[Freeswitch-users] VoIP encryption recommendations

[Bipin Patel]

Hi,




The whole sip protocol is blocked and udp VPN don't connect and tcp ones 
they delay packets a lot so calls end up heavily choppy. On mobile data the 
restrictions are even heavier and if packets are anywhere close to VoIP or 
VoIP over VPN etc they get filtered. Etisalat is the isp which buys 
blocking equipment from some vendor in UK who specialize in blocking VoIP 
and VPN. Last I was told by some person working there was they use a lot of 
L7 packet inspectors.


Secondly it's not about setting up custom solutions for any company or 
client but we generate a lot of retail traffic so users need something that 
they can run on mobile etc like a customized dialer. Untill now I used to 
give them a openvpn profile which they used to run and then use Zoiper to 
place calls but all that is blocked now.


Webrtc seems to work as of now coz it's new but there isn't a webrtc based 
mobile dialer till now which anyone can install and just use it to place calls




On February 19, 2019 9:47:46 PM Sergey Safarov <s.safarov at gmail.com> wrote:
> In your case need
> 1) increase ptime value to 40;
> 2) use codec without compression;
> 3) need to enable VAD feature;
>
> Also you can route torrent client network traffic via VPN together with 
> VoIP traffic. This will mask VoIP packets and not allow math your traffic 
> to VoIP profile on ISP equipment.
>
> вт, 19 февр. 2019 г. в 19:53, Bipin Patel via FreeSWITCH-users 
> <freeswitch-users at lists.freeswitch.org>:
>
>
>
> ---------- Forwarded message ----------
> From: Bipin Patel <bipin at xbipin.com>
> To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
> Cc:
> Bcc:
> Date: Tue, 19 Feb 2019 20:24:20 +0400
> Subject: VoIP encryption recommendations
>
> hi,
>
> i would like the ask the community about VoIP encryption, currently in few 
> middle east countries VoIP is officially blocked. The isp are so aggressive 
> that they use all sorts of fancy tools to block it including skype calls, 
> whatsapp calls etc and are very successful in doing it. So far companies 
> like voipswitch and recently few others have been providing tunneling 
> mechanisms  to get over this but recently UDP traffic is heavily filtered 
> and they go to the extreme of checking packet length and pattern and 
> artificially introduce delay, jitter or simply block it if the number of 
> hits are high. Switching to TLS/SRTP also doesnt help, it works with some 
> isp but as soon as you try same using mobile data it stops working coz they 
> match packet length and block based on the profile. ZRTP doesnt work coz a 
> normal RTP streams needs to start and then it starts encrypting it but 
> those initial RTP get blocked.
>
> With lack of any more VoIP encryption protocols its almost getting 
> impossible to bypass block so has anyone have any ideas of any other modern 
> form of encryption which can be used for VoIP (btw VPN are also blocked and 
> more over if packet size increases then nothing works on mobile data).
>
> The market demand of skype replacements is also extremely high coz skype, 
> hangouts, whatsapp video, instagram video, viber etc etc, u name it and its 
> blocked.
>
> --
> Regards,
> Bipin
>
>
>
>
>
> ---------- Forwarded message ----------
> From: Bipin Patel via FreeSWITCH-users <freeswitch-users at lists.freeswitch.org>
> To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
> Cc:
> Bcc:
> Date: Tue, 19 Feb 2019 08:53:29 -0800 (PST)
> Subject: [Freeswitch-users] VoIP encryption recommendations
> _________________________________________________________________________
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
>
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20190219/34b901da/attachment.html>