15 Oct
2012
15 Oct
'12
2:05 p.m.
Hi All
I am planning to enhance RTP proxy to support TLS and DTLS.
We have some requirements where we need to send RTP packets either over TLS
or over DTLS.
I really do not know where to start :-)
Few things that I have thought over is
1. I will take opnssl code base and integrate with rtpproxy code.
2. Will refer kamailio proxy code how tls connection framework is there and
try to copy the code from kamailio code base to rtp proxy code base, OR is
there a better alternative here.
If somebody has a better idea, kindly share.
Thanks a lot.
-kamal
15 Oct
15 Oct
2:24 p.m.
Hello.
2012/10/15 Kamal Palei <palei.kamal(a)gmail.com>om>:
Hi All
I am planning to enhance RTP proxy to support TLS and DTLS.
We have some requirements where we need to send RTP packets either over TLS
or over DTLS.
Shouldn't it be better to rely on SRTP/ZRTP instead rather than making
your own incompatible realisation?
--
With best regards, Peter Lemenkov.
2:27 p.m.
Its basically sip and media servers expects sip and media packets in TLS.
No choice, but need to support.
Best Regards
kamal
On Mon, Oct 15, 2012 at 4:54 PM, Peter Lemenkov <lemenkov(a)gmail.com> wrote:
Hello.
2012/10/15 Kamal Palei <palei.kamal(a)gmail.com>om>:
Hi All
I am planning to enhance RTP proxy to support TLS and DTLS.
We have some requirements where we need to send RTP packets either over
TLS
or over DTLS.
Shouldn't it be better to rely on SRTP/ZRTP instead rather than making
your own incompatible realisation?
--
With best regards, Peter Lemenkov.
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
9:38 p.m.
15 okt 2012 kl. 13:24 skrev Peter Lemenkov <lemenkov(a)gmail.com>om>:
Hello.
2012/10/15 Kamal Palei <palei.kamal(a)gmail.com>om>:
SRTP use DTLS for key exchange. There's also solutions for RTP over DTLS,
but the recommended way is DTLS+SRTP. This is what's standardized for WebRTC,
and the way forward for SIP media as well.
However, I don't see how RTPproxy can be the endpoint for DTLS key exchange, since
it breaks the end2end path. Clients should use TURN relays...
Curious on how you see this working!
/O
Hi All
I am planning to enhance RTP proxy to support TLS and DTLS.
We have some requirements where we need to send RTP packets either over TLS
or over DTLS.
Shouldn't it be better to rely on SRTP/ZRTP instead rather than making
your own incompatible realisation?
16 Oct
16 Oct
12:06 p.m.
Hi Johansson, All
Sincier regards and thanks for input.
As I understand, all media packets pass through RTP Proxy. The RTP Proxy
will receive simple UDP media packets from endpoints. Next RTP proxy today
pass those RTP packets to destination party.
My job is precisely to support TLS and DTLS path between RTP Proxy and
destination party. In my setup the destination party is a media server.
Do you really see a risk to have this setup. If so, please elaborate.
I underdstand here the challenge setup TLS/DTLS connection with media
server and send/recv media packets with server usuing either TLS or DTLS.
Also you mentioned "There's also solutions for RTP over DTLS" , can you
please share from where I can get the reference solution, it help me to
great extent.
Best Regards
Kamal
On Tue, Oct 16, 2012 at 12:08 AM, Olle E. Johansson <oej(a)edvina.net> wrote:
15 okt 2012 kl. 13:24 skrev Peter Lemenkov <lemenkov(a)gmail.com>om>:
SRTP use DTLS for key exchange. There's also solutions for RTP over DTLS,
but the recommended way is DTLS+SRTP. This is what's standardized for
WebRTC,
and the way forward for SIP media as well.
However, I don't see how RTPproxy can be the endpoint for DTLS key
exchange, since
it breaks the end2end path. Clients should use TURN relays...
Curious on how you see this working!
/O
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hello.
2012/10/15 Kamal Palei <palei.kamal(a)gmail.com>om>:
> Hi All
> I am planning to enhance RTP proxy to support TLS and DTLS.
> We have some requirements where we need to send RTP packets either over
TLS
or over
DTLS.
Shouldn't it be better to rely on SRTP/ZRTP instead rather than making
your own incompatible realisation? 
12:24 p.m.
Kamal,
perhaps RFC 5763 provides you some of the answers?
On 10/16/2012 11:06 AM, Kamal Palei wrote:
Hi Johansson, All
Sincier regards and thanks for input.
As I understand, all media packets pass through RTP Proxy. The RTP
Proxy will receive simple UDP media packets from endpoints. Next RTP
proxy today pass those RTP packets to destination party.
My job is precisely to support TLS and DTLS path between RTP Proxy and
destination party. In my setup the destination party is a media server.
Do you really see a risk to have this setup. If so, please elaborate.
I underdstand here the challenge setup TLS/DTLS connection with media
server and send/recv media packets with server usuing either TLS or DTLS.
Also you mentioned "There's also solutions for RTP over DTLS" , can you
please share from where I can get the reference solution, it help me to
great extent.
Best Regards
Kamal
On Tue, Oct 16, 2012 at 12:08 AM, Olle E. Johansson <oej(a)edvina.net
<mailto:oej@edvina.net>> wrote:
15 okt 2012 kl. 13:24 skrev Peter Lemenkov <lemenkov(a)gmail.com
<mailto:lemenkov@gmail.com>>:
SRTP use DTLS for key exchange. There's also solutions for RTP over
DTLS,
but the recommended way is DTLS+SRTP. This is what's standardized
for WebRTC,
and the way forward for SIP media as well.
However, I don't see how RTPproxy can be the endpoint for DTLS key
exchange, since
it breaks the end2end path. Clients should use TURN relays...
Curious on how you see this working!
/O
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org>
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hello.
2012/10/15 Kamal Palei <palei.kamal(a)gmail.com
<mailto:palei.kamal@gmail.com>>:
> Hi All
> I am planning to enhance RTP proxy to support TLS and DTLS.
> We have some requirements where we need to send RTP packets
either over
TLS
or over
DTLS.
Shouldn't it be better to rely on SRTP/ZRTP instead rather than making
your own incompatible realisation? 
2:28 p.m.
Not sure if this RFC is the thing Kamal is looking for. AFAIS this RFC
is about setting up an SRTP sessions, and the key exchange for the SRTP
session does not happen via SIP (like SDES), but via a DTLS session
which is performed before sending SRTP packets multiplexed on the media
ports.
regards
Klaus
On 16.10.2012 11:24, Andrew Pogrebennyk wrote:
Kamal,
perhaps RFC 5763 provides you some of the answers?
On 10/16/2012 11:06 AM, Kamal Palei wrote:
Hi Johansson, All
Sincier regards and thanks for input.
As I understand, all media packets pass through RTP Proxy. The RTP
Proxy will receive simple UDP media packets from endpoints. Next RTP
proxy today pass those RTP packets to destination party.
My job is precisely to support TLS and DTLS path between RTP Proxy and
destination party. In my setup the destination party is a media server.
Do you really see a risk to have this setup. If so, please elaborate.
I underdstand here the challenge setup TLS/DTLS connection with media
server and send/recv media packets with server usuing either TLS or DTLS.
Also you mentioned "There's also solutions for RTP over DTLS" , can you
please share from where I can get the reference solution, it help me to
great extent.
Best Regards
Kamal
On Tue, Oct 16, 2012 at 12:08 AM, Olle E. Johansson <oej(a)edvina.net
<mailto:oej@edvina.net>> wrote:
15 okt 2012 kl. 13:24 skrev Peter Lemenkov <lemenkov(a)gmail.com
<mailto:lemenkov@gmail.com>>:
SRTP use DTLS for key exchange. There's also solutions for RTP over
DTLS,
but the recommended way is DTLS+SRTP. This is what's standardized
for WebRTC,
and the way forward for SIP media as well.
However, I don't see how RTPproxy can be the endpoint for DTLS key
exchange, since
it breaks the end2end path. Clients should use TURN relays...
Curious on how you see this working!
/O
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org>
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hello.
2012/10/15 Kamal Palei <palei.kamal(a)gmail.com
<mailto:palei.kamal@gmail.com>>:
> Hi All
> I am planning to enhance RTP proxy to support TLS and DTLS.
> We have some requirements where we need to send RTP packets
either over
TLS
or over
DTLS.
Shouldn't it be better to rely on SRTP/ZRTP instead rather than making
your own incompatible realisation?
4424
days inactive
4425
days old
6 comments
5 participants
participants (5)
-
Andrew Pogrebennyk -
Kamal Palei -
Klaus Darilion -
Olle E. Johansson -
Peter Lemenkov