Re: [SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2022-09-08 Thread Mohammed Alarayshi
Hi Joel Did you manage to offload TLS SSL on the load balancer side ? I tested it before on AWS and the calls were working well. Wondering if this makes any issues like you said with headers ? __ Kamailio - Users Mailing List - Non Commercial

Re: [SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2019-10-10 Thread Joel Serrano
Hey Sergey, In our use-case, we control all our clients (mobile app) and use SIP with transport=tls, never SIPS. Also, in my initial tests, I see the Via headers OK, but the RR headers are the ones I might have to hack a little, as they are added with transport=tcp when in reality it should be tr

Re: [SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2019-10-09 Thread Sergey Safarov
Here important moment about "sips" URI supports. That requires use of rfc5630 3.1.3 . Using TLS with SIP Instead of SIPS Because a SIPS URI implies that requests sent to the resource identified by it b

Re: [SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2019-10-09 Thread Joel Serrano
Hey David, No, I was testing using the GSLB in GCP (Google) platform, but I believe the exact same scenario would either work (or not) on AWS, as at the end the key here is taking advantage of proxy protocol and SSL offloading, and both these cloud providers have that option. I'm going to give a

Re: [SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2019-10-09 Thread David Villasmil
Out of curiosity, is this on AWS? On Wed, 9 Oct 2019 at 23:33, David Villasmil wrote: > It looks pretty clear to me. I think whenever kamailio “sees” that > protocol specification it will switch to that. Have you tried forcing the > socket? Just wondering whether that would work. > > On Wed, 9 O

Re: [SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2019-10-09 Thread David Villasmil
It looks pretty clear to me. I think whenever kamailio “sees” that protocol specification it will switch to that. Have you tried forcing the socket? Just wondering whether that would work. On Wed, 9 Oct 2019 at 20:33, Joel Serrano wrote: > Hi everyone, > > I was giving a try to setup Kamailio wi

[SR-Users] SSL Offloading with AWS ELB or Google GSLB and Kamailio

2019-10-09 Thread Joel Serrano
Hi everyone, I was giving a try to setup Kamailio with a Cloud TCP load balancer in front, taking advantage of the newly added proxy protocol compatibility and my initial tests went very well. Flow: client -> (tcp) -> load balancer -> (tcp) -> Kamailio TCP socket I then did another quick test an