1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
|
###### Global Parameters #########
xlog_level=4
#debug_mode=yes
stderror_enabled=yes
syslog_facility=LOG_LOCAL0
# Set up listeners
#socket=tls:127.0.0.1:5261
socket=udp:172.16.4.111:5260
socket=udp:172.16.4.111:5261
####### Modules Section ########
# set module path
mpath="/usr/local/lib64/sbc/modules/"
#### SIGNALING module
loadmodule "signaling.so"
loadmodule "db_mysql.so"
#### StateLess module
loadmodule "sl.so"
#### Transaction Module
loadmodule "tm.so"
modparam("tm", "fr_timeout", 5)
modparam("tm", "fr_inv_timeout", 30)
modparam("tm", "restart_fr_on_each_reply", 0)
modparam("tm", "onreply_avp_mode", 1)
#### Record Route Module
loadmodule "rr.so"
modparam("rr", "append_fromtag", 0)
#### MAX ForWarD module
loadmodule "maxfwd.so"
#### SIP MSG OPerationS module
loadmodule "sipmsgops.so"
#### FIFO Management Interface
loadmodule "mi_fifo.so"
modparam("mi_fifo", "fifo_name", "/tmp/opensips_fifo")
modparam("mi_fifo", "fifo_mode", 0666)
loadmodule "httpd.so"
loadmodule "mi_http.so"
modparam("httpd","port",9998)
#### USeR LOCation module
loadmodule "usrloc.so"
modparam("usrloc", "nat_bflag", "NAT")
modparam("usrloc", "working_mode_preset", "single-instance-sql-write-back")
modparam("usrloc", "db_url", "mysql://opensips:opensipsrw@172.16.4.111/opensips")
#### REGISTRAR module
loadmodule "registrar.so"
#### RTPengine protocol
loadmodule "rtpengine.so"
modparam("rtpengine", "rtpengine_sock", "udp:172.16.4.111:2222")
#### Nathelper protocol
loadmodule "nathelper.so"
modparam("registrar|nathelper", "received_avp", "$avp(rcv)")
#### UDP protocol
loadmodule "proto_udp.so"
loadmodule "proto_tcp.so"
#### TLS protocol
#loadmodule "proto_tls.so"
#### WebSocket and WebSocketSecure protocol
#loadmodule "proto_wss.so"
loadmodule "proto_ws.so"
####### Routing Logic ########
# main request routing logic
route{
if (!mf_process_maxfwd_header(10)) {
sl_send_reply(483,"Too Many Hops");
exit;
}
if (has_totag()) {
# sequential requests within a dialog should
# take the path determined by record-routing
if (loose_route()) {
if (is_method("INVITE")) {
# even if in most of the cases is useless, do RR for
# re-INVITEs alos, as some buggy clients do change route set
# during the dialog.
record_route();
}
xlog("L_DBG","[$cfg_line][$ci]---has-tag-:$rm|$rs|$tu|$socket_in(port)|$var(contact)\n");
if ($si == "172.16.4.114") {
$socket_out="udp:172.16.4.111:5261";
} else {
$socket_out="udp:172.16.4.111:5260";
}
# route it out to whatever destination was set by loose_route()
# in $du (destination URI).
route(relay);
} else {
if ( is_method("ACK") ) {
if ( t_check_trans() ) {
# non loose-route, but stateful ACK; must be an ACK after
# a 487 or e.g. 404 from upstream server
t_relay();
exit;
} else {
# ACK without matching transaction ->
# ignore and discard
exit;
}
}
sl_send_reply(404,"Not here");
}
exit;
}
# CANCEL processing
if (is_method("CANCEL")) {
if (t_check_trans())
t_relay();
exit;
}
t_check_trans();
#if (!is_method("REGISTER")) {
# if (is_myself("$fd")) {
# # if caller is not local, then called number must be local
# if (!is_myself("$rd")) {
# send_reply(403,"Rely forbidden");
# exit;
# }
# }
#}
# preloaded route checking
if (loose_route()) {
xlog("L_ERR",
"Attempt to route with preloaded Route's [$fu/$tu/$ru/$ci]");
if (!is_method("ACK"))
sl_send_reply(403,"Preload Route denied");
exit;
}
# record routing
if (!is_method("REGISTER|MESSAGE"))
record_route_preset("172.16.4.111:5260");
if (!is_myself("$rd")) {
append_hf("P-hint: outbound\r\n");
route(relay);
}
# requests for my domain
if (is_method("PUBLISH|SUBSCRIBE")) {
sl_send_reply(503, "Service Unavailable");
exit;
}
# check if the clients are using WebSockets or WebSocketSecure
if ( $socket_in(proto) == "WS"|| $socket_in(proto) == "WSS")
setflag("SRC_WS");
# consider the client is behind NAT - always fix the contact
fix_nated_contact();
xlog("L_DBG","[$cfg_line][$ci]---main-1-:$rm|$rs|$tu|$socket_in(port)|$var(contact)\n");
if (is_method("REGISTER")) {
# indicate that the client supports DTLS
# so we know when he is called
if (isflagset("SRC_WS"))
setbflag("DST_WS");
fix_nated_register();
if (!save("location"))
sl_reply_error();
exit;
}
xlog("L_DBG","[$cfg_line][$ci]---main--:$rm|$rs|$tu|$socket_in(port)|$var(contact)\n");
if ($rU==NULL) {
# request with no Username in RURI
sl_send_reply(484,"Address Incomplete");
exit;
}
if ($si != "172.16.4.114") {
$du = "sip:172.16.4.114:5060";
$socket_out="udp:172.16.4.111:5260";
}
# # do lookup with method filtering
# if (!lookup("location","method-filtering")) {
# t_newtran();
# t_reply(404, "Not Found");
# exit;
# }
route(relay);
}
route[relay] {
# for INVITEs enable some additional helper routes
if (is_method("INVITE")) {
t_on_branch("handle_nat");
t_on_reply("handle_nat");
} else if (is_method("BYE|CANCEL")) {
rtpengine_delete();
}
if (!t_relay()) {
send_reply(500,"Internal Error");
};
exit;
}
branch_route[handle_nat] {
xlog("L_INFO","[$cfg_line][$ci]--m01---:$rm|$rs|$tu|$rU|$fU|$si|$socket_in(proto)|$socket_in(port)\n");
if (!is_method("INVITE") || !has_body("application/sdp"))
return;
$var(rtp_flag) = "replace-origin ";
if (isflagset("SRC_WS") && isbflagset("DST_WS")) { #web->web
$var(rtp_flag) = $var(rtp_flag) + " ICE=force-relay DTLS=passive";
} else if (isflagset("SRC_WS") && !isbflagset("DST_WS")){ #web->sip
$var(rtp_flag) = $var(rtp_flag) + " codec-strip-G722 codec-strip-CN codec-strip-red strip-extmap rtcp-mux-demux DTLS=off SDES-off ICE=remove RTP/AVP";
} else if (!isflagset("SRC_WS") && isbflagset("DST_WS")) {#sip->web
$var(rtp_flag) = $var(rtp_flag) + " rtcp-mux-offer generate-mid DTLS=passive SDES-off ICE=force RTP/SAVPF";
} else if (!isflagset("SRC_WS") && !isbflagset("DST_WS")) #sip->sip
$var(rtp_flag) = $var(rtp_flag) + " DTLS=off SDES-off ICE=remove RTP/AVP";
rtpengine_offer("$var(rtp_flag)");
}
onreply_route[handle_nat] {
xlog("L_INFO","[$cfg_line][$ci]--onreply-route---:$rm|$rs|$tu|$rU|$fU|$si|$socket_in(proto)|$socket_in(port)\n");
if (is_present_hf("Record-Route")) {
remove_hf("Record-Route");
append_hf("Record-Route: <sip:172.16.4.111:5261;lr>\r\n");
xlog("L_INFO","has record-route..\n");
}
fix_nated_contact();
if (!has_body("application/sdp"))
return;
$var(rtp_flag) = "replace-origin ";
if (isflagset("SRC_WS") && isbflagset("DST_WS")) #web->web
$var(rtp_flag) = $var(rtp_flag) + " ICE=force-relay DTLS=passive";
else if (isflagset("SRC_WS") && !isbflagset("DST_WS")) #web->sip
$var(rtp_flag) = $var(rtp_flag) + " codec-strip-G722 codec-strip-CN codec-strip-red codec-strip-opus rtcp-mux-offer generate-mid DTLS=passive SDES-off ICE=force";
else if (!isflagset("SRC_WS") && isbflagset("DST_WS")) #sip->web
$var(rtp_flag) = $var(rtp_flag) + " rtcp-mux-offer generate-mid DTLS=passive SDES-off ICE=remove RTP/AVP";
else if (!isflagset("SRC_WS") && !isbflagset("DST_WS")) #sip->sip
$var(rtp_flag) = $var(rtp_flag) + " DTLS=off SDES-off ICE=remove RTP/AVP";
rtpengine_answer("$var(rtp_flag)");
}
|
