karl anderson
12 years ago
15 changed files with 388 additions and 138 deletions
Split View
Diff Options
-
+1 -0kamailio/certs/.placeholder
-
+2 -2kamailio/dbtext/dispatcher
-
+1 -0kamailio/dbtext/pua
-
+1 -0kamailio/dbtext/version
-
+51 -64kamailio/default.cfg
-
+8 -5kamailio/dispatcher-role.cfg
-
+24 -4kamailio/kamailio.cfg
-
+86 -44kamailio/local.cfg
-
+2 -0kamailio/nat-traversal-role.cfg
-
+12 -7kamailio/presence-role.cfg
-
+3 -4kamailio/registrar-role.cfg
-
+0 -8kamailio/roles.cfg
-
+8 -0kamailio/tls-role.cfg
-
+52 -0kamailio/tls.cfg
-
+137 -0kamailio/websockets-role.cfg
+ 1
- 0
kamailio/certs/.placeholder
View File
| @ -0,0 +1 @@ | |||
| ensure certs directory gets created | |||
+ 2
- 2
kamailio/dbtext/dispatcher
View File
+ 1
- 0
kamailio/dbtext/pua
View File
| @ -0,0 +1 @@ | |||
| id(int,auto) pres_uri(string) pres_id(string) event(int) expires(int) desired_expires(int) flag(int) etag(string) tuple_id(string,null) watcher_uri(string,null) call_id(string,null) to_tag(string,null) from_tag(string,null) cseq(int) record_route(string,null) contact(string,null) remote_contact(string,null) version(int) extra_headers(string,null) | |||
+ 1
- 0
kamailio/dbtext/version
View File
| @ -1,3 +1,4 @@ | |||
| table_name(string) table_version(int) | |||
| address:6 | |||
| trusted:5 | |||
| pua:7 | |||
+ 51
- 64
kamailio/default.cfg
View File
+ 8
- 5
kamailio/dispatcher-role.cfg
View File
+ 24
- 4
kamailio/kamailio.cfg
View File
| @ -1,12 +1,32 @@ | |||
| ## NOTE: DO NOT CHANGE THIS FILE, EDIT local.cfg ## | |||
| ####### Roles Configuration ###### | |||
| include_file "roles.cfg" | |||
| #### Preprocessor Directives ######### | |||
| #!define L_ALERT -5 | |||
| #!define L_BUG -4 | |||
| #!define L_CRIT2 -3 | |||
| #!define L_CRIT -2 | |||
| #!define L_ERR -1 | |||
| #!define L_WARN 0 | |||
| #!define L_NOTICE 1 | |||
| #!define L_INFO 2 | |||
| #!define L_DBG 3 | |||
| ####### Default Configuration ###### | |||
| include_file "default.cfg" | |||
| #!define AVP_RECV_PARAM "recv_param" | |||
| #!define AVP_LOG_LEVEL "log_level" | |||
| #!define AVP_ROUTE_CNT "route_cnt" | |||
| #!define AVP_ASSOCIATED_SERVER "associated_server" | |||
| #!define AVP_ASSOCIATE_CONTACT "associate_contact" | |||
| #!define AVP_REDIRECT_KEY "redirect_key" | |||
| #!define FLB_NATB 1 | |||
| #!define FLB_NATSIPPING 2 | |||
| #!define FLB_UAC_REDIRECT 3 | |||
| #!define TRUSTED_ADR_GROUP 1 | |||
| ####### Local Configuration ######## | |||
| include_file "local.cfg" | |||
| ####### Default Configuration ###### | |||
| include_file "default.cfg" | |||
| # vim: tabstop=4 softtabstop=4 shiftwidth=4 expandtab | |||
+ 86
- 44
kamailio/local.cfg
View File
| @ -1,50 +1,92 @@ | |||
| ####### Logging Parameters ######### | |||
| ################################################################################ | |||
| ## LOGGING | |||
| ################################################################################ | |||
| debug = L_INFO | |||
| ####### Alias Parameters ######### | |||
| # alias = "mydomain.net" | |||
| ################################################################################ | |||
| ## ROLES | |||
| ################################################################################ | |||
| ## Enabled Roles | |||
| #!trydef DISPATCHER-ROLE | |||
| #!trydef NAT-TRAVERSAL-ROLE | |||
| #!trydef REGISTRAR-ROLE | |||
| #!trydef PRESENCE-ROLE | |||
| ####### UDP Parameters ######### | |||
| ## NOTE: You must MATCH this to your network adapter!! | |||
| ## If they do not match, all UDP packets over | |||
| ## this limit WILL FAIL! | |||
| ## Disabled Roles - remove all but the last '#' to enable | |||
| # # #!trydef TRAFFIC-FILTER-ROLE | |||
| # # #!trydef WEBSOCKETS-ROLE | |||
| # # #!trydef TLS-ROLE | |||
| ################################################################################ | |||
| ## SERVER INFORMATION | |||
| ################################################################################ | |||
| ## CHANGE "kamailio.2600hz.com" TO YOUR SERVERS HOSTNAME | |||
| #!substdef "!MY_HOSTNAME!kamailio.2600hz.com!g" | |||
| ## CHANGE "127.0.0.1" TO YOUR SERVERS IP ADDRESS | |||
| ## Usually your public IP. If you need | |||
| ## to listen on addtional ports or IPs | |||
| ## add them in "BINDINGS" at the bottom. | |||
| #!substdef "!MY_IP_ADDRESS!127.0.0.1!g" | |||
| ## CHANGE "kazoo://guest:guest@127.0.0.1:5672" TO THE AMQP URL | |||
| ## This should be the primary RabbitMQ server | |||
| ## in the zone that this server will service. | |||
| #!substdef "!MY_AMQP_URL!kazoo://guest:guest@127.0.0.1:5672!g" | |||
| ## This parameter is only required if you are using websockets | |||
| ## This value must be present in the HTTP | |||
| ## Origin header on a new websocket request | |||
| ## or it will be rejected. If you remove | |||
| ## it completely the validation will be disabled. | |||
| #!substdef "!MY_WEBSOCKET_DOMAIN!2600hz.com!g" | |||
| ################################################################################ | |||
| ## UDP PARAMETERS | |||
| ################################################################################ | |||
| ## This parameter is OPTIONAL | |||
| ## If large UDP packets are dropped by the | |||
| ## interface try uncommenting this option. | |||
| ## However, you MUST match this to your | |||
| ## network adapter! If they do not match, | |||
| ## all UDP packets over this limit WILL FAIL! | |||
| ## E.g.: Add MTU=1472 to the /etc/sysconfig/network-scripts/XXX | |||
| # udp4_raw_mtu = 1472 | |||
| ####### Binding Parameters ######### | |||
| # mhomed=1 | |||
| listen = tcp:127.0.0.1:5060 | |||
| listen = udp:127.0.0.1:5060 | |||
| listen = tcp:127.0.0.1:7000 | |||
| listen = udp:127.0.0.1:7000 | |||
| ####### Dispatcher module ######## | |||
| #!ifdef DISPATCHER-ROLE | |||
| modparam("dispatcher", "ds_ping_from", "sip:sipcheck@127.0.0.1") | |||
| # modparam("dispatcher", "ds_ping_sock", "udp:127.0.0.1:5060") | |||
| #!endif | |||
| ######## NAT Traversal module - signaling functions ######## | |||
| #!ifdef NAT-TRAVERSAL-ROLE | |||
| modparam("nathelper", "sipping_from", "sip:sipcheck@127.0.0.1") | |||
| # modparam("nathelper", "natping_socket", "127.0.0.1:5060") | |||
| #!endif | |||
| ####### Kazoo Integration module ########## | |||
| #!ifdef INCLUDE-DB-KAZOO | |||
| ## NOTE: The hostname that should be advertised to Kazoo | |||
| modparam("db_kazoo", "node_hostname", "kamailio.2600hz.com") | |||
| ## NOTE: If you want a certain fs_path to be sent Kazoo, | |||
| ## uncomment the next line and set the right value | |||
| # modparam("db_kazoo", "register_fs_path", "127.0.0.1:5060") | |||
| #!endif | |||
| ####### Common Module Parameters ########## | |||
| #!ifdef REGISTRAR-ROLE | |||
| modparam("auth_db|usrloc", "db_url", "kazoo://guest:guest@127.0.0.1:5672/callmgr") | |||
| #!endif | |||
| #!ifdef PRESENCE-ROLE | |||
| modparam("presence", "db_url", "kazoo://guest:guest@127.0.0.1:5672/dialoginfo") | |||
| #!endif | |||
| # vim: tabstop=4 softtabstop=4 shiftwidth=4 expandtab | |||
| ################################################################################ | |||
| ## BINDINGS | |||
| ################################################################################ | |||
| ## This parameter is OPTIONAL. | |||
| ## It will try to locate outbound interface | |||
| ## on multihomed host. By default forward | |||
| ## requests use the incoming socket disregarding | |||
| ## the destination location. When enabled Kamailio | |||
| ## will select a socket that can reach the | |||
| ## destination. This reduces performance. | |||
| mhomed=0 | |||
| ## YOU SHOULD NOT HAVE TO CHANGE THESE! | |||
| ## By setting MY_IP_ADDRESS above these will resolve | |||
| ## to the proper bindings. These are here | |||
| ## for those with complex layouts who know | |||
| ## what they are doing :) | |||
| #!substdef "!UDP_SIP!udp:MY_IP_ADDRESS:5060!g" | |||
| #!substdef "!TCP_SIP!tcp:MY_IP_ADDRESS:5060!g" | |||
| #!substdef "!TLS_SIP!tls:MY_IP_ADDRESS:5061!g" | |||
| #!substdef "!UDP_AGL_SIP!udp:MY_IP_ADDRESS:7000!g" | |||
| #!substdef "!TCP_AGL_SIP!tcp:MY_IP_ADDRESS:7000!g" | |||
| #!substdef "!TLS_AGL_SIP!tls:MY_IP_ADDRESS:7001!g" | |||
| #!substdef "!TCP_WS!tcp:MY_IP_ADDRESS:8080!g" | |||
| #!substdef "!TLS_WSS!tls:MY_IP_ADDRESS:8443!g" | |||
| ## YOU SHOULD NOT HAVE TO CHANGE THESE! | |||
| ## This will bind the default SIP listeners | |||
| ## as determined above. The tls-role and | |||
| ## websocket-role will use the appropriate | |||
| ## definitions if enabled. These are here | |||
| ## for those with complex layouts who know | |||
| ## what they are doing :) | |||
| listen=UDP_SIP | |||
| listen=TCP_SIP | |||
| listen=UDP_AGL_SIP | |||
| listen=TCP_AGL_SIP | |||
+ 2
- 0
kamailio/nat-traversal-role.cfg
View File
+ 12
- 7
kamailio/presence-role.cfg
View File
+ 3
- 4
kamailio/registrar-role.cfg
View File
+ 0
- 8
kamailio/roles.cfg
View File
| @ -1,8 +0,0 @@ | |||
| ####### Roles ######## | |||
| #!trydef DISPATCHER-ROLE | |||
| #!trydef NAT-TRAVERSAL-ROLE | |||
| #!trydef REGISTRAR-ROLE | |||
| #!trydef PRESENCE-ROLE | |||
| # # #!trydef TRAFFIC-FILTER-ROLE | |||
| ## vim:set tabstop=4 softtabstop=4 shiftwidth=4 expandtab | |||
+ 8
- 0
kamailio/tls-role.cfg
View File
| @ -0,0 +1,8 @@ | |||
| enable_tls = yes | |||
| listen=TLS_SIP | |||
| listen=TLS_ALG_SIP | |||
| ####### TLS Parameters ######### | |||
| loadmodule "tls.so" | |||
| modparam("tls", "config", "/etc/kazoo/kamailio/tls.cfg") | |||
+ 52
- 0
kamailio/tls.cfg
View File
| @ -0,0 +1,52 @@ | |||
| # | |||
| # $Id$ | |||
| # | |||
| # Example Kamailio TLS Configuration File | |||
| # | |||
| # This is the default server domain, settings | |||
| # in this domain will be used for all incoming | |||
| # connections that do not match any other server | |||
| # domain in this configuration file. | |||
| # | |||
| # We do not enable anything else than TLSv1 | |||
| # over the public internet. Clients do not have | |||
| # to present client certificates by default. | |||
| # | |||
| [server:default] | |||
| method = SSLv23 | |||
| verify_certificate = no | |||
| require_certificate = no | |||
| #crl = /etc/kazoo/kamailio/certs/crl.pem | |||
| certificate = /etc/kazoo/kamailio/certs/cert.pem | |||
| private_key = /etc/kazoo/kamailio/certs/key.pem | |||
| ca_list = /etc/kazoo/kamailio/certs/ca.pem | |||
| # This is the default client domain, settings | |||
| # in this domain will be used for all outgoing | |||
| # TLS connections that do not match any other | |||
| # client domain in this configuration file. | |||
| # We require that servers present valid certificate. | |||
| # | |||
| [client:default] | |||
| verify_certificate = no | |||
| require_certificate = no | |||
| # This is an example server domain for TLS connections | |||
| # received from the loopback interface. We allow | |||
| # the use of SSLv2 and SSLv3 protocols here, we do | |||
| # not require that clients present client certificates | |||
| # but if they present it it must be valid. We also use | |||
| # a special certificate and CA list for loopback | |||
| # interface. | |||
| # | |||
| #[server:127.0.0.1:5061] | |||
| #method = SSLv23 | |||
| #verify_certificate = yes | |||
| #require_certificate = no | |||
| #private_key = /etc/kazoo/kamailio/certs/local_key.pem | |||
| #certificate = /etc/kazoo/kamailio/certs/local_cert.pem | |||
| #verify_depth = 3 | |||
| #ca_list = /etc/kazoo/kamailio/certs/local_ca.pem | |||
| #crl = /etc/kazoo/kamailio/certs/local_crl.pem | |||
+ 137
- 0
kamailio/websockets-role.cfg
View File
| @ -0,0 +1,137 @@ | |||
| tcp_accept_no_cl=yes | |||
| listen=TCP_WS | |||
| #!ifdef TLS-ROLE | |||
| listen=TLS_WSS | |||
| #!endif | |||
| ######## NAT Traversal module - signaling functions ######## | |||
| #!ifndef NATHELPER-LOADED | |||
| #!trydef NATHELPER-LOADED | |||
| loadmodule "nathelper.so" | |||
| #!endif | |||
| ######## Generic Hash Table container in shared memory ######## | |||
| modparam("htable", "htable", "websockets=>size=16;autoexpire=7200") | |||
| ######## Basic HTTP request handling ######## | |||
| loadmodule "xhttp.so" | |||
| ######## Websocket module ######## | |||
| loadmodule "websocket.so" | |||
| modparam("websocket", "keepalive_mechanism", 0) | |||
| modparam("websocket", "keepalive_timeout", 30) | |||
| modparam("websocket", "keepalive_processes", 1) | |||
| modparam("websocket", "keepalive_interval", 1) | |||
| modparam("websocket", "ping_application_data", "Kazoo encourages you to keep alive") | |||
| modparam("websocket", "sub_protocols", 1) | |||
| ####### Websocket Logic ######## | |||
| route[HANDLE_WEBSOCKETS] | |||
| { | |||
| # Do NAT traversal stuff for requests from a WebSocket | |||
| # connection - even if it is not behind a NAT! | |||
| # This won't be needed in the future if Kamailio and the | |||
| # WebSocket client support Outbound and Path. | |||
| if (nat_uac_test(64)) { | |||
| xlog("L_INFO", "$ci|log|this is a websocket request\n"); | |||
| force_rport(); | |||
| if (is_method("REGISTER")) { | |||
| fix_nated_register(); | |||
| } else { | |||
| if (!add_contact_alias()) { | |||
| xlog("L_INFO", "$ci|stop|error aliasing contact <$ct>\n"); | |||
| sl_send_reply("400", "Bad Request"); | |||
| exit; | |||
| } | |||
| } | |||
| } | |||
| } | |||
| route[NAT_WEBSOCKETS_CORRECT] | |||
| { | |||
| # Do NAT traversal stuff for replies to a WebSocket connection | |||
| # - even if it is not behind a NAT! | |||
| # This won't be needed in the future if Kamailio and the | |||
| # WebSocket client support Outbound and Path. | |||
| if (nat_uac_test(64)) { | |||
| xlog("L_INFO", "$ci|log|this is a websocket request\n"); | |||
| add_contact_alias(); | |||
| } | |||
| } | |||
| event_route[xhttp:request] | |||
| { | |||
| set_reply_close(); | |||
| set_reply_no_connect(); | |||
| if (!($rm =~ "GET")) { | |||
| xlog("L_INFO", "websocket|log|rejecting HTTP request $rm from $si:$sp\n"); | |||
| xhttp_reply("405", "Method Not Allowed", "", ""); | |||
| exit; | |||
| } | |||
| if (!($hdr(Connection) =~ "Upgrade")) { | |||
| xlog("L_INFO", "websocket|log|rejecting HTTP connection $hdr(Connection) request from $si:$sp\n"); | |||
| xhttp_reply("400", "Bad Request", "", ""); | |||
| exit; | |||
| } | |||
| if (!($hdr(Upgrade) =~ "websocket")) { | |||
| xlog("L_INFO", "websocket|log|rejecting HTTP upgrade $hdr(Upgrade) request from $si:$sp\n"); | |||
| xhttp_reply("400", "Bad Request", "", ""); | |||
| exit; | |||
| } | |||
| if (!($hdr(Sec-WebSocket-Protocol) =~ "sip")) { | |||
| xlog("L_INFO", "websocket|log|rejecting request for websocket protocol $hdr(Sec-WebSocket-Protocol) from $si:$sp\n"); | |||
| xhttp_reply("400", "Bad Request", "", ""); | |||
| exit; | |||
| } | |||
| #!ifdef MY_WEBSOCKET_DOMAIN | |||
| if (!($hdr(Origin) =~ "MY_WEBSOCKET_DOMAIN")) { | |||
| xlog("L_INFO", "websocket|log|rejecting HTTP request with unknown origin $hdr(Origin) from $si:$sp\n"); | |||
| xhttp_reply("400", "Bad Request", "", ""); | |||
| exit; | |||
| } | |||
| #!endif | |||
| if($sht(websockets=>$si::count) == $null) { | |||
| $var(count) = 1; | |||
| } else { | |||
| $var(count) = $sht(websockets=>$si::count) + 1; | |||
| } | |||
| if($var(count) > 50) { | |||
| xlog("L_WARN", "websocket|log|$si:$sp is at the maximum allowable sockets per IP, rejecting request for another websocket\n"); | |||
| xhttp_reply("403", "Forbidden", "", ""); | |||
| exit; | |||
| } | |||
| if (ws_handle_handshake()) { | |||
| $sht(websockets=>$si::count) = $var(count); | |||
| xlog("L_INFO", "websocket|log|opened websocket $var(count) of 50 for $si:$sp\n"); | |||
| exit; | |||
| } | |||
| xlog("L_INFO", "websocket|log|unhandled HTTP request $rm from $si:$sp\n"); | |||
| xhttp_reply("404", "Not Found", "", ""); | |||
| } | |||
| event_route[websocket:closed] { | |||
| if($sht(websockets=>$si::count) == $null) { | |||
| xlog("L_INFO", "websocket|log|closed websocket from $si:$sp\n"); | |||
| exit(); | |||
| } | |||
| $var(count) = $sht(websockets=>$si::count) - 1; | |||
| if ($var(count) < 1) { | |||
| xlog("L_INFO", "websocket|log|$si:$sp closed last websocket to that IP\n"); | |||
| $sht(websockets=>$si::count) = $null; | |||
| } else { | |||
| $sht(websockets=>$si::count) = $var(count); | |||
| xlog("L_INFO", "websocket|log|closed websocket from $si:$sp, $var(count) remaining from that IP\n"); | |||
| } | |||
| } | |||