[Freeswitch-users] Freeswitch HA issue with failover to second node

[Виталий Давудов]

Hi, list!

I've installed Freeswitch HA cluster for failover to second node. It use 
corosync and pacemaker to failover IP-address and Mysql Master-Master 
replication.
After rebooting the first node, the second node successfully recover 
calls, but appears problem with one-way media. Channel with PSTN-gateway 
(throught external profile) is established in 2-3 secs. Channel with 
registered user (throught internal profile) is established only after 
~30 secs! Internal and external profiles listening to the same 
ip-address. I think sip-packets blocked by FS acl. When I do tcpdump, 
packets from FS arrive to the user ip-phone, but sip-packets from 
ip-phone didn't arrive to FS.

This is from user directory:

           <user id="111" cidr="172.30.0.11/32">
             <params>
               <param name="password" value="bla-bla-bla"/>
             </params>
             <variables>
               <variable name="user_context" 
value="private-vip-telecom-service"/>
               <variable name="effective_caller_id_number" 
value="4959894700"/>
               <variable name="outbound_caller_id_number" 
value="4959894700"/>
               <variable name="callgroup" value="support"/>
             </variables>
           </user>

In sip-profile named "internal" enabled only one acl:

<param name="apply-inbound-acl" value="domains"/>

In acl.conf.xml:

     <list name="domains" default="deny">
       <!-- domain= is special it scans the domain from the directory to 
build the ACL
       <node type="allow" domain="$${domain}"/> -->
       <node type="allow" domain="172.30.0.1"/>
       <!-- use cidr= if you wish to allow ip ranges to this domains 
acl. -->
       <!-- <node type="allow" cidr="192.168.0.0/24"/> -->
     </list>

And from FS console:

freeswitch at internal> acl 172.30.0.11 domains
true

Here you can see FS console log from second node after sip recover: 
http://pastebin.freeswitch.org/19941

If anybody has ideas how to resolve this issue, I'll be very happy!

-- 
Best regards,
Vitaly.