[OpenSIPS-Users] opensips-cp CDR correlation

[Adrian Georgescu]

On Apr 30, 2009, at 12:28 PM, Iñaki Baz Castillo wrote:

> 2009/4/30 Adrian Georgescu <ag at ag-projects.com>:
>> The more load you have at some moment in time you need to add more  
>> servers.
>> The curent design allows MP2 to handle several thousands of  
>> simultaneous
>> sessions. Anyway, far from trying to advocate its load capabilities  
>> the
>> question we all try to find the answer for is:
>>
>> With a media relay in the path the accounting works deterministically
>> regardless of SIP client behaviour with the penalty of bandwidth  
>> utilization
>> in the relay location. Do you have another solution that works  
>> reliable and
>> deterministically in any case (again 100% success) without it?
>
> As I've already explained before:
>
> Using a SIP transparent B2BUA (instead or behind a proxy) which
> performs SST on both legs and does accounting when SST expires in some
> leg or when it receives a correct BYE.
>
> A B2BUA is not vulnerable as a SIP proxy. If a B2BUA receives a BYE it
> won't route it based on the BYE headers/RURI (risk!!!),

You can use the dialog module to do the same and generate your own  
correct BYEs instead of relaying them, couldn't you?

> instead it
> will generate a new BYE for the other leg => the gateway. Any spoofed
> BYE sent by an attacker just could get:
> a) The B2BUA consideres this BYE as invalid so:
>  a.1) The BYE is rejected with "400 XXX" and the call remains active.

You have full control over the reply route and can do all you describe  
in the proxy, can't you?

>  a.2) The B2BUA detects some attack and decides to terminates the
> call (does acc and sends BYE to gateway).

What can a B2BUA detect that the proxy cannot? You can inspect all  
headers and perform acc and send BYE from the proxy too.

>
> b)  The B2BUA consideres this BYE as valid so terminates the call
> (does acc and sends BYE to gateway).

So can the proxy, can't he?

>
> PD: No, I've not this scenario working, it's just theory.
>
>
> -- 
> Iñaki Baz Castillo
> <ibc at aliax.net>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/users/attachments/20090430/eccd9726/attachment.htm