[SR-Users] What is the typical network setup for kamailio?

[Kevin Olbrich]

Am Mi., 3. Okt. 2018 um 22:50 Uhr schrieb Sergiu Pojoga <pojogas at gmail.com>:

> Hi Kevin,
>
> Main objective would be to detect NAT, and if so, fix SDP instead of
> involving rtpproxy. Both ways of course, requests and replies.
>
> Something like this:
>
> if (nat_uac_test("8"))
>
> fix_nated_sdp("15");
>
>
Thank you very much! This works perfectly fine!


> Cheers!
>
> On Wed, Oct 3, 2018 at 3:46 PM Kevin Olbrich <ko at sv01.de> wrote:
>
>> Hi!
>>
>> Sorry if you received an empty email, accidently clicked the send button
>> when resizing the windows.
>>
>> I am finally able to test a setup with both kamailio and asterisk on
>> public network.
>> Currently I struggle with RTP flow - what do I need to change to have rtp
>> flow directly to asterisk instead of rtpproxy?
>> Rtpproxy is working fine but when I disable NAT, there is no audio (did
>> not yet check SDP).
>>
>> Kind regards
>> Kevin
>>
>> Am Do., 16. Aug. 2018 um 12:47 Uhr schrieb Dmitri Savolainen <
>> savolainen at erinaco.ru>:
>>
>>> is RTP folowing to FS directly in this case?
>>>
>>> Yes, it woks fine in 99% and no any additional STUN/ICE are required
>>>
>>> On 16 August 2018 at 13:32, Kevin Olbrich <ko at sv01.de> wrote:
>>>
>>>> Hi Dmitri,
>>>>
>>>> is RTP folowing to FS directly in this case? This would allow us to use
>>>> STUN as well as ICE, etc. from Asterisk (which is currently the case
>>>> without Kamailio SBC in prod).
>>>>
>>>> Kevin
>>>>
>>>>
>>>>
>>>> Am Do., 16. Aug. 2018 um 12:29 Uhr schrieb Dmitri Savolainen <
>>>> savolainen at erinaco.ru>:
>>>>
>>>>> Hi Kevin.
>>>>> I use Kamailio  as FreeSwitch set balancer almost without rtpengine (rtpengine
>>>>> is used only in some specific cases). All in public IPs.
>>>>> I just tune FS SIP profile  to let it get requests only from Kamailio
>>>>> IP:PORT and add same firewall rules also.
>>>>> All RPC commands work via local interface only.
>>>>> PUBLIC NET SIP-Phone ==> Kamailio(PUBLIC)  ==> FS(PUBLIC) ==> Kamailio
>>>>> (PUBLIC)   ==> Carrier
>>>>>
>>>>>
>>>>> On 16 August 2018 at 12:57, Kevin Olbrich <ko at sv01.de> wrote:
>>>>>
>>>>>> Hi!
>>>>>>
>>>>>> I am working successfully with Kamailio in my lab setup where
>>>>>> Kamailio is the SBC for Asterisk.
>>>>>> The network layout is looking like this:
>>>>>>
>>>>>> SIP-Phone <== PUBLIC NET ==> Kamailio (SBC) <== PRIVATE NET ==>
>>>>>> Asterisk <== PUBLIC NET ==> Carrier
>>>>>>
>>>>>> Each public network is reachable from the internet and has a local
>>>>>> firewall with IP whitelists.
>>>>>> The internal SIP transactions are UDP-only but for external phones I
>>>>>> would like to also listen for TCP/TLS.
>>>>>>
>>>>>> For this layout to work with rtpproxy (before we move on to
>>>>>> RTPengine), we have to enable mhomed in Kamailio.
>>>>>> We also have some routing issues with packets leaving with the wrong
>>>>>> IP via rtpproxy (when call between carrier and external phone needs to be
>>>>>> bridged).
>>>>>>
>>>>>> Most examples show that Asterisk is deployed on the same network as
>>>>>> the external interface of Kamailio (-> Asterisk exposed to the public
>>>>>> network).
>>>>>> In our tests, this works much better but I have great security
>>>>>> concerns because this Asterisk instance itself does not need to be
>>>>>> reachable from external.
>>>>>>
>>>>>> How do other users deploy Kamailio in front of Asterisk or similar as
>>>>>> SBC to secure internals?
>>>>>> There is lot of docs for Kamailio's config but IMHO less for the
>>>>>> setup as DMZ (SBC) proxy.
>>>>>>
>>>>>> Thank you very much.
>>>>>>
>>>>>> Kind regards
>>>>>> Kevin
>>>>>>
>>>>>> _______________________________________________
>>>>>> Kamailio (SER) - Users Mailing List
>>>>>> sr-users at lists.kamailio.org
>>>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Savolainen Dmitri
>>>>> _______________________________________________
>>>>> Kamailio (SER) - Users Mailing List
>>>>> sr-users at lists.kamailio.org
>>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>>
>>>>
>>>> _______________________________________________
>>>> Kamailio (SER) - Users Mailing List
>>>> sr-users at lists.kamailio.org
>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>>>
>>>
>>>
>>> --
>>> Savolainen Dmitri
>>> _______________________________________________
>>> Kamailio (SER) - Users Mailing List
>>> sr-users at lists.kamailio.org
>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>> _______________________________________________
>> Kamailio (SER) - Users Mailing List
>> sr-users at lists.kamailio.org
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20181003/d2e9bc40/attachment.html>