Dear Sir, I know that openSIPS supports TLS...the major issue that we are facing performance degradation once the number of users using TLS increase and reach some hundreds... I just first need to know how many concurrent registered users using TLS FS can support? Second, is there any manual that I can follow in order to accomplish this scenario? Regards Michel Freiha Technical Manager Splendor Telecom (www.splendor.net) Beirut, Lebanon Phone: +961 1 373725 Fax: +961 1 375554 -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Steven Ayre Sent: Thursday, December 30, 2010 4:33 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS FreeSWITCH is a b2bua not proxy server. However, yes it would be possible to accept a SIP TLS call and bridge it to a call going to OpenSIPS. It won't forward the original messages, but will forward the signalling (i.e. you'll get ringing, answered etc passed along but it'll be in separate calls not just adding a Via header when forwarding). OpenSIPS supports TLS itself though - any particular reason you're not using its own support? -Steve On 30 December 2010 11:50, Michel Freiha <freiham@splendor.net> wrote:

Dear Sir,

I'm planning to use Freeswitch server as a proxy server before OpenSIPS...The Job of freeswitch is only when I need to use SIP over TLS or SRTP when there is a severe firewall on user side...The Client will

send SIP over TLS to freeswitch and the freeswitch will forward these packets to openSIPS or kamailio or whatever Registrar server...

Is that possible?

How many concurrent TLS connection a freeswitch server can handle?

Regards

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

I can have around 5000 concurrent users that need to connect to OpenSIPs using TLS...I'm sure that will not find any CPU that can handle this amount of traffic...Rerigistration is done every 3600 secs Regars -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org on behalf of Michael Collins Sent: Thu 12/30/2010 8:49 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS How much TLS traffic are you sending? Do your user re-register ever 2 seconds? I find it hard to believe that just SIP signaling via TLS would cause performance degradation unless there is an inordinate amount of encryption/decryption going on and your CPU is a wuss... -MC On Thu, Dec 30, 2010 at 6:40 AM, Michel Freiha <freiham@splendor.net> wrote:

Dear Sir,

I know that openSIPS supports TLS...the major issue that we are facing performance degradation once the number of users using TLS increase and reach some hundreds...

I just first need to know how many concurrent registered users using TLS FS can support? Second, is there any manual that I can follow in order to accomplish this scenario?

Regards

Michel Freiha Technical Manager Splendor Telecom (www.splendor.net) Beirut, Lebanon Phone: +961 1 373725 Fax: +961 1 375554

-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Steven Ayre Sent: Thursday, December 30, 2010 4:33 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS

FreeSWITCH is a b2bua not proxy server.

However, yes it would be possible to accept a SIP TLS call and bridge it to a call going to OpenSIPS. It won't forward the original messages, but will forward the signalling (i.e. you'll get ringing, answered etc passed along but it'll be in separate calls not just adding a Via header when forwarding).

OpenSIPS supports TLS itself though - any particular reason you're not using its own support?

-Steve

On 30 December 2010 11:50, Michel Freiha <freiham@splendor.net> wrote:

...

Dear Sir,

I'm planning to use Freeswitch server as a proxy server before OpenSIPS...The Job of freeswitch is only when I need to use SIP over TLS or SRTP when there is a severe firewall on user side...The Client will

...

send SIP over TLS to freeswitch and the freeswitch will forward these packets to openSIPS or kamailio or whatever Registrar server...

Is that possible?

How many concurrent TLS connection a freeswitch server can handle?

Regards

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

RE: [Freeswitch-users] Freeswitch with TLSopensips and kamalio are proxies already you can try also RTPproxy ----- Original Message ----- From: Michel Freiha To: FreeSWITCH Users Help ; FreeSWITCH Users Help Sent: Friday, December 31, 2010 2:30 PM Subject: Re: [Freeswitch-users] Freeswitch with TLS Mickael, can I use freeswitch for only proxying SIP and media to OpenSIPS? I do not need it as Registrar server, only a Proxy...Is that possible? Ids there any manual describing this topic? Regards -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org on behalf of Michael Collins Sent: Thu 12/30/2010 8:49 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS How much TLS traffic are you sending? Do your user re-register ever 2 seconds? I find it hard to believe that just SIP signaling via TLS would cause performance degradation unless there is an inordinate amount of encryption/decryption going on and your CPU is a wuss... -MC On Thu, Dec 30, 2010 at 6:40 AM, Michel Freiha <freiham@splendor.net> wrote:

Dear Sir,

I know that openSIPS supports TLS...the major issue that we are facing performance degradation once the number of users using TLS increase and reach some hundreds...

I just first need to know how many concurrent registered users using TLS FS can support? Second, is there any manual that I can follow in order to accomplish this scenario?

Regards

Michel Freiha Technical Manager Splendor Telecom (www.splendor.net) Beirut, Lebanon Phone: +961 1 373725 Fax: +961 1 375554

-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Steven Ayre Sent: Thursday, December 30, 2010 4:33 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS

FreeSWITCH is a b2bua not proxy server.

However, yes it would be possible to accept a SIP TLS call and bridge it to a call going to OpenSIPS. It won't forward the original messages, but will forward the signalling (i.e. you'll get ringing, answered etc passed along but it'll be in separate calls not just adding a Via header when forwarding).

OpenSIPS supports TLS itself though - any particular reason you're not using its own support?

-Steve

On 30 December 2010 11:50, Michel Freiha <freiham@splendor.net> wrote:

...

Dear Sir,

I'm planning to use Freeswitch server as a proxy server before OpenSIPS...The Job of freeswitch is only when I need to use SIP over TLS or SRTP when there is a severe firewall on user side...The Client will

...

send SIP over TLS to freeswitch and the freeswitch will forward these packets to openSIPS or kamailio or whatever Registrar server...

Is that possible?

How many concurrent TLS connection a freeswitch server can handle?

Regards

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

------------------------------------------------------------------------------ _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

Michel, OpenSIPS/Kamalio/etc are proxies themselves and support TLS. They would do so more efficiently than FreeSWITCH since they proxy the calls rather than being a b2bua which starts a full session for each call as FS does. MediaProxy can handle RTP, if you need that (but I doubt that you would). I would suggest that you have several OpenSIPS proxy servers in front of your current OpenSIPS server which use TLS on incoming and forward on to your current box unencrypted. You would probably be better off looking at how you can create a cluster of OpenSIPS servers which accept TLS and accept registrations, so that you can add extra servers to the cluster as the load on them increases. That would scale far better than everyone registering to a single box. -Steve On 31 December 2010 19:30, Michel Freiha <freiham@splendor.net> wrote:

Mickael, can I use freeswitch for only proxying SIP and media to OpenSIPS? I do not need it as Registrar server, only a Proxy...Is that possible? Ids there any manual describing this topic?

Regards

-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org on behalf of Michael Collins Sent: Thu 12/30/2010 8:49 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS

How much TLS traffic are you sending? Do your user re-register ever 2 seconds? I find it hard to believe that just SIP signaling via TLS would cause performance degradation unless there is an inordinate amount of encryption/decryption going on and your CPU is a wuss...

-MC

On Thu, Dec 30, 2010 at 6:40 AM, Michel Freiha <freiham@splendor.net> wrote:

...

Dear Sir,

I know that openSIPS supports TLS...the major issue that we are facing performance degradation once the number of users using TLS increase and reach some hundreds...

I just first need to know how many concurrent registered users using TLS FS can support? Second, is there any manual that I can follow in order to accomplish this scenario?

Regards

Michel Freiha Technical Manager Splendor Telecom (www.splendor.net) Beirut, Lebanon Phone: +961 1 373725 Fax: +961 1 375554

-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Steven Ayre Sent: Thursday, December 30, 2010 4:33 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch with TLS

FreeSWITCH is a b2bua not proxy server.

However, yes it would be possible to accept a SIP TLS call and bridge it to a call going to OpenSIPS. It won't forward the original messages, but will forward the signalling (i.e. you'll get ringing, answered etc passed along but it'll be in separate calls not just adding a Via header when forwarding).

OpenSIPS supports TLS itself though - any particular reason you're not using its own support?

-Steve

On 30 December 2010 11:50, Michel  Freiha <freiham@splendor.net> wrote:

...

Dear Sir,

I'm planning to use Freeswitch server as a proxy server before OpenSIPS...The Job of freeswitch is only when I need to use SIP over TLS or SRTP when there is a severe firewall on user side...The Client will

...

send SIP over TLS to freeswitch and the freeswitch will forward these packets to openSIPS or kamailio or whatever Registrar server...

Is that possible?

How many concurrent TLS connection a freeswitch server can handle?

Regards

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org