Hi Alex,
thanks for your help.
OK. I have added an additional header showing the originating IP in case
traffic comes not from one of the boxes listed in the dispatcher module. I grab
that header field in the boxes behind Kamailio and authenticate against it.
Works well. The only possible danger I see is that someone gets direct access
to the boxes and fakes the IP header.
Any other risks/downsides with this approach?
Gerry
request_route {
# per request initial checks
route(REQINIT);
# add source headers
remove_hf(“Tru-IP");
if (!ds_is_from_list(1,3)) {
# if route is from external then preserve the source IP so we can check
it later
append_hf(“Tru-IP: $si\r\n");
}
….
> On 7 Jul 2020, at 19:46, Alex Balashov <[email protected]> wrote:
>
> It is my experience that origination providers do not follow redirects; it is
> seen as a policy rather than a technical problem.
>
> Custom header injected by Kamailio is a good way to go for conserving
> originating network info (e.g. IP and port).
>
> On 7/7/20 1:39 PM, Gerry | Rigatta.com wrote:
>> Hi,
>> I would like to use Kamailio for load balancing incoming carrier traffic. We
>> do currently IP authentication and call logic in Yate boxes. Ideally I would
>> like to distribute calls with 30X redirects with the Kamailio dispatcher so
>> that IP authentication and all logic can stay in the Yate boxes.
>> However I have doubts that 30X redirects are generally accepted in
>> interconnects. What is your experience with this?
>> What is the possible alternative to redirects if one wants to keep IP
>> authentication and call logic in the boxes behind the Kamailio SIP router?
>> E.g. how can one reliably check the carrier source IPs behind Kamailio?
>> Custom headers injected by Kamailio?
>> Of cause I can check source IPs with a database lookup in Kamailio but I try
>> to avoid that as this makes the setup much more complicated and error prone.
>> Thank you for your ideas.
>> Gerry
>> _______________________________________________
>> Kamailio (SER) - Users Mailing List
>> [email protected]
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
> --
> Alex Balashov | Principal | Evariste Systems LLC
>
> Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free)
> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> [email protected]
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
Kamailio (SER) - Users Mailing List
[email protected]
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
