Hi, list! I've installed Freeswitch HA cluster for failover to second node. It use corosync and pacemaker to failover IP-address and Mysql Master-Master replication. After rebooting the first node, the second node successfully recover calls, but appears problem with one-way media. Channel with PSTN-gateway (throught external profile) is established in 2-3 secs. Channel with registered user (throught internal profile) is established only after ~30 secs! Internal and external profiles listening to the same ip-address. I think sip-packets blocked by FS acl. When I do tcpdump, packets from FS arrive to the user ip-phone, but sip-packets from ip-phone didn't arrive to FS. This is from user directory: <user id="111" cidr="172.30.0.11/32"> <params> <param name="password" value="bla-bla-bla"/> </params> <variables> <variable name="user_context" value="private-vip-telecom-service"/> <variable name="effective_caller_id_number" value="4959894700"/> <variable name="outbound_caller_id_number" value="4959894700"/> <variable name="callgroup" value="support"/> </variables> </user> In sip-profile named "internal" enabled only one acl: <param name="apply-inbound-acl" value="domains"/> In acl.conf.xml: <list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL <node type="allow" domain="$${domain}"/> --> <node type="allow" domain="172.30.0.1"/> <!-- use cidr= if you wish to allow ip ranges to this domains acl. --> <!-- <node type="allow" cidr="192.168.0.0/24"/> --> </list> And from FS console: freeswitch@internal> acl 172.30.0.11 domains true Here you can see FS console log from second node after sip recover: http://pastebin.freeswitch.org/19941 If anybody has ideas how to resolve this issue, I'll be very happy! -- Best regards, Vitaly.