Немного о том, как настраивать tls_mgm. TLS domain это обозначение настроек, которое никак не связано с доменами в SIP заголовках. Оно используется для того, что дать opensips возможность определить какие сертификаты использовать для входящих\исходящих соединений. Какие сертификаты (читай: какой TLSdomain) использовать при входящем звонке, Opensips определяет по SIP domain в (SNI) записи в сертификате присылаемом […]
Category: opensips
Opensips. MI. Json. Zabbix.
Opensips 3.2 have beautiful statistics module. For example you may get Data about average count of incoming sip messages directly from MI interface. Also you can output it on Zabbix graph. Enable mi_http module, add into opensips.conf:loadmodule “httpd.so”loadmodule “mi_http.so”modparam(“mi_http”, “root”, “mi”) Load statistics module and define statistics profiles and add update_stat_series() functions to script, check […]
Opensips-cli. Json. jq.
You know that opensips -x mi dlg_list will produce a lot of JSON output, what if i want to get only dialogs with state = 4 ? There are beautiful tool like “jq” present in unix. (documentation) For example output from command “opensips-cli -x mi profile_get_size profile=calls”: { “Profile”: { “name”: “calls”, “value”: null, “count”: […]
Opensips 3.2, Homer 7
Advantages of using Opensips + Homer is possibility to see webrtc\tls traffic There is how to set simplest configuration on opensips side and Homer side. Homer 7 instruction for Debian 10. OPENSIPS: socket=hep_udp:ens5:9000 socket=hep_tcp:ens5:9000 … loadmodule “proto_hep.so” loadmodule “tracer.so” modparam(“proto_hep”, “hep_capture_id”, 5002) modparam(“proto_hep”, “hep_id”, “[hid]homer_ip:9060; transport=tcp; version=3”) modparam(“tracer”, “trace_id”, “[tid]uri=hep:hid”) ####### Routing Logic ######## # […]
Permission denied interface 80, 443
If you get permission denied for interface when start opensips. Like 44 interface for TLS, solution is here (https://superuser.com/questions/710253/allow-non-root-process-to-bind-to-port-80-and-443) in short words:setcap CAP_NET_BIND_SERVICE=+eip /usr/sbin/opensips
Ansible Part II. Install opensips,opensips-cli,opensips control panel.
You can use this Ansible roles to install full Opensips + Control Panel with one command. For some reason roles to install Opensips from ansible galaxy not working as expected. I have modified some roles to make it works. This will good only for Debian 10 and Centos 7. Most popular systems. Roles will install […]
OPENSIPS 3.2 modules HTTPD and MI_HTTP
There is problem when you try to using httpd and mi_http modules with opensips 3.2 and centos 7.9.2009 even you have installed opensips from repository. To avoid it: remove libhttpd system, install new version, download opensips from git, compile appropriated modules. CRITICAL:httpd:mod_init: the version of libmicrohttpd you have does not support EPOLL feature, you need […]
opensips 3.1 TLS
Чтобы поднять рабочий сервер TLS-SIP На базе opensips 3.1 нужно учесть несколько моментов: Установить certbot (https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-debian-10) Установить базу данных: apt install mariadb-server apache Установить opensips И opensips control panel https://apt.opensips.org/packages.php?v=3.1 apt install opensips opensips-cli apt install opensips* (для ленивых конечно) установить сертификаты для своего домена Установить opensips control panel поправить файлик /var/www/html/opensips-cp/config/tools/system/tls_mgm/local.inc.php закомментировав validation для […]
install opensips 3.1 Debian 10 + RTPPROXY 2.2
apt update apt upgrade -y apt-key adv –keyserver keyserver.ubuntu.com –recv-keys 049AD65B echo “deb https://apt.opensips.org buster 3.1-releases” >/etc/apt/sources.list.d/opensips.list echo “deb https://apt.opensips.org buster cli-nightly” >/etc/apt/sources.list.d/opensips-cli.list apt update apt install opensips* apt install mariadb-server opensips-cli -> database create opensips apt install build-essential letsencrypt -y (rtpproxy manual: https://www.rtpproxy.org/doc/master/user_manual.html#idm650) useradd rtpproxy cd /usr/src git clone -b master https://github.com/sippy/rtpproxy.git git -C […]
opensips realtime failover HA example with keepalive.
статья присутствует на испанском.