[Serusers] SER performance degrades dramatically when invalid users send REGISTER messages continuously

[Klaus Darilion]

Hi Tulay!

For REGISTER requests, you should immediately reply with 100 Trying to 
avoid retransmissions of REGISTER requests.

   sl_send_reply("100","Stop retransmission");

The second thing is to find out why the authentication takes that much 
time. If the username/password is wrong, the Radius server should reply 
with Authentication-Reject, thus the sip proxy should reply with 
401/403. This should not need more time then the reply for a successful 
authentication.

I suggest using "ngrep -t port 5060 or port 1812" to watch the whole 
authentication signaling. Analyze were the delay occours and dig into 
the problem.

klaus

tulay sazak wrote:
>  Hello everybody,
> 
> I am using SER 0.9.3 and freeRADIUS 1.0.4 with digest authentication.
> 
> I am having problems when users with invalid credentials (wrong username 
> or password) try to register to SER. The same thing happens when I 
> insert some records to usergroup table as Reject type in Radius DB. SER 
> is becoming unfunctional in this case in our system. It cannot perform 
> registration and cannot make call for even valid subscribers.
> 
> SIP clients with invalid credentials try to register and send REGISTER 
> messages continuously. A SIP client sends 20 request/min and there are 
> 7-8 clients available at the moment. i.e. it is not a big traffic. But 
> every client is tried to be  authenticated using digest during 
> registration and at the beginning of the call.
> 
> In such a case, SER slows down very much. Retransmissions starts and SER 
> becomes unfunctional.
> 
> Did anyone experienced this problem?
> D o you have any idea why does it happens?
> 
> Thanks in advance..
> Regards,
> 
> Tulay Sazak
> NGN, Borusan Telekom
> 
> 
> ------------------------------------------------------------------------
> Yahoo! DSL 
> <http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=37474/*http://promo.yahoo.com/broadband/ 
>  > Something to write home about. Just $16.99/mo. or less
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers