I have used asterisk over openswan in production for quite a time and if you're going for <500cps , you shouldn't worry and put them on same machine. Freeswitch deployment is the same. I would recommend against a proprietary or commercial ipsec implementation appliance. The learning curve is steep and troubleshooting is not easier by no means. Build your test setup and go for it.

On Apr 9, 2013 9:47 PM, "Cal Leeming [Simplicity Media Ltd]" <cal.leeming@simplicitymedialtd.co.uk> wrote:
From personal experience, I would strongly recommend running the VPN within the network layer rather than directly on the server.

You could use a pre-built appliance for this (such as Halon VSR), or build your own router using iptables, or even use a Cisco etc.

This means you don't have to maintain a tunnel for each individual machines, and keeps a nice clean separation of layers which makes debugging networking problems easier.

If you use this approach, then running FreeSWITCH over any tunnel should *just work*.. if you use it locally, then strange things might happen..

This is just based on my own personal experience, others may disagree.. YMMV :)

Hope this helps

Cal

On Tue, Apr 9, 2013 at 5:44 PM, sibu <sibxol@btconnect.com> wrote:
Dear Freeswitch-Users/Developers

I am new to this  list and freeswitch.

I would like to know if anyone has tried freeswitch with an ipsec VPN such as
openswan or strongswan and what were/should-be the  settings (eg transport-
mode, tunnel-mode etc), results  and  requirements vis a vis cpu-power,
network-speed etc etc

all hints and suggestions welcomed
thanks in advance
sibu xolo

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org