[OpenSIPS-Users] [NEW] Topology Hiding Module

Vlad Paiu vladpaiu at opensips.org
Wed Mar 11 18:13:59 CET 2015


Hello,

I am happy to announce the new topology_hiding module.

Topology hiding is usually utilized as an approach to enhance SIP 
network security. Since, in regular SIP traffic, critical IP address 
data is forwarded to other networks, the concern is that third parties 
can use that information in order to direct attacks at your internal SIP 
network.

The new topology_hiding module strips and restores the headers that 
contain topology information (Via, Record-Route, Route and Contact 
headers) , and optionally it can also change the Call-ID of the requests.

Compared to the topology hiding solution offered by the B2B modules, it 
has the great advantage that it can be used together with other script 
functionalities that were previously incompatible ( eg. dialog vars & 
profiles, accounting, etc.).
Compared to the previous solution of topology hiding which was 
integrated into the dialog module ( which only supported topology hiding 
for INVITE based dialogs ), the new module can work in stand-alone mode 
as well ( without dialog support ), thus allowing to do topology hiding 
for all types of dialogs ( eg. Presence dialogs ) and also for 
standalone initial requests ( eg. SIP MESSAGE ).

Find the module readme at [1] and a tutorial with a script example at [2].

Testing and feedback are very much welcome.

[1] http://www.opensips.org/html/docs/modules/2.1.x/topology_hiding.html
[2] http://www.opensips.org/Documentation/Tutorials-Topology-Hiding

Best Regards,

-- 
Vlad Paiu
OpenSIPS Developer
http://www.opensips-solutions.com




More information about the Users mailing list