sr-users

sr-users@lists.kamailio.org

28 participants
37382 discussions

How to unset_dlg_profile in request_route or react more quickly to CANCEL?
by Benoit Panizzon 20 Dec '22

20 Dec '22

Hi List Testing failure situations, I discovered unset_dlg_profile can not be used in request_route: I count the channels per customer in a dlg_profile to know when they are busy. Residential POTS customer have 1 channel. Now this situation (Trying to mimik POTS behavior) Kamailio <=> CPE of 'John-Doe' => INVITE set_dlg_profile of John-Doe is 0: Not busy set_dlg_profile of John-Doe +1 <= 100 trying <= 180 ringing == LINK to CPE DISRUPTED == X<= 200 OK (not reaching kamailio) CPE is sending 200 a couple of times and fails. Caller is still hearing ringing tone as it never got 200 OK. The caller does not want to wait longer and hangs up =>X CANCEL (NOT reaching CPE) This is the moment, on which I would like to unset_dlg_profile of John-Doe to mark his channel available again. But the CPE is never going to acknowledge this CANCEL with 487. Unfortunately: unset_dlg_profile(): dialog delete profile cannot be used in request route Only when kamailio has sent CANCEL a couple of times and the failure_route for this CANCEL is triggered, I can remove the call from the dlg_profile of that customer within failure_route. If I am unlucky, in the meantime other calls get 'busy' instead of being re-routed to the configured backup number of that customer. Agreed, after a couple of seconds, the call goes to the failure route and the dialogue is ending thus calls work as expected. But wouldn't it be nice to be able to unset the dlg_profile upon receiving the CANCEL instead on when the CANCEL transaction is successful? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

DNS Host-Names in Via and Record-Route for more redundancy?
by Benoit Panizzon 20 Dec '22

20 Dec '22

Hi Folks We use two 'core' instances and two 'registrar' instances. The pairs sync their information (Dialogues + Locations) via DMQ. But I noticed that they record the Via and Record-Routes by IP addresses. So I guess if one fails, signaling would not automatically switch to the remaining host as the IP of the failed one is in the header, right? So, is there a way to put a DNS resolvable host-name in the Via and Record-Route header, so that DNS round-robin would make sure requests reach the available server if one of the pairs fails? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 6

Multiple websocket connections with the same port
by Benjamín Visón 19 Dec '22

19 Dec '22

Hello! I'm examining the WebSocket module and I am wondering how it handles multiple connections from the same port. For context, imagine the following scenario: UA1 ==> Load Balancer:41914 ==> Kamailio (WS) UA2 ==> Load Balancer:41914 ==> Kamailio (WS) Now, imagine Kamailio perceives UA1 from port 41914. What happens if that UA1 suddenly drops and another UA2 comes in from the same port? (before the connection closed event is fired for UA1) I understand by looking at the source code that `wsconn_add` is called and that this new connection is added to the list. But what happens with the previous UA entry? does it gets overwritten or does it stays there? The reason for my question is: I am perceiving the above scenario like this: Let's say UA1 is *sip:d3315cf8@9a431b1f90e5.invalid;transport=ws SIP/2.0* and UA2 is *sip:asd08a08@555343439666.invalid;transport=ws. *If UA2 comes in and takes over the port that UA1 was using, and I send an INVITE to UA1 UA2 ends up receiving the invite (obviously because it now has that port allocated). So what I am thinking is that both *d3315cf8(a)9a431b1f90e5.invalid *and *asd08a08(a)555343439666.invalid *are mapped to the same port for a short period of time. Thoughts? Saludos, [image: Twitter] <https://twitter.com/benjaminvison>[image: Instagram] <https://instagram.com/bvisonl/> Benjamín Visón / IT Engineer / Software Developer bvisonl(a)gmail.com / (829)-664-5163 https://www.linkedin.com/in/bvisonl/

3 2

auth_challenge() and async
by Alex Balashov 19 Dec '22

19 Dec '22

Hi, Is there any good solution for the scenario of an auth_challenge() with two separate transaction suspensions? To clarify (simplified): request_route { ... t_newtran(); if(!is_present_hf("Authorization") && !is_present_hf("Proxy-Authorization")) { auth_challenge("$fd", "1"); exit; } # TM suspend/continue t_newtran(); async credentials query("RESUME_AUTH"); } route[RESUME_AUTH] { # Credentials received into PVs. if(!pv_auth_check("...")) { auth_challenge("$fd", "1"); exit; } # Create transaction shell if not exists already from auth query. if(!t_lookup_request()) t_newtran(); # TM suspend/continue async route query("RESUME_ROUTING"); } route[RESUME_ROUTING] { # Unmarshal etc. t_relay(); # etc. } What happens here is that the first auth_challenge() results in a retransmission of its 407 challenge without absorbing the negative ACK. This is despite the ostensibly stateful behaviour of auth_challenge() without "force_stateless_reply" enabled. In this case, it eclipses the second, unrelated 407 challenge from the subsequent routing query (407 challenge with +1 CSeq): -- Alex -- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

3 17

Dealing with failed SRV peers
by Sebastian Damm 17 Dec '22

17 Dec '22

Hi, we have some Kamailios working as outboundproxy. So they get requests from internal systems and send them to different providers. From time to time, one provider returns a server as primary resource which is currently unavailable. I guess if the internal systems connected directly to the target, they would remember the failed server and remember to always use the server with second priority at least until DNS refresh time. In our setup, since every request is "new" for Kamailio, it doesn't remember, which host is reachable or not. Example: target: example.com _sip._udp.example.com SRV resolves to: 10 192.0.2.42 5060 20 198.51.100.42 5060 30 203.0.113.42 5060 192.0.2.42 is unavailable. Still, Kamailio uses it for every new request and failover to 198.51.100.42 occurs only after timeouts hit. Is there a best practice for solving this? I have played around with the dst_blocklist settings, but that caused even more trouble because Kamailio started blocking requests to peers that have only one server in the record having a short hickup. Thanks in advance for every input, as this is causing trouble every time we run into such a situation. Regards, Sebastian

4 7

Redundancy
by Jawaid Bazyar 16 Dec '22

16 Dec '22

Hi, I am exploring different redundancy / load-balancing models for a Kamailio cluster. When I say cluster, I mean, a number (N) of Kamailio nodes acting as stateful proxies. Each node is configured the same as the others, and all have access to the same lookup data to make routing decisions. I would appreciate any advice or experience any of you can share on these different models. Overall model: Direct to proxies Redirect servers first, which redirect to proxies Selecting the first node to talk to. Each model could use either type of selection. DNS-based (SRV or NAPTR, client makes call to dns name) Anycast with ECMP (equal-cost multi-path routing) Cluster with a mobile IP and service-down detection (this would just provide 1:1 protection) Have clients make calls through the proxy using a DNS record containing an SRV record for each node (or, alternatively, done with NAPTR). Would rely on the client to switch nodes in the event of a node failure mid-call. (Is that even possible?) Anycast would only work with UDP signaling. Use Anycast to find the first proxy, then use stateful responses to direct client back to same node for subsequent messages in a dialog. So for anyone who has tried any of these methods, I would love to hear the pros and cons.. Thanks in advance! Jawaid

2 4

Must openssl_mutex_shared.so be preloaded?
by Дилян Палаузов 16 Dec '22

16 Dec '22

Hello, The documentation on using openssl_mutex_shared.so is contradicting. https://github.com/kamailio/kamailio/blob/master/src/modules/tls/README#L293 says: > For OpenSSL (libssl) v1.1.x, it is required to preload 'openssl_mutex_shared' library shipped by Kamailio. For more details see 'src/modules/tls/openssl_mutex_shared/README.md'. https://github.com/kamailio/kamailio/blob/master/src/modules/tls/utils/open… says: > IMPORTANT: the workaround of using this preloaded shared library is no longer needed starting with Kamailio v5.3.0-pre1 (git master branch after September 14, 2019). The code of this shared library has been included in the core of Kamailio and the same behaviour is now achieved by default. It is unclear, if openssl_mutex_shared.so must be preloaded. In case the library is not needed anymore, it shall not be compiled and installed. Kind regards Дилян

1 1

Logs suddenly inundated with qm_malloc errors
by George Diamantopoulos 16 Dec '22

16 Dec '22

Hello all, I'm testing out release 5.6.2 on one production kamailio instance, and today our monitoring system triggered an alarm for lack of disk space on /. Indeed, kamailio.log started growing at an alarming rate at some point. At about the same time disk space started being depleted, the following line was frequently logged in the logs (no instances of it before that time): qm_malloc(): qm_malloc(0x7f5ade9c0010, 536) called from rtpengine: bencode.c: __bencode_piece_new(79), module: rtpengine; Free fragment not found! They don't only concern rtpengine, core has produced similar "free fragment not found" errors as well. There's additional multiple "had header field", "bad header" and "invalid header name" errors appearing after that too, but I'm guessing that's only a symptom of the qm_malloc issue? kamailio is started with -m 2048 -M 16 and there's another instance with almost identical traffic and configuration, but running on 5.6.1, which has never exhibited such failures in several months uptime. So I'm wondering, is there anything in 5.6.2 that could explain this? Thanks! Best regards, George

3 4

NAT issues with Kamailio + Asterisk with 2 NICs
by Sergio Charrua 15 Dec '22

15 Dec '22

Hi all! Got a random issue with NAT which I really have no clue how to solve. Setup is as follows: - Client A sends SIP INVITE through Public IP 1.2.3.4, where a Cisco Firewall forwards NATed data to a Kamailio instance (acting as a SIPProxy with dispatcher) listening with internal address 192.168.0.1 on port 5060. RTPEngine is in the same server and address too. - Kamailio will forward the invite to Asterisk NIC 1 (192.168.0.2) which will do some provisioning and accounting stuff and redirect the call (if authorized) to Client B's public IP address (all clients are outside the network, reachable via WWW) using NIC 2 (192.168.1.2) and public address 4.3.2.1. The issue is that from time to time, calls will not have audio. Here is what I have found: - when Client A sends INVITE, Asterisk NIC 1 will reply SIP 183 with SDP IP Address set to the internal IP of NIC 1 (192.168.0.2) - when Asterisk forwards call to Client B public IP address the SDP IP address is 192.168.1.2 (NIC 2) And I think the issue is the SDP address is wrong: when Asterisk forwards call to Client B, the SDP address should be the public IP 4.3.2.1 but it sends 192.168.1.2. And when Asterisk replies to Kamailio the SDP is 192.168.0.1. Correct me if I am wrong but i think the solution should be: - when Kamailio receives a reply from Asterisk to be forwarded to Client A, it should modify the SDP address to public IP 1.2.3.4 - when Asterisk forwards call to Client B, the sip.conf should have the parameter externip set to the public IP 4.3.2.1 Questions: - are my analysis & solution correct? - is there an example of the above setup where I could get some ideas? - how do I set Kamailio to modify the SDP address for me? Any examples? Thanks in advance. *Sérgio Charrua*

2 1

kamailio.org server maintenance - Dec 14, 2022 (tomorrow)
by Daniel-Constantin Mierla 15 Dec '22

15 Dec '22

Hello, not that tomorrow, Dec 14, 2022 starting after 09:00UTC (10:00Berlin), is planned some maintenance work on kamailio.org server. It will be unavailable from time to time, hopefully not for long time. Affected services: - web site - mailing lists - wiki site (alternative use the github repo: https://github.com/kamailio/kamailio-wiki) - html version of modules' documentation (text variant README is every module folder of git clones or on github.org repository) Short notifications will be sent when it starts and ends. Cheers, Daniel -- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda

1 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users