sr-users

sr-users@lists.kamailio.org

37 participants
37511 discussions

JSON-RPC dgram_socket just part of the output
by Ilie Soltanici 25 Aug '22

25 Aug '22

Hello, I'm trying to get the dispatcher status from kamailio through the UDP datagram but for some reason, it is getting just part of the output. Is there any buffer that I have to increase to get the complete output? command used: ``` echo '{"jsonrpc": "2.0", "method": "dispatcher.list", "reply_name": "kamailio_reply_fifo", "id": 1}' | nc -u 192.168.1.1 8090 ``` kamailio related config: modparam("jsonrpcs", "fifo_name", "/tmp/kamailio_request.fifo") modparam("jsonrpcs", "transport", 6) modparam("jsonrpcs", "fifo_mode", 0600) modparam("jsonrpcs", "fifo_user", "kamailio") modparam("jsonrpcs", "dgram_socket", "udp:MY_INTERNAL_IP_ADDR:8090") modparam("jsonrpcs", "dgram_timeout", 2000) modparam("jsonrpcs", "pretty_format", 1) output: [image: image.png] Thanks

2 4

Kamailio 5.3 call forwarding
by Derek OSS 24 Aug '22

24 Aug '22

Hi, I'm using Kamailio 5.3 and I am interested in doing call forwarding. I am interested in having a user "alice" bypass the SIP REGISTER step and have their SIP INVITE request/call forwarded to another SIP user "bob" (who, let's just say for now is within the same domain, so accessible by the same SCSCF and if it makes things simpler, let's say that bob went through the register step). In the PCSCF configuration, I've tried doing something like this: route { route(TEST) ... } route[TEST] { $ru = "sip:bob@domain.com" if (!t_relay("scscf.domain.com",6060)) { sl_reply_error(); } exit; } Instead of $ru, I've also tried using uac_replace_to, providing both the To and URI fields with Bob's SIP URI. When I try using the $ru, the S-CSCF still seems to use Alice's R-URI instead of Bob's. When I try using uac_replace_to, I get a 403 error saying that I need to register with the S-CSCF first. Am I going about this the correct way? Thank you. Derek

2 1

TLSA module compile errors
by Koray Vatansever 23 Aug '22

23 Aug '22

Hi everyone, I'm trying to build tlsa module on redhat 7.9 server. But I'm encountering the following compile errors. Any ideas on how I can deal with this? CC (gcc) [M tlsa.so] tls_util.o CC (gcc) [M tlsa.so] tls_domain.o CC (gcc) [M tlsa.so] tls_locking.o CC (gcc) [M tlsa.so] tls_rand.o CC (gcc) [M tlsa.so] tls_map.o CC (gcc) [M tlsa.so] tls_cfg.o CC (gcc) [M tlsa.so] tls_select.o CC (gcc) [M tlsa.so] tls_dump_vf.o CC (gcc) [M tlsa.so] tls_init.o CC (gcc) [M tlsa.so] tls_bio.o CC (gcc) [M tlsa.so] tls_config.o CC (gcc) [M tlsa.so] tls_server.o CC (gcc) [M tlsa.so] tls_rpc.o CC (gcc) [M tlsa.so] tls_ct_wrq.o CC (gcc) [M tlsa.so] tlsa_mod.o CC (gcc) [M tlsa.so] tls_verify.o LD (gcc) [M tlsa.so] tlsa.so /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(deflate.o): relocation R_X86_64_32S against hidden symbol `_length_code' can not be used when making a shared object /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(inflate.o): relocation R_X86_64_32S against hidden symbol `zcfree' can not be used when making a shared object /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(inftrees.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(trees.o): relocation R_X86_64_32S against hidden symbol `_length_code' can not be used when making a shared object /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(zutil.o): relocation R_X86_64_32 against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(crc32.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libz.a(inffast.o): relocation R_X86_64_32S against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: tlsa.so: version node not found for symbol SSLeay_version(a)OPENSSL_1.0.1 /usr/bin/ld: failed to set dynamic section sizes: Bad value collect2: error: ld returned 1 exit status make[2]: *** [tlsa.so] Error 1 make[1]: *** [modules] Error 1

2 2

TLS issue
by M Arqum CH 22 Aug '22

22 Aug '22

Dear All, Thank you in advance . Facing issue is setting up tls with kamailio 5.5.4 on ec2 Amazon linux server. Getting this error. Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_server.c:1329]: tls_h_read_f(): protocol level error Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_server.c:1333]: tls_h_read_f(): src addr: 143.198.11.1:62033 ///client ip Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: tls [tls_server.c:1336]: tls_h_read_f(): dst addr: 172.36.53.1:5061 ///ec2 local ip Aug 18 20:36:33 abc.domain /usr/local/mykamailio/sbin/kamailio[10772]: ERROR: <core> [core/tcp_read.c:1481]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0xffff80d78a10 r: 0xffff80d78b38 (-1) TLS Config [server:default] method = TLSv1+ verify_certificate = no require_certificate = nocertificate=/usr/local/ssl/certs/cert.pem private_key=/usr/local/ssl/certs/fullkey.pem server_name = abc.domain Also tried this conf [server:default] method = TLSv1+ ///tries all version options verify_certificate = no require_certificate = no certificate=/usr/local/ssl/certs/ abc.domain.crt private_key=/usr/local/ssl/certs/ abc.domain.key server_name = abc.domain.link openssl version OpenSSL 1.0.2k-fips 26 Jan 2017 please guide. -- Regards Arqum

3 3

remove header from reply?
by Brett Nemeroff 19 Aug '22

19 Aug '22

Hello, I'm receiving calls which I forward to a server I KNOW will reply with a 302. When I get that 302, I parse some information and then t_reply(302) the originator. The 302 I create needs to have it's own contact header which I am adding with append_to_reply(). That works great. BUT the contact header from the original 302 is hanging around. Now I have two contact headers :( How can I get rid of the original 302's contact header? remove_hf() doesn't work in this context since it's a reply. So I need a kind of "remove_header_from_reply()". Thanks, Brett

2 3

Processing Async HTTP Requests in Real-time
by Brett Nemeroff 19 Aug '22

19 Aug '22

Hello Kamailio Team! I've tried following the documentation for http_async_query() with suspend=1 and not getting results I'm expecting. Perhaps I'm misunderstanding the documentation. Basically I'm performing a http_async_query() with suspend set to 1 and a "route_name" set to HTTP_REPLY. When my query executes, it appears that Kamailio stops processing in that route block, suspends, and then when a reply is available, it continues in HTTP_REPLY. That makes sense. I pull the return value and set some $var and $avp. When I get to the end of the HTTP_REPLY block, I'm EXPECTING it to RESUME FROM the suspended location from the original route block, which it does NOT seem to do. Is that expected? For what it's worth, I did test just continuing my route logic in HTTP_REPLY and just forgetting about the original route block (moved all the remaining processing logic into HTTP_REPLY) However, existing $avp and $vars that were already set within the transaction were not set. So that's not possible either. I'm pretty sure there is a right way to do this without getting hacky. Can someone help me out? And yes, I know what I'm trying to do sounds like sync, but I want async to handle high volume and the potential for my external URL to lightly block. I believe the right way to do this is with async+suspending. Thank you, Brett

2 4

packets exceeding MTU size
by Ali Taher 18 Aug '22

18 Aug '22

Hello all, Lately I faced an issue that Kamailio is not responding to some invite packets coming from SBC. When investigating I found that these packets exceeds MTU size. Could this be the issue? Knowing that in Kamailio configuration I have a condition on is_method("INVITE"). Could be that in case of packet exceeding MTU size it's not considered as invite packet by Kamailio? I have Kamailio 5.2.5. Regards, Ali Taher

4 6

How to enforce max_contacts at registration?
by Benoit Panizzon 18 Aug '22

18 Aug '22

Hi List # ----- registrar params ----- modparam("registrar", "method_filtering", 1) # modparam("registrar", "append_branches", 0) modparam("registrar", "max_contacts", 10) modparam("registrar", "max_expires", 3600) modparam("registrar", "gruu_enabled", 0) modparam("registrar", "retry_after", 30) modparam("registrar", "xavp_cfg", "reg") == snipp == # Handle SIP registrations route[REGISTRAR] { # We are authenticated. # Create an AOR based on the auth_username for the location service. $var(saveuri) = "sip:" + $aU + "@" + $rd; # Set max_contacts limit via registration module reg xavp. if ($avp(debug) > 0) { xlog("L_INFO", "$cfg(route): Setting max_contacts to $avp(max_contacts) for $var(saveuri)\n"); } $xavp(reg=>max_contacts) = $avp(max_contacts); # Save Location! $var(result) = save("location","0x00","$var(saveuri)"); if ($var(result) == -2) { xlog("L_ERR", "$cfg(route): Too many contacts for $var(saveuri)\n"); sl_reply_error(); } if ($var(result) == -1) { xlog("L_ERR", "$cfg(route): Error saving location $var(saveuri)\n"); sl_reply_error(); } if ($var(result) == 1) { xlog("L_INFO", "$cfg(route): Contact $var(saveuri) inserted\n"); } if ($var(result) == 2) { xlog("L_INFO", "$cfg(route): Contact $var(saveuri) updated\n"); } if ($var(result) == 3) { xlog("L_INFO", "$cfg(route): Contact $var(saveuri) deleted\n"); } if ($var(result) == 4) { xlog("L_INFO", "$cfg(route): Contact $var(saveuri) returend\n"); } exit; } == snapp == $avp(max_contacts) is set to 1 Still, multiple registrations are possible for the $aU in question. What am I doing wrong? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

4 8

Re: [SR-Users] TLSv1.3 support
by Henning Westerholt 17 Aug '22

17 Aug '22

Hello, Please keep the list in CC. Regarding opening new TLS 1.3 connection, this should work, but did not tested it right now. If not, open an issue on our tracker. Regarding the option to restrict to only TSLv1.3 connection - I have added support for configuring this to git master version in commit 105600b3. Maybe you can give it a try, the patch should probably apply to 5.6.x branch. Cheers, Henning From: Helio <hok.sh10(a)gmail.com> Sent: Wednesday, August 17, 2022 2:52 PM To: Henning Westerholt <hw(a)gilawa.com> Subject: Re: [SR-Users] TLSv1.3 support Regarding the full support, I would like to know if Kamailio can start a TLSv1.3 connection as a client. Another point is if we can restrict to accept only TLS v1.3 and not TLSv1.2 for instance. Thanks, Helio Em ter., 16 de ago. de 2022 às 11:45, Henning Westerholt <hw(a)gilawa.com<mailto:hw@gilawa.com>> escreveu: Hello, not sure about the question about “full support”, maybe you can add details. Kamailio supports connection with TLSv1.3: $ openssl s_client -connect kam04.tst.domain.net:5061<http://kam04.tst.domain.net:5061> -tls1_3 2>&1 | tail -n 10 New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 4096 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) Cheers, Henning From: sr-users <sr-users-bounces(a)lists.kamailio.org<mailto:sr-users-bounces@lists.kamailio.org>> On Behalf Of Helio Sent: Monday, August 15, 2022 8:01 PM To: sr-users(a)lists.kamailio.org<mailto:sr-users@lists.kamailio.org> Subject: [SR-Users] TLSv1.3 support Hello, I noticed that Kamailio has option TLSv1.2+. Does the Kamailio support full TLSv1.3? Or does it have any restrictions? BR,

1 1

Kamailio not responding in heavy load
by Ali Taher 17 Aug '22

17 Aug '22

Hello all, I'm using sqlops module to connect to postgres and get the routing of calls from postgresql database. In order to troubleshoot issues in case they happened, I added each call details to Kamailio log. In some cases, when there is heavy traffic load (around 100 cps), I don't find some calls in Kamailio log, knowing that I can find them on the switch log (switch sending the invite packets to Kamailio). When checking the traces on these calls taken by the switch, it's clear that Kamailio is not responding to the invite packets sent by the switch. It could be because there are no available process to handle the call at this moment (I have set fork=14) Is it possible to check if there are calls pending in the queue? Regards,

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users