Re: [OpenSIPS-Users] X-Auth-IP How?
I have a name in there do I need to change that to 20.172.0.46/32 ? If yes do I need my list to be named for that IP? Sorry for all the questions, I just have not found a working documented example and it seems like it is very close now. On 1/19/2016 3:42 PM, Jason Bedward wrote: Also edit the "apply-proxy-acl" IP you are missing the /32 On Wed, Jan 13, 2016 at 6:14 PM, Tim King <t...@triton.net <mailto:t...@triton.net>> wrote: Thank You. do you have an example as to how to have the Freeswitch ACL work with he via headers you discussed? I have followed many guides for setting up OpenSIPs as a load balancer for Freeswitch, but none of them addressed making the Freeswitch ACL functional. On 1/13/2016 12:49 PM, Stefano Pisani wrote: to be precise: append_hf("X-Auth-IP: $i\r\n"); according to documentation Il 13/01/2016 18.43, Tim King ha scritto: I have read countless articles now talking about using x-auth-ip as a method for using OpenSIPs as a load balancer serving to a cluster of Freeswtich servers and having a method to maintain the original IP address. Direct from the Freeswitch wiki it states: apply-proxy-acl Use the IP specified in X-AUTH-IP header sent from proxy for apply-inbound-acl Note: You'll need to configure your proxy to add this header However I am not able to find any example of how to make OpenSIPs add this header. Can anyone provide me some guidance as to how to accomplish this? ___ Users mailing list Users@lists.opensips.org <mailto:Users@lists.opensips.org> http://lists.opensips.org/cgi-bin/mailman/listinfo/users ___ Users mailing list Users@lists.opensips.org <mailto:Users@lists.opensips.org> http://lists.opensips.org/cgi-bin/mailman/listinfo/users ___ Users mailing list Users@lists.opensips.org <mailto:Users@lists.opensips.org> http://lists.opensips.org/cgi-bin/mailman/listinfo/users ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] X-Auth-IP How?
It is working now and I am doing things the same way you described. The part I was expecting that I don't see was that I was going to say hey freeswitch for this proxy check the stuff received in X-AUTH-IP against this specific ACL. It appears that it just checks all of the ACL's On 1/19/2016 4:13 PM, Jason Bedward wrote: Sorry I'm confused is it working now? The way I have things is opensips ip is the proxy. When freeswitch see it its like hey, I know you, I need to look out for the other ip you have X-Auth and process that. Freeswitch then looks up the X-Auth ip as it that was the IP that initiated the session On Tue, Jan 19, 2016 at 9:10 PM, Tim King <t...@triton.net <mailto:t...@triton.net>> wrote: This is the intended behavior I was requesting. The purpose of the ACL setup is to only allow calls through that are in the list of IP's set to allow. The same way you would with Freeswitch without a proxy. The relationship I was looking for that apparently does not exist is where you tell freeswitch which list to use for the proxy-acl. Apparently there is no relationship between them it just searches all the lists to see if ti finds a match? I'm not really sure all I know is at this point if I put the IP's of the addresses I wish to allow in the last list in my acl.conf which happens to be names opensips the calls are allowed. If I take the IP out they are rejected... Thank you very much for your help. ___ Users mailing list Users@lists.opensips.org <mailto:Users@lists.opensips.org> http://lists.opensips.org/cgi-bin/mailman/listinfo/users ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] X-Auth-IP How?
This is the intended behavior I was requesting. The purpose of the ACL setup is to only allow calls through that are in the list of IP's set to allow. The same way you would with Freeswitch without a proxy. The relationship I was looking for that apparently does not exist is where you tell freeswitch which list to use for the proxy-acl. Apparently there is no relationship between them it just searches all the lists to see if ti finds a match? I'm not really sure all I know is at this point if I put the IP's of the addresses I wish to allow in the last list in my acl.conf which happens to be names opensips the calls are allowed. If I take the IP out they are rejected... Thank you very much for your help. <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] X-Auth-IP How?
Thank You. do you have an example as to how to have the Freeswitch ACL work with he via headers you discussed? I have followed many guides for setting up OpenSIPs as a load balancer for Freeswitch, but none of them addressed making the Freeswitch ACL functional. On 1/13/2016 12:49 PM, Stefano Pisani wrote: to be precise: append_hf("X-Auth-IP: $i\r\n"); according to documentation Il 13/01/2016 18.43, Tim King ha scritto: I have read countless articles now talking about using x-auth-ip as a method for using OpenSIPs as a load balancer serving to a cluster of Freeswtich servers and having a method to maintain the original IP address. Direct from the Freeswitch wiki it states: apply-proxy-acl Use the IP specified in X-AUTH-IP header sent from proxy for apply-inbound-acl Note: You'll need to configure your proxy to add this header However I am not able to find any example of how to make OpenSIPs add this header. Can anyone provide me some guidance as to how to accomplish this? ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
[OpenSIPS-Users] X-Auth-IP How?
I have read countless articles now talking about using x-auth-ip as a method for using OpenSIPs as a load balancer serving to a cluster of Freeswtich servers and having a method to maintain the original IP address. Direct from the Freeswitch wiki it states: apply-proxy-acl Use the IP specified in X-AUTH-IP header sent from proxy for apply-inbound-acl Note: You'll need to configure your proxy to add this header However I am not able to find any example of how to make OpenSIPs add this header. Can anyone provide me some guidance as to how to accomplish this? <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] 2 Node Cluster Shared Database Error
Thank you very much for taking the time to respond. This was exactly what was causing me problems. On 12/23/2015 4:32 PM, Rik Broers wrote: Make sure you are using innodb for all tables, by default opensips creates myisam. This is specially true for galera mysql clusters. Regards, Vriendelijke groet, *Rik Broers* Voice Engineer On 23 dec. 2015, at 20:13, Tim King <t...@triton.net <mailto:t...@triton.net>> wrote: I have two OpenSIPs servers running with a shared database on a MySQL Cluster. The problem I am facing is there seems to be something stored in the database that makes it only work with the server it was created on. If I migrate the service to the node in the cluster that was not used to create the database I find the following error and opensips will not start. openSIPs-2 /usr/sbin/opensips[16028]: ERROR:core:db_check_table_version: invalid version 0 for table dialog found, expected 7 If I run /opensipsdbctl reinit/ on the cluster node that did not originally create the database I can that run opensips on that node but not the other. Can someone please tell me what setting I may be missing that allows opensips to share the database. I have followed several tutorials and they all mention using a shared database cluster but I have not found any setting that will correct this behavior. version: opensips 1.7.2-tls (x86_64/linux) flags: STATS: Off, USE_IPV6, USE_TCP, USE_TLS, DISABLE_NAGLE, USE_MCAST, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535 poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. svnrevision: unknown @(#) $Id: main.c 8537 2011-11-08 17:02:11Z bogdan_iancu $ main.c compiled on 09:32:43 Apr 19 2012 with gcc 4.4.6 ___ Users mailing list Users@lists.opensips.org <mailto:Users@lists.opensips.org> http://lists.opensips.org/cgi-bin/mailman/listinfo/users ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
[OpenSIPS-Users] 2 Node Cluster Shared Database Error
I have two OpenSIPs servers running with a shared database on a MySQL Cluster. The problem I am facing is there seems to be something stored in the database that makes it only work with the server it was created on. If I migrate the service to the node in the cluster that was not used to create the database I find the following error and opensips will not start. openSIPs-2 /usr/sbin/opensips[16028]: ERROR:core:db_check_table_version: invalid version 0 for table dialog found, expected 7 If I run /opensipsdbctl reinit/ on the cluster node that did not originally create the database I can that run opensips on that node but not the other. Can someone please tell me what setting I may be missing that allows opensips to share the database. I have followed several tutorials and they all mention using a shared database cluster but I have not found any setting that will correct this behavior. version: opensips 1.7.2-tls (x86_64/linux) flags: STATS: Off, USE_IPV6, USE_TCP, USE_TLS, DISABLE_NAGLE, USE_MCAST, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535 poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. svnrevision: unknown @(#) $Id: main.c 8537 2011-11-08 17:02:11Z bogdan_iancu $ main.c compiled on 09:32:43 Apr 19 2012 with gcc 4.4.6 <>___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users