Hi, can sb help me?
Thanks, Tiziano
------- Messaggio inoltrato -------
Da: Tiziano <ml(a)asdasd.it>
A: serusers(a)lists.iptel.org
Oggetto: Sip-Group problem
Data: Tue, 17 May 2005 17:39:53 +0200
Hi, i'm trying to setup ser+radius groups...
but when i do a:
radius_is_user_in("Request-URI", "ld")
i get:
May 17 16:52:44 rad ser[648]: rc_avpair_new: unknown attribute 0
May 17 16:52:44 rad ser[648]: radius_is_user_in(): Error adding
Sip-Group attribute
which is the problem?
i've Sip-Group in dictionary of both radiusclient and freeradius...
Thanks for help, Tiziano
--
Tiziano <ml(a)asdasd.it>
Hi
has anyone got this to work, it seems i cant get the pattern correct :-)
I have if (!allow_trusted()) { log(1, loop1) }
in allows trsuted I have
a.b.c.d | any | sip:[0-9]*@a.b.c.d |
but i dont see any calls being made to the db, to do a lookup or
anything, how can I see what is being matched.
Iqbal
Hey All,
This is a long email, so please bare with me...
Up until now we have used our primary SER serve as both registrar and call
routing engine. However, we've recently hit a growth point where the
registration load on our servers is high enough that it's affecting our call
routing.
We currently have about 4,000 IAD's all registering every 5 minutes. This
works out to be almost 13.5 regs every second, which in itself is a lot ..
If they were sequential. However, at times we will get hundreds of IADs all
attempting to register simultaneously (within seconds of each other) and it
will keep the server busy for a few moments and cause SIP timeouts on calls
that are in the process of being setup.
Currently I am using the auth_db module with MySQL for client registration
authentication. I believe that the MySQL authentication is what is causing
the high load on the server.
What I want to do is try to offload the the registrations from our primary
routing server, yet, I need the primary server to be stateful of the all
registered clients.
-or-
Find a more efficient way to authenticate client registrations so that the
load is not so high.
Problem is that most of our customers are home-based VoIP telephone
customers behind a Linksys cable/DSL router. So, in order to avoid NAT
issues we must have all of our traffic which terminates to the IAD from our
PSTN provider come from the same IP address that the the IAD registered
from. So I can't use another server and then t_replicate the requests back
to the routing server .. Because then the registrar / IP address that will
be open on the customers router NAT gateway / firewall will differ from the
IP that will terminate the traffic to the IAD from our system.
So - my question is .. How do I take load off of the primary server??
Would implementing radius for authentication fix this problem? I am very
familiar with radius (using Freeradius) and could easily set this up, but I
would prefer not to go to the trouble if it's not going to help with the
load.
Has anyone else had an issue with client authentication via MySQL and
auth_db causing a high load with SER?
I am hoping that you fine folks might be able to point me in the right
direction. Thanks so much!
Darren Nay
VoIP Network Development
Ionosphere, Inc
dnay(a)ionosphere.net
Hi all,
I've read different approaches towards load balancing, expecially in these
two threads:
http://lists.iptel.org/pipermail/serusers/2005-May/019107.htmlhttp://lists.iptel.org/pipermail/serusers/2005-April/018058.html
Unfortunately it seems that at the moment there's not a "state of the art"
solution, so here is my "two cent" idea.
Project goal: to develop a near-linearly scalable platform with NAT
traversal support and call control.
Proposed solution: multiple instances of SER will be reacheable via an
unique virtual IP handled by LVS (with udp persistence), all SERs will use
the same MySQL backend, an array of Asterisk servers will act as SBCs
(Session Border Controller).
Every SER will have a "third level" SIP domain associated to it, for
instance UA_A will be registered as UA_A(a)ser1.domain.com and UA_B will be
registered as UAC_B(a)ser2.domain.com. UAC_A will be able to call UA_B as "B"
or as "B(a)domain.com"; SRV records for "domain.com" will be LVS virtual IP,
SRV records for third level domain will be internal, not visible to Uas and
associated to IP addresses:ports of every SER instance.
To achieve this, we will need to store a domain for any UA in the "location"
table, any instance of SER will do this, UAs don't need to know anything
about "internal" domains. (Is this to be considered an "hack"?)
## Without call control, there would be only one call leg:
When UA_A calls UA_B, its INVITE will reach the same SER it has previously
registered to (SER_1, thanks to LVS persistence), SER_1 will then look for
UA_B and will notice that it is registered as UA_B(a)ser2.domain.com, DNS will
be queried and SER_2 will be contacted in order to handle INVITE and send it
to UA_B through already opened UDP channel (resolving NAT).
## Instead, we want to be able to control the call process and to handle RTP
nat too, so let's use Asterisk:
-First Leg (left): UA_A calls UA_B, INVITE reaches SER_1 (LVS persistence),
SER_1 finds out that UA_B is @ domain ser2.domain.com but its dialplan tells
him to send the INVITE to one of the Asterisk servers (one of them). SER
modifies the INVITE sent to * with Contact: (ip:port) of SER_2.
-Second Leg (right): Asterisk (after obtaining authorization and call
duration from AAA server) will look for UA_B at SER_2 and send the INVITE to
SER_2 with SDP modified for the RTP, SER_2 will then forward INVITE (solving
NAT problems) to UA_B ip:port (parameters taken from memory or DB).
This kind of platform would permit call forking too: if UA_B were registered
through two different proxies SER_1 would fork the call to two different
"call instances" of Asterisk(s).
Note that we want Asterisk to mangle SDP only when both UA_A and UA_B have
private IP addresses
Have you got any suggestion/comment? (expecially regarding:
- more SERs using the same MySQL backend
- binding a third level domain at the proxy
Thanks and kind regards!
Pietro Ravasio
--
Ing. Pietro Ravasio - pietro.ravasio(a)abbeynet.it
Enterprise Market Manager
Abbeynet S.p.A. - http://www.abbeynet.it
TEL: +390702109044
GSM: +393282172055
FAX: +390702109055
Hi all,
I have a problem with forwarding calls from SER to Asterisk.
XXX -> SER -> Asterisk -> YYY
I have XXX UAC which is registered in SER and YYY UAC which is registered in
Asterisk. When I forward call from SER to Asterisk I get "Call failed: 403
Forbidden" from Asterisk.
Everything works fine if I register XXX UAC in Asterisk too (SER forwards
call to Asterisk and it works).
I think I don't understand this registering SER to Asterisk and other way
and I would appreciate if someone could help with this.
Best regards
sip.conf
[general]
port=5060 ; Port to bind to
bindaddr=0.0.0.0 ; Address to bind SIP channel to
context=ser
autocreatepeer=yes
register => 2000:1234@ser_ip_address/5678
[ser_ip_address]
type=friend
username=2000
secret=1234
fromdomain=srce.hr
host= ser_ip_address
[5678]
type=friend
username=5678
host=dynamic
canreinvite=no
extensions.conf
[ser]
exten => 5678,1,Dial(SIP/5678,20)
exten => 5678,2,Voicemail2(u5678)
exten => 5678,3,MusicOnHold()
exten => 5678,102,Voicemail2(b5678)
exten => 5678,103,Hangup
Is it possible to use the sipXPhone from
http://www.sipfoundry.org/sipXphone/
with SER? Does anybody on the list have an experience
with this?
Thanks
-Jay
--- Kofi Obiri-Yeboah <kofi(a)radiocomplex.com> wrote:
> try sip-communicator at sip-communicator.org
> --
> Worrying Is Like Paying Interest On A Loan You Are
> Yet To Take
> Be Happy! Don't Worry,
>
>
> Quoting Vincent Verdot <vincent.verdot(a)int-evry.fr>:
>
> > Thanks,
> > I used X-ten lite but it's not open source..
> >
> > Regards,
> > Vincent Verdot.
> > ----- Original Message -----
> > From: Java Rockx
> > To: Vincent Verdot
> > Cc: serusers(a)lists.iptel.org
> > Sent: Tuesday, May 17, 2005 2:24 PM
> > Subject: Re: [Serusers] Open Source SIP Phone
> >
> >
> > Kphone and LinPhone work on Linux. X-ten Lite is
> free for Windows and Mac.
> >
> > You could even write your own by using a sip
> stack such as osip.
> >
> > Regards,
> > Paul
> >
> >
> > On 5/17/05, Vincent Verdot
> <vincent.verdot(a)int-evry.fr> wrote:
> > Hi everybody,
> > I'm looking for a good open source sip-phone,
> can anyone help me ?
> >
> >
> _______________________________________________
> > Serusers mailing list
> > serusers(a)lists.iptel.org
> >
> http://lists.iptel.org/mailman/listinfo/serusers
> >
> >
> >
> >
> >
>
> _______________________________________________
> Serusers mailing list
> serusers(a)lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
I'm hoping to clarify a couple questions on clustering SER in high-volume
environments as well. Assuming authentication is RADIUS, wouldn't
clustering something like what Darren is talking about be as simple as
installing multiple SER boxes and just doing some DNS round-robin? Would
that introduce any registration issues?
-Corey
>Darren Nay wrote:
> > Senad, Thanks for your response.
> >
> > There are several reasons.
> >
> > The 2 biggest are..
> >
> > 1 - We offer our customers the option to forward calls when an IAD is
> > not registered .. In order to do that the registration interval needs
> > to be relatively low.
>
>Fine... But still I am curious why u need to do in order to forward the
>calls.
>
> >
> > 2 - We've had some issues with setting registration intervals higher
> > than 10 minutes. It seems to work about 99.5% of the time, but
> > occaisionally an endpoint won't reregister before the reg interval on
> > SER times out. I believe this is a bug in our endpoint and have been
> > working with them on that. Setting the reg interval below 10 minutes
> > has eliminated that problem for the time being .. However, even if
> > this problem was fixed by the IAD manufacturer we still have the
> > first reason (above) that would keep us from being able to increase
> > the interval.
> >
>Well. apart from fixing the issue with your IAD, you could use DNS SRV
>record.
>Each time, IAD wants to re-register it will use DNS SRV record, hence
>"hitting" different server.
>
>This way, u will need more than one SER server each getting its data from
>central network database.
>If you need cluster file system, then you could use GFS or similar.
>
>Regards,
>
>Senad
>
>PSS!!!
> Which IAD are you using ?
*********************************************
This message has been scanned for viruses and
dangerous content, and is believed to be clean.