I use TCP for my SIP connections. I have noticed other proxy servers send TCP "null packet" keep-alives during a connection. What is the feasibility of doing something like this in SER? Where would you steer someone who would consider implementing?
In particular this would solve a firewall issue related to "inactivity timeout". (UAC and UAS don't support Session Timers)
Jamie Yukes
Make the client reregister on a short interval i.e. 60 seconds. This works quite well for us.
----------------------------------------
Michael Shuler, C.E.O. BitWise Systems, Inc. 682 High Point Lane East Peoria, IL 61611 Office: (217) 585-0357 Cell: (309) 657-6365 Fax: (309) 213-3500 E-Mail: mike@bwsys.net Customer Service: (877) 976-0711
-----Original Message----- From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Jamie Yukes Sent: Friday, August 06, 2004 10:42 PM To: serusers@lists.iptel.org Subject: [Serusers] Keep Alives? SO_KEEP_ALIVE? TCP Null packet?
I use TCP for my SIP connections. I have noticed other proxy servers send TCP "null packet" keep-alives during a connection. What is the feasibility of doing something like this in SER? Where would you steer someone who would consider implementing?
In particular this would solve a firewall issue related to "inactivity timeout". (UAC and UAS don't support Session Timers)
Jamie Yukes
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Suggesting a shorter re-REGISTER interval would solve a problem that exists between the UA and the proxy....
Our problem is between a proxy and another proxy. We control one proxy and the other proxy is with the ITSP. The TCP connection exists during a live call. The other proxy sends TCP "null packet" keep alives every 15 seconds... however, our firewall does not apply them to the session activity timer on our outbound connection. We would need to send TCP "null packet" keep alives to keep our firewall session activity timer from lapsing, and losing session control.
Should I implement this via an external FIFO interface, that enumerates active call sessions every 15 seconds, and write a component that will send "null packet" on each connection? Should I extend something like the tm module?
Appreciatively, Jamie Yukes
On Fri, 6 Aug 2004 22:53:30 -0500, Michael Shuler mike@bwsys.net wrote:
Make the client reregister on a short interval i.e. 60 seconds. This works quite well for us.
Michael Shuler, C.E.O. BitWise Systems, Inc. 682 High Point Lane East Peoria, IL 61611 Office: (217) 585-0357 Cell: (309) 657-6365 Fax: (309) 213-3500 E-Mail: mike@bwsys.net Customer Service: (877) 976-0711
-----Original Message----- From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Jamie Yukes Sent: Friday, August 06, 2004 10:42 PM To: serusers@lists.iptel.org Subject: [Serusers] Keep Alives? SO_KEEP_ALIVE? TCP Null packet?
I use TCP for my SIP connections. I have noticed other proxy servers send TCP "null packet" keep-alives during a connection. What is the feasibility of doing something like this in SER? Where would you steer someone who would consider implementing?
In particular this would solve a firewall issue related to "inactivity timeout". (UAC and UAS don't support Session Timers)
Jamie Yukes
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Jamie Yukes Global Connect http://www.gc1.com/
I would recommend to change the firewall rules.
Jan.
On 07-08 02:57, Jamie Yukes wrote:
Suggesting a shorter re-REGISTER interval would solve a problem that exists between the UA and the proxy....
Our problem is between a proxy and another proxy. We control one proxy and the other proxy is with the ITSP. The TCP connection exists during a live call. The other proxy sends TCP "null packet" keep alives every 15 seconds... however, our firewall does not apply them to the session activity timer on our outbound connection. We would need to send TCP "null packet" keep alives to keep our firewall session activity timer from lapsing, and losing session control.
Should I implement this via an external FIFO interface, that enumerates active call sessions every 15 seconds, and write a component that will send "null packet" on each connection? Should I extend something like the tm module?
Appreciatively, Jamie Yukes
On Fri, 6 Aug 2004 22:53:30 -0500, Michael Shuler mike@bwsys.net wrote:
Make the client reregister on a short interval i.e. 60 seconds. This works quite well for us.
Michael Shuler, C.E.O. BitWise Systems, Inc. 682 High Point Lane East Peoria, IL 61611 Office: (217) 585-0357 Cell: (309) 657-6365 Fax: (309) 213-3500 E-Mail: mike@bwsys.net Customer Service: (877) 976-0711
-----Original Message----- From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Jamie Yukes Sent: Friday, August 06, 2004 10:42 PM To: serusers@lists.iptel.org Subject: [Serusers] Keep Alives? SO_KEEP_ALIVE? TCP Null packet?
I use TCP for my SIP connections. I have noticed other proxy servers send TCP "null packet" keep-alives during a connection. What is the feasibility of doing something like this in SER? Where would you steer someone who would consider implementing?
In particular this would solve a firewall issue related to "inactivity timeout". (UAC and UAS don't support Session Timers)
Jamie Yukes
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Jamie Yukes Global Connect http://www.gc1.com/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
You would have to send some keep-alives, perhaps dummy OPTION requests. Even if your firewall would not drop active TCP connections, SER drops them too -- drop time is subject to configuration and current TCP load.
Despite that I think that the first place to work on is your firewall congiguration. Closing traffic to a server seems to me like a suboptimal idea.
-jiri
At 08:57 AM 8/7/2004, Jamie Yukes wrote:
Suggesting a shorter re-REGISTER interval would solve a problem that exists between the UA and the proxy....
Our problem is between a proxy and another proxy. We control one proxy and the other proxy is with the ITSP. The TCP connection exists during a live call. The other proxy sends TCP "null packet" keep alives every 15 seconds... however, our firewall does not apply them to the session activity timer on our outbound connection. We would need to send TCP "null packet" keep alives to keep our firewall session activity timer from lapsing, and losing session control.
Should I implement this via an external FIFO interface, that enumerates active call sessions every 15 seconds, and write a component that will send "null packet" on each connection? Should I extend something like the tm module?
Appreciatively, Jamie Yukes
On Fri, 6 Aug 2004 22:53:30 -0500, Michael Shuler mike@bwsys.net wrote:
Make the client reregister on a short interval i.e. 60 seconds. This works quite well for us.
Michael Shuler, C.E.O. BitWise Systems, Inc. 682 High Point Lane East Peoria, IL 61611 Office: (217) 585-0357 Cell: (309) 657-6365 Fax: (309) 213-3500 E-Mail: mike@bwsys.net Customer Service: (877) 976-0711
-----Original Message----- From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Jamie Yukes Sent: Friday, August 06, 2004 10:42 PM To: serusers@lists.iptel.org Subject: [Serusers] Keep Alives? SO_KEEP_ALIVE? TCP Null packet?
I use TCP for my SIP connections. I have noticed other proxy servers send TCP "null packet" keep-alives during a connection. What is the feasibility of doing something like this in SER? Where would you steer someone who would consider implementing?
In particular this would solve a firewall issue related to "inactivity timeout". (UAC and UAS don't support Session Timers)
Jamie Yukes
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Jamie Yukes Global Connect http://www.gc1.com/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
-- Jiri Kuthan http://iptel.org/~jiri/