 skrev Daniel-Constantin Mierla miconda@gmail.com:
I would clarify that we do any ciphers that OpenSSL support for SIP. Kamailio is not involved in the media encryption. The standards for media encryption (SRTP) are not very clear on how to apply a different cipher/encryption method.
/O
Hi Daniel,
Its more of a customized encryption technique I am looking for. Encryption of SIP and RTP is already addressed as I can see from many threads, but important part is whether is there any possibility of routing rtp over tcp. Is it a possible concept or impossible task to implement it on kamailio. I just want a lead about this concept.
Warm Regards Selvam
On 3/26/13, Daniel-Constantin Mierla miconda@gmail.com wrote:
Hello,
On 3/26/13 9:46 AM, Techie Sup wrote:
Hi Daniel,
Its more of a customized encryption technique I am looking for.
that is a bit vague, maybe you can give some examples.
Nobody here did an invention on encryption techniques, if that is the question. Otherwise, if you look for particular mechanism, even not implemented, we can say if it can be done or not.
Routing rtp via tcp is possible as technology, being pretty much what happens with some VPN systems. But it is not only a matter of kamailio, but also of SIP phone.
Cheers, Daniel
Hello,
This was a concept raised in my mind and was looking for a lead or hint to get started to work on routing rtp via tcp. ( On SIP phone as well as Kamailio ). I knew through googling there has been such implementation and thus to make sure it is an absolute possibility. So here, I am just trying my luck to interact with developers who has worked on such project, if any.
Warm Regards Selvam
On 3/26/13, Daniel-Constantin Mierla miconda@gmail.com wrote:
It works pretty good. But when I was testing such an implementation with imitation of high latency (200ms) and packet loss(about 15%) voice over UDP worked much better since TCP was trying to retransmit lost segments. I think TCP_NODELAY must be always enabled to avoid packets concatenation at sender's outgoing buffer to reduce latency.
On 3/26/13 11:57 AM, Vitaliy Aleksandrov wrote:
Indeed, that is a good option. RTP was designed for UDP, sending it over TCP adds some drawbacks -- on a good connection would be hard to notice, but on poor connections could make it impossible to hear something.
Cheers, Daniel
Hello,
On 3/26/13 11:15 AM, Techie Sup wrote:
search for htproxy (iirc) which is a http tunneling solution for rtp, should work with openwengo or what is not its name. Never tried it myself, but at least should not impact the server side at all.
Cheers, Daniel
I got it downloaded from its repo, but it does not have much instructions to configure. Mailed them no reply.
Warm Regards Selvam
On 3/26/13, Daniel-Constantin Mierla miconda@gmail.com wrote:
On 3/27/13 2:17 PM, Techie Sup wrote:
I got it downloaded from its repo, but it does not have much instructions to configure. Mailed them no reply.
I have no relation with that project, I know about it from the web. It may not be actively developed. The good part is open source, so at last resort the documentation can be the source code.
Cheers, Daniel
-
Daniel-Constantin Mierla -
Olle E. Johansson -
Techie Sup -
Vitaliy Aleksandrov