sr-users

sr-users@lists.kamailio.org

42 participants
37519 discussions

IPSec and USIM
by Mohammad Elahi 12 Apr '20

12 Apr '20

Hi All, When my VoLTE Mobile is registered to the Kamailio IMS that support IPSec by AKAv1 algorithm, inside the ESP packet is clear text (not encrypted). Is that because my mistake in configuration or for my USIM card? thanks in advance. Mohammad

1 1

kamailio as SBC for Teams
by Aidar Kamalov 10 Apr '20

10 Apr '20

Hello, I read https://skalatan.de/en/blog/kamailio-sbc-teams and trying to use kamailio for teams. But I faced that MS not responding ACK to my 200OK. Somethin is wrong, but I don't know what. I call from teams to kamailio. Can you help me please This is initial INVITE from Teams: 2020/04/09 22:55:17.346092 52.114.7.24:1024 -> KAMAILIO_IP:5061 INVITE sip:+xxxxxxxxx@MY_KAMAILIO_FQDN:5061;user=phone;transport=tls SIP/2.0 FROM: Aidar Kamalov<sip:+xxxxxxxxx@sip.pstnhub.microsoft.com:5061 ;user=phone>;tag=de28a5b5333b451a97312097f91f5564 TO: <sip:xxxxxxxx@MY_KAMAILIO_FQDN:5061;user=phone> CSEQ: 1 INVITE CALL-ID: 3d5ad3cdd01457be94d127fa20478cf1 MAX-FORWARDS: 70 VIA: SIP/2.0/TLS 52.114.7.24:5061;branch=z9hG4bKdb903e2c RECORD-ROUTE: <sip:sip-du-a-as.pstnhub.microsoft.com:5061;transport=tls;lr> CONTACT: <sip:api-du-a-euno.pstnhub.microsoft.com:443 ;x-i=903eeaac-b19e-43a0-8e75-bb222049922a;x-c=3d5ad3cdd01457be94d127fa20478cf1/d/8/d3d2c2e3f3c14f88bb2fe843b4bc70e4> CONTENT-LENGTH: 2426 USER-AGENT: Microsoft.PSTNHub.SIPProxy v.2020.4.4.3 i.ASEA.5 CONTENT-TYPE: application/sdp ALLOW: INVITE,ACK,OPTIONS,CANCEL,BYE,NOTIFY v=0 o=- 0 0 IN IP4 52.114.252.146 s=session c=IN IP4 52.114.252.146 b=CT:50000 t=0 0 m=audio 52939 RTP/SAVP 104 9 111 18 0 8 103 97 13 118 119 101 a=rtcp:52925 a=ice-ufrag:rKBm a=ice-pwd:BkjUnkfIvYV5pjteSteevL1O a=rtcp-mux a=candidate:4 1 UDP 184547839 52.114.252.146 52939 typ relay raddr 31.13.144.55 rport 57780 a=candidate:4 2 UDP 184547326 52.114.252.146 52925 typ relay raddr 31.13.144.55 rport 57781 a=candidate:1 1 tcp-act 2121006590 100.78.247.179 1024 typ host a=candidate:1 2 tcp-act 2121006590 100.78.247.179 1024 typ host a=candidate:2 1 UDP 2130705919 100.78.247.179 39182 typ host a=candidate:2 2 UDP 2130705406 100.78.247.179 39183 typ host a=candidate:3 1 UDP 1694497791 31.13.144.55 57780 typ srflx raddr 100.78.247.179 rport 39182 a=candidate:3 2 UDP 1694497278 31.13.144.55 57781 typ srflx raddr 100.78.247.179 rport 39183 a=candidate:5 1 tcp-act 1684796926 31.13.144.55 9761 typ srflx raddr 100.78.247.179 rport 41775 a=candidate:5 2 tcp-act 1684796926 31.13.144.55 9761 typ srflx raddr 100.78.247.179 rport 41775 a=candidate:6 1 tcp-pass 174453758 52.114.252.130 59925 typ relay raddr 31.13.144.55 rport 9761 a=candidate:6 2 tcp-pass 174453758 52.114.252.130 59925 typ relay raddr 31.13.144.55 rport 9761 a=candidate:7 1 tcp-act 174846462 52.114.252.130 59925 typ relay raddr 31.13.144.55 rport 9761 a=candidate:7 2 tcp-act 174846462 52.114.252.130 59925 typ relay raddr 31.13.144.55 rport 9761 a=x-candidate-info:4 network-type=WWAN a=x-candidate-info:1 network-type=WWAN a=x-candidate-info:2 network-type=WWAN a=x-candidate-info:3 network-type=WWAN a=x-candidate-info:5 network-type=WWAN a=x-candidate-info:6 network-type=WWAN a=x-candidate-info:7 network-type=WWAN a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:DY3r3DWRojJm94CJQ83OAavmlRCwPf5ciRxHCT40|2^31 a=crypto:2 AES_CM_128_HMAC_SHA1_80 inline:DY3r3DWRojJm94CJQ83OAavmlRCwPf5ciRxHCT40|2^31 a=crypto:3 AES_CM_128_HMAC_SHA1_80 inline:DY3r3DWRojJm94CJQ83OAavmlRCwPf5ciRxHCT40|2^31|1:1 a=rtpmap:104 SILK/16000 a=fmtp:104 useinbandfec=1; usedtx=0 a=rtpmap:9 G722/8000 a=rtpmap:111 SIREN/16000 a=fmtp:111 bitrate=16000 a=rtpmap:18 G729/8000 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:103 SILK/8000 a=fmtp:103 useinbandfec=1; usedtx=0 a=rtpmap:97 RED/8000 a=rtpmap:13 CN/8000 a=rtpmap:118 CN/16000 a=rtpmap:119 CN/24000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=maxptime:200 and my 200OK to MS is: 2020/04/09 22:55:19.976427 KAMAILIO_IP:5061 -> 52.114.7.24:1024 SIP/2.0 200 OK Record-Route: <sip:KAMAILIO_FQDN_DOMAIN:5061;transport=tls;ftag=de28a5b5333b451a97312097f91f5564;lr=on> Record-Route: <sip:KAMAILIO_IP:5060;ftag=de28a5b5333b451a97312097f91f5564;lr=on> Via: SIP/2.0/TLS 52.114.7.24:5061;rport=1024;branch=z9hG4bKdb903e2c Record-Route: <sip:ENDPOINT_BEHIND_KAMAILIO_IP;line=sr-QyfKA15Kw1rKw1hKEoPljM0oE1VLX10RQ1VLX10gkY37WJufE1BBjJhVE6E6r14VEJ5Nj6ElE1UNjyrNEJrVjnr.AyudmMV1rg52rJrlAyNBkMVNmSE*> Record-Route: <sip:ENDPOINT_BEHIND_KAMAILIO_IP;r2=on;lr=on;ftag=de28a5b5333b451a97312097f91f5564;did=cba.af1;nat=yes> Record-Route: <sip:KAMAILIO_IP;r2=on;lr=on;ftag=de28a5b5333b451a97312097f91f5564;did=cba.42a1;nat=yes> Record-Route: <sip:KAMAILIO_IP:5061;transport=tls;r2=on;lr=on;ftag=de28a5b5333b451a97312097f91f5564;did=cba.42a1;nat=yes> Record-Route: <sip:sip-du-a-as.pstnhub.microsoft.com:5061;transport=tls;lr> To: <sip:+xxxxxxxxxx@KAMAILIO_FQDN_DOMAIN :5061;user=phone>;tag=3795432917-393759697 From: <sip:+xxxxxxxxxx@sip.pstnhub.microsoft.com:5061 ;user=phone>;tag=de28a5b5333b451a97312097f91f5564 Call-ID: 3d5ad3cdd01457be94d127fa20478cf1 CSeq: 1 INVITE Allow: PUBLISH,MESSAGE,UPDATE,PRACK,SUBSCRIBE,REFER,INFO,NOTIFY,REGISTER,OPTIONS,BYE,INVITE,ACK,CANCEL Content-Type: application/sdp Accept: application/sdp Content-Length: 282 User-Agent: MY_DOMAIN Contact: <sip:KAMAILIO_IP;line=sr-DHZToOtmMdn7MODy9AnmD10TGLpUrL4noJCE4A03DdQE9LUaMXr*> v=0 o=ETPI-MSX1 0 0 IN IP4 KAMAILIO_IP s=sip call c=IN IP4 KAMAILIO_IP t=0 0 m=audio 12176 RTP/SAVP 8 b=AS:64 a=maxptime:20 a=rtpmap:8 PCMA/8000 a=sendrecv a=rtcp:12177 a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:03ZmcR+CxxB7k7C8QvWBgseYq7cH7py7VxqfLM8j a=ptime:20 -- Aydar A. Kamalov

4 8

Re: [SR-Users] Kamailio propagates 180 and 200 OK OUT OF ORDER
by Luis Rojas G. 10 Apr '20

10 Apr '20

Hello, I just realized that I had the dispatcher configured using a hash of Call-ID. That means, after recvfrom there must be an extra processing finding the Call-ID header in message, to calculate a hash and then forward() message. The more the processing, the more cases when 200 could arrive before 180. I just changed it to round robin, and the amount decreased a lot, but it's still there. If I send a burst of 1000 messages, about 5 of them leave out of order every time. Best regards, Luis On 4/9/20 1:48 PM, Luis Rojas G. wrote: > Hello, > > I have a lot of experience developing mutithreaded applications, and I > don't see it so unlikely at all that a process loses cpu just after > recvfrom(). It's just as probable as to lose it just before, or when > writing on a cache or just before of after sendto(). If there are many > messages going through, some of them will fall in this scenario. if I > try sending a burst of 100 messages, I see two or three presenting the > scenario. > > Just forward() with a single process does not give the capacity. I'm > getting almost 1000caps. More than that and start getting errores, > retransmissions, etc. And this is just one way. I need to receive the > call to go back to the network (our application is a B2BUA), so I will > be down to 500caps, with a simple scenario, with no reliable > responses, reinvites, updates, etc. I will end up having as many > standalone kamailio processes as the current servers I do have now. > > I really think the simplest way would be to add a small delay to 200 > OK. Very small, like 10ms, should be enough. Simple and it should > work. As Alex Balashov commented he did for the case with ACK-Re-Invite. > > I have to figure out how to make async_ms_sleep() work in reply_route(). > > Thanks for all the comments and ideas > > Best regards, > > Luis > > > > . On 4/9/20 12:17 PM, Daniel-Constantin Mierla wrote: >> >> >> MICONDA(a)GMAIL.COM appears similar to someone who previously sent you >> email, but may not be that person. Learn why this could be a risk >> <http://aka.ms/LearnAboutSenderIdentification> >> Feedback <http://aka.ms/SafetyTipsFeedback> >> >> Hello, >> >> then the overtaking is in between reading from the socket and getting >> to parsing the call-id value -- the cpu is lost by first reader after >> recvfrom() and the second process get enough cpu time to go ahead >> further. I haven't encountered this case, but as I said previously, >> it is very unlikely, but still possible. I added the route_locks_size >> because in the past I had cases when processing of some messages took >> longer executing config (e.g., due to authentication, accounting, ..) >> and I needed to be sure they are processed in the order they enter >> config execution. >> >> Then the option is to see if a single process with stateless sending >> out (using forward()) gives the capacity, if you don't do any other >> complex processing. Or if you do more complex processing, use a >> dispatcher process with forwarding to local host or in a similar >> manner try to use mqueue+rtimer for dispatching using shared memory >> queues. >> >> Of course, it is open source and there is also the C coding way, to >> add a synchronizing mechanism to protect against parallel execution >> of the code from recvfrom() till call-id lock is acquired. >> >> Cheers, >> Daniel >> -- Luis Rojas Software Architect Sixbell Los Leones 1200 Providencia Santiago, Chile Phone: (+56-2) 22001288 mailto:luis.rojas@sixbell.com http://www.sixbell.com

3 4

t_relay failure when dropping all branches in same destination set
by Sergiu Pojoga 09 Apr '20

09 Apr '20

Hi there, Can someone help figure out why there's this t_relay error, if I decide to drop the single master branch either all branches belonging to the same destination set, even though there are more serial sets to try later? *Error:* *tm [t_funcs.c:337]: t_relay_to(): t_forward_nonack returned error -6 (-6)* *tm [t_funcs.c:355]: t_relay_to(): -6 error reply generation delayed * *Example:* request_route { seturi("sip:a@mydomain.net"); append_branch("sip:b@mydomain.net", "0.5"); append_branch("sip:c@mydomain.net", "0.5"); append_branch("sip:d@10.22.0.30", "1.0"); # append_branch("sip:e@mydomain.net", "1.0"); # no error if I add this branch with same Q=1.0 t_load_contacts(); t_next_contacts(); t_on_branch("check_branch"); t_on_failure("serial"); t_relay(); break; } branch_route[check_branch] { if($rd=="10.22.0.30") drop; } failure_route["serial"] { if (!t_next_contacts()) exit; } t_on_branch("check_branch"); t_on_failure("serial"); t_relay(); } Thanks in advance. --Sergiu

1 1

Re: [SR-Users] Kamailio propagates 180 and 200 OK OUT OF ORDER
by Alex Balashov 09 Apr '20

09 Apr '20

On Thu, Apr 09, 2020 at 02:26:45PM +0100, David Villasmil wrote: > How about just not forwarding the 180 if it’s coming right after the > 200ok? I know it’s a hack, but a 180 is a provisional response > indicating the ring status, not the actual audio for the ring... so if > a 200 is received, the call is already established, no need to forward > the 180. There is a general principle, particularly in PSTN interworking, that signalling should be reliably conserved end-to-end. I think dropping messages is the most cavalier option available, perhaps worth considering only if every other logical possibility has been exhausted first. -- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

2 1

Re: [SR-Users] Kamailio propagates 180 and 200 OK OUT OF ORDER
by Daniel-Constantin Mierla 09 Apr '20

09 Apr '20

On 09.04.20 09:47, Daniel-Constantin Mierla wrote: > [...] >> >> Any idea why Async is not allowed in reply_route()? >> Didn't notice this question in the first place to respond in my previous email. Probably the developer that did it needed it for SIP requests. However, you can make a patch (pull request) to make it work for other cases. The developers will review the changes and if they don't break anything, it will be merged. Cheers, Daniel

2 1

kamailio - IPSEC
by Pavithra M 09 Apr '20

09 Apr '20

Hi, Is there any possibility to disable ipsec_pcscf in kamailio 5.3.3.

2 2

Re: [SR-Users] Kamailio propagates 180 and 200 OK OUT OF ORDER
by Daniel-Constantin Mierla 09 Apr '20

09 Apr '20

Hello, it was a reply to my email where I mentioned the route_locks_size parameter. As he said he looked at that parameter, I assumed it was about the route_locks_size, because there was not other parameter listed in the emails. So using the route_locks_size parameter doesn't require to use dialog module. Cheers, Daniel On 09.04.20 10:29, Henning Westerholt wrote: > > Hello, > > > > I mentioned in some of earlier e-mails as one possible option to track > the state of a dialog and to act depending on it. > > > > Cheers, > > > > Henning > > > > -- > > Henning Westerholt – https://skalatan.de/blog/ > > Kamailio services – https://gilawa.com <https://gilawa.com/> > > > > *From:* Daniel-Constantin Mierla <miconda(a)gmail.com> > *Sent:* Thursday, April 9, 2020 9:48 AM > *To:* luis.rojas(a)sixbell.com; Kamailio (SER) - Users Mailing List > <sr-users(a)lists.kamailio.org>; Henning Westerholt <hw(a)skalatan.de> > *Subject:* Re: [SR-Users] Kamailio propagates 180 and 200 OK OUT OF ORDER > > > > Hello, > > On 08.04.20 23:03, Luis Rojas G. wrote: > > Hello, Daniel, > > > > I looked into that parameter, but I need to use with the dialog > module, and I'm pretty afraid to use that. > > who said or where is written than you need to load the dialog module? > You definitely don't. > > Cheers, > Daniel > > > > I was looking more into the stateless proxy, because I need to > process a lot of traffic. > > > > My target is 4200CAPS. with duration between 90s and 210. Let's > say, 150 seconds. That would mean 630.000 simultaneous dialogs. I > don't think the solution can go that way. > > it would really help me to be able to use completely stateless > proxy plus Async in reply_route(), to introduce an artificial > delay before forwarding 200 OK to Invite.. As someone mentioned, > it would help me on request_route(), for race conditions between > ACK and Re-Invite. > > Any idea why Async is not allowed in reply_route()? > > Best regards, > > > > Luis > > > > On 4/8/20 1:07 PM, Daniel-Constantin Mierla wrote: > > Hello, > > you have to keep in mind that Kamailio is a SIP packet router, > not a telephony engine. If 180 and 200 replies are part of a > call is not something that Kamailio recognize at its core. Its > main goal is to route out as fast as possible what is > received, by executing the configuration file script. Now, a > matter of your configuration file, processing of some SIP > messages can take longer than processing other. And the > processing is done in parallel, a matter of children parameter > (and tcp_children, sctp_children). > > With that in mind, a way to try to cope better with the issue > you face is to set route_locks_size parameter, see: > > * > https://www.kamailio.org/wiki/cookbooks/devel/core#route_locks_size > <https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.kamai…> > > Probably is what you look for. > > But if you want more tight constraints, like when receiving a > 180 after a 200ok and not route it out, you have to make the > logic in configuration file by combining modules such as > dialog or htable (as already suggested). > > Cheers, > Daniel > -- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda

1 0

pcscf logs - error in kamailio
by Pavithra M 09 Apr '20

09 Apr '20

Hi , The error i am facing in kamailio pcscf Apr 9 13:44:31 tel-VirtualBox kamailio[2847]: INFO: rr [rr_mod.c:515]: pv_get_route_uri_f(): No route header present. Apr 9 13:44:31 tel-VirtualBox kamailio[2811]: ERROR: <core> [core/lvalue.c:353]: lval_pvar_assign(): setting pvar failed Apr 9 13:44:31 tel-VirtualBox kamailio[2811]: ERROR: <core> [core/lvalue.c:404]: lval_assign(): assignment failed at pos: (106,30-106,48) Apr 9 13:44:31 tel-VirtualBox kamailio[2811]: ERROR: <core> [core/lvalue.c:353]: lval_pvar_assign(): setting pvar failed Apr 9 13:44:31 tel-VirtualBox kamailio[2811]: ERROR: <core> [core/lvalue.c:404]: lval_assign(): assignment failed at pos: (114,31-114,52) kindly help me in this issue .. because of this , it is throwing 403 domain not server error in scscf

1 0

Error in kamailio 5.3.3
by Pavithra M 08 Apr '20

08 Apr '20

Hi, I have configured kamailio as Ims server with pcscf,icscf,scsf and hss in 4 different vms . After that I use zoiper client for testing the call flow . Registration is successful .It goes via UE -> Pcscf -> icscf -> scscf and returns back with 200 OK . Registration is happening with authentication from hss . When I make an INVITE , it goes from UE -> PCSCF -> SCSCF -> ICSCF -> SCSF and s-cscf gives *403 - Domain not served *to icscf and i-cscf returns to p-cscf with the same error . I am not seeing any errors in scscf and i-cscf . In pcscf , I am seeing an error like *Error : <core> [core/lvalue.c] :lval_pvar_assign() : setting pvar failed * *Error : <core> [core/lvalue.c] :* *lval_assign():assignment failed at pos* What should I do? Kindly advise. I am struggling with this issue for a week.kindly do the needful. Version - kamailio - 5.3.3 I need a normal call flow to be established between two clients.kindly help .

3 10

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users