Up to Discussions in OpenSBC
9 Replies Last post: Jun 7, 2007 11:33 AM by blackeye1010  
Click to view dric's profile  
dric
4 posts since
May 10, 2007

May 10, 2007 12:53 PM

OpenSBC as complete SBC for a softswitch

Dear all,

I vould like to use openSBC in order to make it a 'frontend' to one PortaSIP (www.portaone.com/products/portasip/) softswitch. This Softswitch act both as a registrar and as an UAS for my sipphone when I want to route call by its way.

My PortaSIP softswitch is on a private network. I would like to authorize sipphone on the internet to use it. For that purpose, I am looking at openSBC in order to have a b2bua allowing my sipphones to register on PortaSIP and also to issue calls on it.

I have tried to configure openSBC as a b2bua with upper registration in order to have it forward all sip requests coming from my phones, and in order to have several opensbc boxes in front of my softswitch so that I can deal with a very important load.
I would like to declare my opensbc boxes in my DNS so that they appear as registrar for my domain and so that I can add new boxes without having to reconfigure the sipphones. On the phones, I declare their domain as this domain.

In order to have everything working fine, I need to have all requests (register, invite,...) forwarded to my PortaSIP softswitch. I though that 'b2bua with upper registration' was the right option for that. BUT if I  declare my opensbc boxes in my DNS as registrar for my domain, openSBC just think that it have to authenticate the phones and it decides not to forward the requests to my softswitch. Is it the right behaviour ? Don't you think that every REGISTER request should be forwarded accorded to rules  defined in  'Upper Registration Routes' when mode is set to 'b2bua with upper registration', even if DNS says that our opensbc is registrar for the domain ? If not, is is possible to add something like a checkbox in the general parameters so that openSBC never decide to act as a registrar and always try to forward REGISTER request according to 'Upper Registration Routes'.

Having that behaviour could enable using openSBC as a frontend to every device running both registrar and UAS hosted on a private lan. That would be great !

I hope that this question would be of some interest for you. Feel free to contact me if you need more information.

Best regards,
Cedric

Click to view joegen's profile  
joegen
125 posts since
Apr 28, 2007
1. May 10, 2007 9:44 PM in response to: dric
Re: OpenSBC as complete SBC for a softswitch

Correct.  B2BUpperReg is the correct setting for your topology.   In this mode, if you point your domains to resolve to OpenSBC, OpenSBC would think it is authoritative of that domain and would therefore try to authenticate the calls.  For upper registration to work, you need to point the domains to PortaSIP.  And set upper registration routes to that domain.

-- Joegen --
Click to view dric's profile  
dric
4 posts since
May 10, 2007
2. May 11, 2007 4:54 AM in response to: joegen
Re: OpenSBC as complete SBC for a softswitch
Thank you for that answer. That is what I have done and it 'quite' works. 'Quite' because I have encounter a strange behaviour :
- OpenSBC behave as a B2BUA with Upper registration for domain 'd', it consider 'd' as a trusted domain and add n 'opensbc route' declared as sip:@d sip::5060
- my sipphone register to domain 'd' and it is declared to use opensbc as proxy : it works. Every REGISTER requests goes though openSBC and sipphone get authenticated.
- Opensbc routes each call coming from Portasip to the sipphone perfectly. Media proxy works fine. Great :-)
- for calls coming from my sipphone :
  SIPPhone issue an INVITE
  this INVITE is forwarded to PortaSIP following the opensbc route
  PortaSIP answers an 'SIP/2.0 401 Unauthorized' because no authentication information are available in the request
  Here is the problem : OPENSBC TRANSLATE IT INTO A 'SIP/2.0 407 Proxy Authentication Required'. As a result, my sipphone authenticate with a 'Proxy-Authorization:' header.
  This answers is forwarded to my PortaSIP which is waiting for a 'Authorization:' header because it issued a 401 error code. As a result, PortaSIP does not authenticate my phone and call can not be established.

Do you think that it is normal to concert 401 responses to 407 responses when openSBC is not used as a proxy but as a B2BUA ? I do not think so but perhaps am I missing some other point ?

In fact, that conversion make it impossible for me to use opensbc as I wish. do you think that it would be possible to take my problem into account and at least offer the choice to convert or not 401 t0 407, depending of the targetted use for opensbc ?

thanks in advance,
best regards,
Cedric
Click to view joegen's profile  
joegen
125 posts since
Apr 28, 2007
3. May 11, 2007 8:57 AM in response to: dric
Re: OpenSBC as complete SBC for a softswitch
Congratualations!  You just found a genuine bug.   Fix is now in CVS.  Thanks for the bug report.
Click to view dric's profile  
dric
4 posts since
May 10, 2007
4. May 11, 2007 11:04 AM in response to: joegen
Re: OpenSBC as complete SBC for a softswitch
It works now perfectly. Thank you for correcting this bug so quickly

Best regards,
Cedric
Click to view bakermd's profile  
bakermd
1 posts since
Jun 5, 2007
5. Jun 5, 2007 10:07 AM in response to: joegen
Re: OpenSBC as complete SBC for a softswitch
I was exhibiting the exact same issue, so I built from CVS yesterday (6/4/07) but now the issue is that all calls I try to place return 403 Forbidden. Calls worked before the rebuild, and the config has not changed.

Thanks!
- Mark Baker
Click to view hsack's profile  
hsack
1 posts since
Jun 6, 2007
6. Jun 6, 2007 12:51 AM in response to: bakermd
Re: OpenSBC as complete SBC for a softswitch
I am seeing the same issue. In any OpenSBC mode it looks like it does not follow the Upper Registration Routes. OpenSBC always attempts to auth the incoming registration via it's internal database.

Any suggestions on how I might be able to get past this issue?
Click to view joegen's profile  
joegen
125 posts since
Apr 28, 2007
7. Jun 6, 2007 10:52 AM in response to: hsack
Re: OpenSBC as complete SBC for a softswitch
Hi see my recent forum post

http://www.opensourcesip.org:8080/jiveforums/thread.jspa?threadID=609&tstart=0
Click to view joegen's profile  
joegen
125 posts since
Apr 28, 2007
8. Jun 6, 2007 10:56 AM in response to: bakermd
Re: OpenSBC as complete SBC for a softswitch
hmmmn, this is defintely not an expected behavior.   Make sure you are using the latest oss-application.conf.xml.  If your problem persists after doing this, please subscribe to the developer mailing list at https://lists.sourceforge.net/lists/listinfo/opensipstack-devel and post a level 5 log.

NOTE: please do not post the log here.  It's just too big for a forum post.



Mark Baker wrote:
I was exhibiting the exact same issue, so I built from CVS yesterday(6/4/07) but now the issue is that all calls I try to place return 403Forbidden. Calls worked before the rebuild, and the config has notchanged.

Thanks!
- Mark Baker
Click to view blackeye1010's profile  
blackeye1010
5 posts since
May 30, 2007
9. Jun 7, 2007 11:33 AM in response to: joegen
Re: OpenSBC as complete SBC for a softswitch
that link for subscription to the devel ml is giving an error :
This was at 16:31 GMT
===CUT

Bug in Mailman version 2.1.8

We're sorry, we hit a bug!

Please inform the webmaster for this site of thisproblem. Printing of traceback and other system information has beenexplicitly inhibited, but the webmaster can find this information in theMailman error logs.


===CUT

Actions

More Like This