[Freeswitch-users] Freeswitch with TLS

[Steven Ayre]

Michel,

OpenSIPS/Kamalio/etc are proxies themselves and support TLS. They
would do so more efficiently than FreeSWITCH since they proxy the
calls rather than being a b2bua which starts a full session for each
call as FS does. MediaProxy can handle RTP, if you need that (but I
doubt that you would).

I would suggest that you have several OpenSIPS proxy servers in front
of your current OpenSIPS server which use TLS on incoming and forward
on to your current box unencrypted.

You would probably be better off looking at how you can create a
cluster of OpenSIPS servers which accept TLS and accept registrations,
so that you can add extra servers to the cluster as the load on them
increases. That would scale far better than everyone registering to a
single box.

-Steve





On 31 December 2010 19:30, Michel  Freiha <freiham at splendor.net> wrote:
>
>
> Mickael, can I use freeswitch for only proxying SIP and media to OpenSIPS? I
> do not need it as Registrar server, only a Proxy...Is that possible? Ids
> there any manual describing this topic?
>
> Regards
>
>
> -----Original Message-----
> From: freeswitch-users-bounces at lists.freeswitch.org on behalf of Michael
> Collins
> Sent: Thu 12/30/2010 8:49 PM
> To: FreeSWITCH Users Help
> Subject: Re: [Freeswitch-users] Freeswitch with TLS
>
> How much TLS traffic are you sending? Do your user re-register ever 2
> seconds? I find it hard to believe that just SIP signaling via TLS would
> cause performance degradation unless there is an inordinate amount of
> encryption/decryption going on and your CPU is a wuss...
>
> -MC
>
> On Thu, Dec 30, 2010 at 6:40 AM, Michel Freiha <freiham at splendor.net> wrote:
>
>> Dear Sir,
>>
>> I know that openSIPS supports TLS...the major issue that we are facing
>> performance degradation once the number of users using TLS increase and
>> reach some hundreds...
>>
>> I just first need to know how many concurrent registered users using TLS
>> FS can support?
>> Second, is there any manual that I can follow in order to accomplish
>> this scenario?
>>
>> Regards
>>
>> Michel Freiha
>> Technical Manager
>> Splendor Telecom (www.splendor.net)
>> Beirut, Lebanon
>> Phone: +961 1 373725
>> Fax: +961 1 375554
>>
>>
>> -----Original Message-----
>> From: freeswitch-users-bounces at lists.freeswitch.org
>> [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of
>> Steven Ayre
>> Sent: Thursday, December 30, 2010 4:33 PM
>> To: FreeSWITCH Users Help
>> Subject: Re: [Freeswitch-users] Freeswitch with TLS
>>
>> FreeSWITCH is a b2bua not proxy server.
>>
>> However, yes it would be possible to accept a SIP TLS call and bridge it
>> to a call going to OpenSIPS. It won't forward the original messages, but
>> will forward the signalling (i.e. you'll get ringing, answered etc
>> passed along but it'll be in separate calls not just adding a Via header
>> when forwarding).
>>
>> OpenSIPS supports TLS itself though - any particular reason you're not
>> using its own support?
>>
>> -Steve
>>
>>
>> On 30 December 2010 11:50, Michel  Freiha <freiham at splendor.net> wrote:
>> > Dear Sir,
>> >
>> >
>> >
>> > I'm planning to use Freeswitch server as a proxy server before
>> > OpenSIPS...The Job of freeswitch is only when I need to use SIP over
>> TLS
>> > or SRTP when there is a severe firewall on user side...The Client will
>>
>> > send SIP over TLS to freeswitch and the freeswitch will forward these
>> > packets to openSIPS or kamailio or whatever Registrar server...
>> >
>> >
>> >
>> > Is that possible?
>> >
>> > How many concurrent TLS connection a freeswitch server can handle?
>> >
>> >
>> >
>> > Regards
>> >
>> >
>> >
>> > _______________________________________________
>> > FreeSWITCH-users mailing list
>> > FreeSWITCH-users at lists.freeswitch.org
>> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
>> > rs
>> > http://www.freeswitch.org
>> >
>> >
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>