SRTP WITH PROXY MODE OF FREESWITCH ??
HI EVERY ONE , IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE .. PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING.. Thanks -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESW... Sent from the freeswitch-users mailing list archive at Nabble.com.
There is almost no reason to use proxy_media mode. Why are you using it? On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah@smonte.com> wrote:
HI EVERY ONE ,
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING..
Thanks
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESW... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
For all those reason that FreeSWITCH wiki says: - Debatably (slightly) less CPU. - Allows FreeSWITCH to handle codecs that it does not officially support. - Lesser delay in voice And ideally a secure communication should not involve any one processing RTP , and should work flawlessly. On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <kris@kriskinc.com>wrote:
There is almost no reason to use proxy_media mode. Why are you using it?
On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah@smonte.com> wrote:
HI EVERY ONE ,
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING..
Thanks
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESW... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Well, now. This poses an interesting one. By design SRTP is not to handle peer-to-peer encryption, but instead relies on the pbx to negotiate keys AND protect / unprotect the stream. As i can remember freeswitch negotiates a keyset for each leg, so if you would force proxy mode at some point, the clients will not know how to handle the keys and run an encrypted conversation. That would require code modification on both FS and the peers in order to work. I wait to be corrected. On Nov 13, 2013 8:49 AM, "Mehroz Ashraf" <mehroz.ashraf85@gmail.com> wrote:
For all those reason that FreeSWITCH wiki says:
- Debatably (slightly) less CPU. - Allows FreeSWITCH to handle codecs that it does not officially support. - Lesser delay in voice
And ideally a secure communication should not involve any one processing RTP , and should work flawlessly.
On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <kris@kriskinc.com>wrote:
There is almost no reason to use proxy_media mode. Why are you using it?
On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah@smonte.com> wrote:
HI EVERY ONE ,
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING..
Thanks
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESW... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Perhaps what they really want is ZRTP and not SRTP. As for the "debatably (slightly) less CPU", that amount of "(slightly) less CPU" is nothing to at all write home about. Even without transcoding, you're still sending out packets every ptime, which is typically going to 20 ms. This is where the CPU is going to get used. Yossi Neiman On 11/13/2013 02:04 AM, Daniel Ivanov wrote:
Well, now. This poses an interesting one. By design SRTP is not to handle peer-to-peer encryption, but instead relies on the pbx to negotiate keys AND protect / unprotect the stream. As i can remember freeswitch negotiates a keyset for each leg, so if you would force proxy mode at some point, the clients will not know how to handle the keys and run an encrypted conversation. That would require code modification on both FS and the peers in order to work. I wait to be corrected.
On Nov 13, 2013 8:49 AM, "Mehroz Ashraf" <mehroz.ashraf85@gmail.com <mailto:mehroz.ashraf85@gmail.com>> wrote:
For all those reason that FreeSWITCH wiki says:
* Debatably (slightly) less CPU. * Allows FreeSWITCH to handle codecs that it does not officially support. * Lesser delay in voice
And ideally a secure communication should not involve any one processing RTP , and should work flawlessly.
On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <kris@kriskinc.com <mailto:kris@kriskinc.com>> wrote:
There is almost no reason to use proxy_media mode. Why are you using it?
On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah@smonte.com <mailto:abdullah@smonte.com>> wrote:
HI EVERY ONE ,
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING..
Thanks
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/SRTP-WITH-PROXY-MODE-OF-FREESW... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
removed the incorrect info from that page. Only handling codecs not supported by freeswitch is left from this list. Which codecs do you need to support that we don't have a module for? On Nov 13, 2013, at 12:47 AM, Mehroz Ashraf <mehroz.ashraf85@gmail.com> wrote:
For all those reason that FreeSWITCH wiki says: Debatably (slightly) less CPU. Allows FreeSWITCH to handle codecs that it does not officially support. Lesser delay in voice
And ideally a secure communication should not involve any one processing RTP , and should work flawlessly.
On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <kris@kriskinc.com> wrote: There is almost no reason to use proxy_media mode. Why are you using it?
On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah@smonte.com> wrote: HI EVERY ONE ,
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING..
Thanks
Right , wiki should be updated accordingly and it should be made very clear. Proxy media looks very promising when we are talking about lesser RTP processing alongwith handling NAT issues.. Personally, I have experienced a noticeable audio delay in default mode than in proxy media which matters a lot. ZRTP is a good option but then it has video calling issues that I have gone through. On Wed, Nov 13, 2013 at 12:21 PM, Michael Jerris <mike@jerris.com> wrote:
removed the incorrect info from that page. Only handling codecs not supported by freeswitch is left from this list. Which codecs do you need to support that we don't have a module for?
On Nov 13, 2013, at 12:47 AM, Mehroz Ashraf <mehroz.ashraf85@gmail.com> wrote:
For all those reason that FreeSWITCH wiki says:
- Debatably (slightly) less CPU. - Allows FreeSWITCH to handle codecs that it does not officially support. - Lesser delay in voice
And ideally a secure communication should not involve any one processing RTP , and should work flawlessly.
On Tue, Nov 12, 2013 at 7:30 PM, Kristian Kielhofner <kris@kriskinc.com>wrote:
There is almost no reason to use proxy_media mode. Why are you using it?
On Tue, Nov 12, 2013 at 1:32 AM, Abdullah <abdullah@smonte.com> wrote:
HI EVERY ONE ,
IS THERE ANY WAY TO ENABLED STRP WITH PROXY MODE OF FREE-SWITCH.. I HAVE FALLOWED THE WIKI LINK BUT ITS WORK ONLY EARLY NEGOTIATION MODE ..
PLEASE HELP ME WHO TO ENABLE STRP USING PROXY MODE , IF I ENABLE NO AUDIO IS HEARING..
Thanks
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (6)
-
Abdullah
-
Daniel Ivanov
-
I put the Who? in Mishehu
-
Kristian Kielhofner
-
Mehroz Ashraf
-
Michael Jerris